Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wBcTc3taOcnO5xGoCWO49NDAcgg.cer
File: wBcTc3taOcnO5xGoCWO49NDAcgg.cer (raw, json)
Hash identifier: Es3Fr1Fek47N0cZ+bSohTWaJyKTgKLU6T44+3ZIPKO0=
Subject key identifier: C0:17:13:73:7B:5A:39:C9:CE:E7:11:A8:09:63:B8:F4:D0:C0:72:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A96BBCCCB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/ba2e57-88c5-48db-9179-a9b0d440bc7f/1/wBcTc3taOcnO5xGoCWO49NDAcgg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/ba2e57-88c5-48db-9179-a9b0d440bc7f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:57:12 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 205340
IP: 185.221.60.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727657008306 (0xa96bbcccb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c01713737b5a39c9cee711a80963b8f4d0c07208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:b3:57:fd:06:30:a5:7c:c7:71:02:52:f0:
8c:ec:a3:ea:9a:4a:ff:4a:e0:80:a5:3f:a4:dd:5a:
05:2e:2e:72:c2:a1:96:bb:5b:a4:d3:80:56:dd:1a:
ea:6c:73:b9:b5:94:25:23:3e:8d:29:35:15:69:c0:
ed:24:ab:80:4e:b3:42:42:b3:9c:6b:ab:94:d3:fd:
35:c7:64:d5:62:4e:c0:e0:12:d8:73:c4:7a:eb:df:
a2:52:17:8d:f7:26:52:8b:df:0e:6f:d3:88:1b:b6:
85:34:60:39:53:a4:0b:ef:d8:57:22:de:d5:92:99:
ac:32:9e:2f:22:9d:44:03:0c:8c:8f:c8:2a:f5:4d:
8e:25:2d:cd:18:3b:01:b5:d0:a8:a8:83:30:1a:b1:
8c:81:90:ab:b0:f7:d7:5b:85:38:54:b8:30:92:4c:
08:ef:85:d8:45:a3:c7:20:14:1c:b1:ab:41:3c:0c:
81:c7:06:6d:28:aa:d6:30:bd:66:f0:09:9d:8f:e7:
aa:d5:c5:df:7d:98:00:83:b5:df:0b:b3:8d:20:91:
3e:e1:59:f1:83:c7:f1:a9:52:82:45:53:c2:6c:e6:
db:b3:36:7f:1e:35:6e:29:f4:69:3f:41:f1:b1:82:
46:86:66:b6:82:cb:0c:04:1d:fc:7a:0c:fd:46:5b:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:13:73:7B:5A:39:C9:CE:E7:11:A8:09:63:B8:F4:D0:C0:72:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ba2e57-88c5-48db-9179-a9b0d440bc7f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ba2e57-88c5-48db-9179-a9b0d440bc7f/1/wBcTc3taOcnO5xGoCWO49NDAcgg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.60.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205340
Signature Algorithm: sha256WithRSAEncryption
72:4c:17:2b:29:b0:dc:58:90:2f:b6:3f:33:50:d4:b4:10:7b:
35:4d:17:0e:21:70:ed:1b:5f:06:13:18:89:e2:7c:fb:02:cc:
23:32:6d:5d:c3:e4:ba:74:31:52:43:bb:d7:23:90:55:79:0d:
bc:cc:d7:80:f8:82:19:83:07:68:b0:3f:ad:f4:d5:33:27:c7:
e5:74:15:5d:47:53:63:ce:04:2d:05:01:71:d7:15:9c:bc:b1:
f9:a3:76:1e:79:0e:25:b8:0e:07:cc:b5:12:08:bd:cc:59:14:
04:88:5c:0a:a1:56:81:79:ba:7d:a9:f7:6e:de:06:33:c4:ea:
c0:d8:ed:7f:c7:4e:6b:73:25:7d:a8:b0:60:77:a8:a1:eb:e0:
2f:dd:11:e2:20:0e:cd:7c:d3:45:16:0e:b6:57:d6:8c:62:0e:
66:d4:1e:4e:cf:a4:60:c1:41:ef:c3:23:60:45:31:1f:92:27:
6f:45:22:10:6e:23:5b:90:da:44:fc:f1:0e:0a:2b:e1:5a:78:
90:a0:a4:f5:fa:ce:d0:3b:79:f2:99:e3:77:1f:f6:c2:30:e0:
f5:7f:fc:ff:8c:11:6a:18:f6:94:be:dd:fd:6b:5b:df:7b:4f:
71:79:a2:59:84:c8:5a:47:da:aa:6d:6d:d4:4d:79:e9:ce:a9:
96:23:e2:77
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIGAKlrvMyyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTQ1NzEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjMDE3MTM3Mzdi
NWEzOWM5Y2VlNzExYTgwOTYzYjhmNGQwYzA3MjA4MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAx+OzV/0GMKV8x3ECUvCM7KPqmkr/SuCApT+k3VoFLi5y
wqGWu1uk04BW3RrqbHO5tZQlIz6NKTUVacDtJKuATrNCQrOca6uU0/01x2TVYk7A
4BLYc8R669+iUheN9yZSi98Ob9OIG7aFNGA5U6QL79hXIt7VkpmsMp4vIp1EAwyM
j8gq9U2OJS3NGDsBtdCoqIMwGrGMgZCrsPfXW4U4VLgwkkwI74XYRaPHIBQcsatB
PAyBxwZtKKrWML1m8Amdj+eq1cXffZgAg7XfC7ONIJE+4Vnxg8fxqVKCRVPCbObb
szZ/HjVuKfRpP0HxsYJGhma2gssMBB38egz9RlvF7QIDAQABo4ICoDCCApwwHQYD
VR0OBBYEFMAXE3N7WjnJzucRqAljuPTQwHIIMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkL2JhMmU1Ny04OGM1LTQ4ZGIt
OTE3OS1hOWIwZDQ0MGJjN2YvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvYmEyZTU3LTg4YzUtNDhkYi05
MTc5LWE5YjBkNDQwYmM3Zi8xL3dCY1RjM3RhT2NuTzV4R29DV080OU5EQWNnZy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCud08MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMiHDANBgkqhkiG
9w0BAQsFAAOCAQEAckwXKymw3FiQL7Y/M1DUtBB7NU0XDiFw7RtfBhMYieJ8+wLM
IzJtXcPkunQxUkO71yOQVXkNvMzXgPiCGYMHaLA/rfTVMyfH5XQVXUdTY84ELQUB
cdcVnLyx+aN2HnkOJbgOB8y1Egi9zFkUBIhcCqFWgXm6fan3bt4GM8TqwNjtf8dO
a3MlfaiwYHeooevgL90R4iAOzXzTRRYOtlfWjGIOZtQeTs+kYMFB78MjYEUxH5In
b0UiEG4jW5DaRPzxDgor4Vp4kKCk9frO0Dt58pnjdx/2wjDg9X/8/4wRahj2lL7d
/Wtb33tPcXmiWYTIWkfaqm1t1E156c6pliPidw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:42 2025 by rpki-client