Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wBzjVCm62F0ec0dJwCIo2zSZxB0.cer
File: wBzjVCm62F0ec0dJwCIo2zSZxB0.cer (raw, json)
Hash identifier: VZvcLag2ZyqOykhh0ZOQHDFYBnhzbF7bukar6C89cP0=
Subject key identifier: C0:1C:E3:54:29:BA:D8:5D:1E:73:47:49:C0:22:28:DB:34:99:C4:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C44AC669C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/ce82e1-6640-4b6a-a12e-0c62a11b6c66/1/wBzjVCm62F0ec0dJwCIo2zSZxB0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/ce82e1-6640-4b6a-a12e-0c62a11b6c66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:01:49 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.63.56.0/22
IP: 2a04:f300::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671167047324 (0x9c44ac669c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c01ce35429bad85d1e734749c02228db3499c41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:f8:0f:d4:14:13:42:0a:af:72:80:d7:5a:
18:10:e5:05:33:fd:c3:cf:3f:8a:3e:56:8f:2b:d2:
9d:03:39:bd:e4:9e:cd:3a:7f:3c:74:7c:1c:09:fe:
db:1a:7a:f5:f8:b7:f9:07:54:89:2f:10:23:97:0b:
f2:6d:85:a0:d5:5a:60:29:ef:b2:56:bb:88:ec:73:
10:9f:05:e5:47:c6:6f:44:01:1f:7c:d6:9e:b2:27:
79:2b:16:7a:01:bd:10:04:95:a4:6f:58:4c:e9:90:
53:0c:8a:03:32:d9:b9:f5:95:93:70:a7:56:eb:e2:
16:99:5c:80:82:a6:a3:b5:31:2c:0f:c9:d1:f0:c7:
a9:e2:5a:5e:d3:4a:6a:3b:0a:59:14:13:df:e3:49:
5c:c9:60:de:f9:42:75:6a:5b:e5:e8:09:9e:e9:66:
e0:fa:64:93:cd:de:68:46:ec:28:3e:03:20:30:fb:
4d:d7:8b:49:9f:83:66:a3:9d:8f:a3:df:7c:ea:35:
9b:74:8e:9a:02:cb:00:3d:7a:b5:7c:33:9f:a8:52:
7c:6c:40:92:45:e7:80:73:25:e3:ca:7a:c6:a3:2a:
f2:5f:bd:96:e1:c1:22:08:f1:6e:22:1d:e9:52:b4:
1a:36:95:9c:13:0a:0f:6b:aa:07:8a:c6:58:15:d9:
1e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1C:E3:54:29:BA:D8:5D:1E:73:47:49:C0:22:28:DB:34:99:C4:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ce82e1-6640-4b6a-a12e-0c62a11b6c66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ce82e1-6640-4b6a-a12e-0c62a11b6c66/1/wBzjVCm62F0ec0dJwCIo2zSZxB0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.56.0/22
IPv6:
2a04:f300::/32
Signature Algorithm: sha256WithRSAEncryption
9b:f4:8a:70:b1:79:90:bc:cb:29:85:12:c8:fa:c9:1b:1e:a9:
96:77:ad:7d:23:d9:ba:83:ee:83:a7:3a:a8:15:60:29:a3:75:
c0:b6:41:e6:7f:9a:25:6e:e9:e9:84:35:7f:04:90:4a:dd:5d:
69:f1:5f:dc:b6:04:c6:53:ff:92:c1:a8:58:e0:d3:66:aa:e5:
ee:15:a3:78:b3:cc:64:03:be:44:d2:ab:a5:ff:5c:fb:04:7f:
c6:e5:48:9b:75:eb:7f:40:00:12:10:e5:b1:dd:21:36:01:0e:
05:2f:1a:43:f7:8b:68:62:06:6e:2e:54:b7:a8:d2:9f:86:0e:
10:da:06:da:a0:6d:d7:a3:04:fc:5a:21:b8:2a:54:49:f2:f6:
d2:26:37:97:13:b6:fd:ee:6b:2d:87:dd:c0:f9:1e:99:1f:d0:
89:69:32:08:4a:51:63:34:e3:2b:9b:b3:f0:49:9a:fe:bf:e6:
31:5c:64:27:83:fb:3f:7c:18:8a:e3:9e:17:e9:e1:3d:d9:ef:
29:d4:00:9b:4a:e3:da:46:0a:71:56:b1:d4:40:5a:d5:c7:16:
ab:ea:58:53:15:5c:86:12:b2:90:ae:a2:2f:e5:c7:3d:5e:2a:
51:1c:bb:63:00:50:4a:69:4c:a0:b8:c3:af:e5:4a:63:22:4a:
4c:f4:c4:0b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAJxErGacMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDMwMTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjMDFjZTM1NDI5
YmFkODVkMWU3MzQ3NDljMDIyMjhkYjM0OTljNDFkMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAtH/4D9QUE0IKr3KA11oYEOUFM/3Dzz+KPlaPK9KdAzm9
5J7NOn88dHwcCf7bGnr1+Lf5B1SJLxAjlwvybYWg1VpgKe+yVruI7HMQnwXlR8Zv
RAEffNaesid5KxZ6Ab0QBJWkb1hM6ZBTDIoDMtm59ZWTcKdW6+IWmVyAgqajtTEs
D8nR8Mep4lpe00pqOwpZFBPf40lcyWDe+UJ1alvl6Ame6Wbg+mSTzd5oRuwoPgMg
MPtN14tJn4Nmo52Po9986jWbdI6aAssAPXq1fDOfqFJ8bECSReeAcyXjynrGoyry
X72W4cEiCPFuIh3pUrQaNpWcEwoPa6oHisZYFdke7wIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFMAc41QputhdHnNHScAiKNs0mcQdMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhL2NlODJlMS02NjQwLTRiNmEt
YTEyZS0wYzYyYTExYjZjNjYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvY2U4MmUxLTY2NDAtNGI2YS1h
MTJlLTBjNjJhMTFiNmM2Ni8xL3dCempWQ202MkYwZWMwZEp3Q0lvMnpTWnhCMC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCuT84MA0EAgACMAcDBQAqBPMAMA0GCSqGSIb3DQEBCwUAA4IBAQCb
9IpwsXmQvMsphRLI+skbHqmWd619I9m6g+6DpzqoFWApo3XAtkHmf5olbunphDV/
BJBK3V1p8V/ctgTGU/+SwahY4NNmquXuFaN4s8xkA75E0qul/1z7BH/G5Uibdet/
QAASEOWx3SE2AQ4FLxpD94toYgZuLlS3qNKfhg4Q2gbaoG3XowT8WiG4KlRJ8vbS
JjeXE7b97msth93A+R6ZH9CJaTIISlFjNOMrm7PwSZr+v+YxXGQng/s/fBiK454X
6eE92e8p1ACbSuPaRgpxVrHUQFrVxxar6lhTFVyGErKQrqIv5cc9XipRHLtjAFBK
aUyguMOv5UpjIkpM9MQL
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:42 2025 by rpki-client