Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wNzx9yrHmp0CkgUHNBS6Wy8PYLc.cer
File: wNzx9yrHmp0CkgUHNBS6Wy8PYLc.cer (raw, json)
Hash identifier: QY8aVxJomtdVyIMh44lla6womJleK0FszyYkvEU/AIg=
Subject key identifier: C0:DC:F1:F7:2A:C7:9A:9D:02:92:05:07:34:14:BA:5B:2F:0F:60:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D37DB1A08
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/8636a8-8bfd-4b1f-937c-5802ec394188/1/wNzx9yrHmp0CkgUHNBS6Wy8PYLc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/8636a8-8bfd-4b1f-937c-5802ec394188/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:00:52 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.134.128.0/22
IP: 185.134.139.0/24
IP: 2a07:c300::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675246971400 (0x9d37db1a08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0dcf1f72ac79a9d029205073414ba5b2f0f60b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:c7:be:2d:08:c4:31:5b:d3:1f:ea:12:4b:
f4:d6:2f:ed:d8:4c:7f:16:85:5e:65:0b:3f:a4:8b:
34:2d:90:77:75:8d:cd:47:8e:32:64:c4:5b:c7:b0:
8f:7e:7e:1c:a4:7b:0e:5d:ff:e7:66:3f:04:2d:65:
96:2f:d8:73:3f:a9:f1:d1:99:6e:2c:a7:62:25:d3:
e9:6b:ec:52:72:ff:d7:c9:e7:1a:10:43:9a:2f:94:
f1:22:f7:d8:b0:f1:92:0f:41:c1:47:53:07:d6:61:
0d:a9:73:30:bc:d7:36:02:4f:a3:5c:af:a2:9b:41:
c4:36:65:0a:60:91:9a:67:ad:a1:34:8d:aa:4f:f8:
bd:f0:a8:98:0b:84:c0:f3:aa:7b:24:6d:33:69:8c:
01:1b:f2:16:44:e9:93:8b:98:92:96:07:a9:5a:6e:
c0:64:4d:d7:88:86:03:e4:d5:bb:52:72:b5:49:b5:
07:9e:8f:35:8d:5a:cc:a1:e4:17:34:79:ed:a3:05:
f8:8b:6a:d9:a5:b0:93:63:56:54:ab:6c:30:c1:ad:
ee:0b:4d:96:3d:cf:31:45:50:c5:9a:d9:3f:45:c7:
1b:46:b4:12:a8:24:87:5f:d4:86:94:8b:06:05:4c:
09:41:c6:6a:75:73:49:62:67:9a:4f:9f:8b:cf:2d:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DC:F1:F7:2A:C7:9A:9D:02:92:05:07:34:14:BA:5B:2F:0F:60:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8636a8-8bfd-4b1f-937c-5802ec394188/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8636a8-8bfd-4b1f-937c-5802ec394188/1/wNzx9yrHmp0CkgUHNBS6Wy8PYLc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.128.0/22
185.134.139.0/24
IPv6:
2a07:c300::/29
Signature Algorithm: sha256WithRSAEncryption
6b:ad:1c:79:1a:f3:73:03:29:c7:b6:87:ae:be:83:20:8b:21:
e1:5b:63:b2:26:26:ec:f9:32:31:c1:df:9a:e1:40:b6:17:12:
c1:8a:3f:76:9c:68:77:bb:2f:53:f4:5c:95:e6:c4:41:fe:3f:
64:49:f9:a5:d4:cb:3a:e5:1a:36:4a:9d:de:97:77:4a:1e:ec:
87:a2:12:38:b2:78:e5:ce:4c:31:55:50:58:b4:79:b1:e8:ff:
ff:d5:c7:bf:7b:53:c8:d1:4d:7c:e9:86:16:84:49:e8:bf:a3:
de:8b:cd:64:8f:76:88:44:86:26:4f:ec:07:6e:40:ce:be:fc:
75:7c:26:83:ae:89:80:f9:a1:13:9f:ab:92:af:c9:44:6d:8e:
53:e4:27:8e:d1:c9:63:5a:d7:96:21:e0:2b:82:de:bb:53:63:
72:f7:d6:b2:b6:81:30:66:ce:03:22:13:54:93:47:c7:85:d1:
d5:e3:66:7b:3e:69:9e:ab:f5:78:86:ef:26:6d:6e:12:1f:0b:
2f:85:6c:b2:07:2b:0f:7a:cf:f4:ac:c8:9b:06:29:32:85:ff:
c3:87:32:b8:dd:29:c4:56:95:47:7c:76:27:16:bf:64:ef:21:
37:dd:09:42:65:33:4e:50:bd:44:4a:7f:b3:b6:30:83:7b:7b:
e2:01:92:b5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIGAJ032xoIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDQwMDUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjMGRjZjFmNzJh
Yzc5YTlkMDI5MjA1MDczNDE0YmE1YjJmMGY2MGI3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAqDPHvi0IxDFb0x/qEkv01i/t2Ex/FoVeZQs/pIs0LZB3
dY3NR44yZMRbx7CPfn4cpHsOXf/nZj8ELWWWL9hzP6nx0ZluLKdiJdPpa+xScv/X
yecaEEOaL5TxIvfYsPGSD0HBR1MH1mENqXMwvNc2Ak+jXK+im0HENmUKYJGaZ62h
NI2qT/i98KiYC4TA86p7JG0zaYwBG/IWROmTi5iSlgepWm7AZE3XiIYD5NW7UnK1
SbUHno81jVrMoeQXNHntowX4i2rZpbCTY1ZUq2wwwa3uC02WPc8xRVDFmtk/Rccb
RrQSqCSHX9SGlIsGBUwJQcZqdXNJYmeaT5+Lzy2KiwIDAQABo4ICmTCCApUwHQYD
VR0OBBYEFMDc8fcqx5qdApIFBzQUulsvD2C3MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzg2MzZhOC04YmZkLTRiMWYt
OTM3Yy01ODAyZWMzOTQxODgvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvODYzNmE4LThiZmQtNGIxZi05
MzdjLTU4MDJlYzM5NDE4OC8xL3dOeng5eXJIbXAwQ2tnVUhOQlM2V3k4UFlMYy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCuYaAAwQAuYaLMA0EAgACMAcDBQMqB8MAMA0GCSqGSIb3DQEBCwUA
A4IBAQBrrRx5GvNzAynHtoeuvoMgiyHhW2OyJibs+TIxwd+a4UC2FxLBij92nGh3
uy9T9FyV5sRB/j9kSfml1Ms65Ro2Sp3el3dKHuyHohI4snjlzkwxVVBYtHmx6P//
1ce/e1PI0U186YYWhEnov6Pei81kj3aIRIYmT+wHbkDOvvx1fCaDromA+aETn6uS
r8lEbY5T5CeO0cljWteWIeArgt67U2Ny99aytoEwZs4DIhNUk0fHhdHV42Z7Pmme
q/V4hu8mbW4SHwsvhWyyBysPes/0rMibBikyhf/DhzK43SnEVpVHfHYnFr9k7yE3
3QlCZTNOUL1ESn+ztjCDe3viAZK1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:45 2024 by rpki-client on console-ams.rpki-client.org