Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wCEHI7O-sLsF_9HtaHA3ohv3NfE.cer
File: wCEHI7O-sLsF_9HtaHA3ohv3NfE.cer (raw, json)
Hash identifier: lTzseTCjohT+lPI14sTCcOhrTXYooXJsv/dJcI5fwtI=
Subject key identifier: C0:21:07:23:B3:BE:B0:BB:05:FF:D1:ED:68:70:37:A2:1B:F7:35:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B1AD093021
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/b8a58c-7cec-4a4f-919c-da1c44f930c3/1/wCEHI7O-sLsF_9HtaHA3ohv3NfE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/b8a58c-7cec-4a4f-919c-da1c44f930c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 May 2022 08:53:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 56411
IP: 193.46.62.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763112271905 (0xb1ad093021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 13 08:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0210723b3beb0bb05ffd1ed687037a21bf735f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:46:d4:d7:62:c9:8f:16:32:ac:a6:51:c5:
bb:47:85:2a:70:eb:4e:fa:3f:46:7e:d6:fe:ec:b1:
6a:5b:54:18:ba:7c:2f:f4:90:73:12:3a:5c:f4:06:
a4:04:71:33:97:f1:ed:c0:cc:d0:a7:81:64:03:b0:
c0:ee:10:d4:db:35:fa:72:f1:31:77:90:bf:c5:45:
27:9e:d2:64:11:16:33:91:8c:cc:24:c3:40:76:e3:
49:5b:70:00:b6:d1:62:df:92:01:68:fe:73:0a:6f:
3a:a0:ed:df:b1:63:54:38:e5:9f:01:95:26:ae:38:
fd:c3:9c:ce:04:d9:a0:18:8b:79:81:d1:3c:1b:14:
a1:b8:30:06:32:a5:9c:72:ad:a5:73:e0:97:03:3c:
4a:d2:07:22:94:b3:68:19:d1:86:77:43:10:d8:29:
32:e7:14:01:46:3d:5f:1e:e2:76:f3:a9:80:a0:0e:
b0:a6:44:da:d3:69:81:30:ca:d8:15:f3:13:73:67:
2f:48:c6:ac:0c:32:8d:df:89:77:a1:1b:c7:9a:a6:
93:73:c9:3d:62:81:4e:8f:c5:87:86:7f:1d:ad:61:
25:c3:46:ea:f2:3f:50:3a:94:dd:df:79:9f:52:5a:
6a:a0:36:45:4f:fd:3c:b3:bc:6f:50:01:6f:8a:e9:
bb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:21:07:23:B3:BE:B0:BB:05:FF:D1:ED:68:70:37:A2:1B:F7:35:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8a58c-7cec-4a4f-919c-da1c44f930c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8a58c-7cec-4a4f-919c-da1c44f930c3/1/wCEHI7O-sLsF_9HtaHA3ohv3NfE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.62.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56411
Signature Algorithm: sha256WithRSAEncryption
48:5e:48:d1:01:e6:ea:da:32:b5:70:a3:7b:0f:80:7a:2f:f0:
94:77:26:75:ec:a4:e7:78:75:61:19:7c:ac:45:98:39:6c:70:
55:2b:35:dd:85:71:a2:32:af:85:af:10:3b:fd:a4:2a:06:d4:
50:1c:3e:d7:6d:44:10:4d:84:e2:39:5c:3c:e2:b6:89:18:48:
20:63:41:1e:95:e1:10:6f:6e:c7:9b:3d:76:b5:34:89:30:97:
da:da:d7:ed:ef:3f:df:49:78:e0:39:a6:da:ad:f2:0c:8f:64:
00:10:c9:dc:18:a6:1f:ac:3f:cf:4e:a8:32:e6:f4:1a:4c:31:
3e:7f:18:0c:45:4b:8d:f7:ad:de:fa:ae:4e:0b:20:cd:ab:42:
1e:14:b8:e9:96:1d:86:5a:f5:f5:2b:00:d1:53:b5:57:21:b8:
58:1b:69:1d:f9:c4:bd:79:ee:df:97:d8:07:45:2c:5a:30:de:
41:f9:de:08:c1:f6:73:ac:39:70:6a:f4:49:62:c2:32:bd:16:
38:d1:01:13:91:28:85:6c:45:72:a0:01:2c:e3:5c:42:c8:a7:
91:61:08:44:2e:54:34:43:e3:fa:28:79:8f:b8:95:c7:5e:09:
fa:f3:09:dc:e8:91:d4:af:98:e3:c5:ce:5d:6a:40:92:ab:ff:
0d:25:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:49 2024 by rpki-client on console-fra.rpki-client.org