Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wRZLws3qg7wDZYCK17W7tBijSwc.cer
File: wRZLws3qg7wDZYCK17W7tBijSwc.cer (raw, json)
Hash identifier: 4QbRwisT1ppWL3tZTA/P0Ae3dkNkubJQOxGGyHXx3e4=
Subject key identifier: C1:16:4B:C2:CD:EA:83:BC:03:65:80:8A:D7:B5:BB:B4:18:A3:4B:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B3572FD7E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/d23df1-07c8-4024-a186-48e1a9800202/1/wRZLws3qg7wDZYCK17W7tBijSwc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/d23df1-07c8-4024-a186-48e1a9800202/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jun 2022 11:14:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 50774
IP: 193.108.142.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770261899236 (0xb3572fd7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 20 11:14:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1164bc2cdea83bc0365808ad7b5bbb418a34b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:b0:b9:13:e9:bf:de:3e:0b:45:ff:3b:a6:
0a:1a:a1:a6:a2:6b:14:b9:26:78:fa:5b:cb:30:f8:
30:30:fe:a7:b3:01:76:39:6e:3c:78:05:0f:41:f2:
a5:49:b6:2e:04:13:99:ed:45:33:1d:5f:fd:a8:3d:
45:77:a0:1c:70:77:8e:c0:54:b8:9a:36:03:69:52:
d9:0e:c5:1c:71:9d:2f:18:ff:cb:0a:be:e6:2f:48:
a1:09:7b:ef:ed:17:4e:a5:d1:60:68:bb:b6:2c:21:
40:17:b9:32:3f:99:ad:77:31:78:d2:ab:7f:69:f3:
8e:1a:e5:aa:e4:99:00:e0:dd:bc:fc:f2:54:fe:72:
98:69:22:04:1d:02:f8:97:f2:23:20:67:ac:39:2f:
9b:1b:c4:54:8b:0f:48:b8:08:46:93:90:a6:6b:4c:
69:f5:71:cb:d5:a9:b4:63:2a:24:8f:f5:96:16:23:
e5:15:c8:d2:2b:58:d7:f6:4c:4b:fe:e4:4f:c2:c4:
86:41:86:96:2d:1a:1a:0f:72:32:bc:7d:bb:a9:2a:
c1:be:a9:72:f4:3e:76:40:cc:b4:c4:27:7a:0c:ce:
d1:7d:b3:80:1e:23:15:0b:47:7c:be:57:01:0b:a3:
0b:03:14:e6:f4:df:a5:b1:68:8c:15:cd:2d:60:1c:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:16:4B:C2:CD:EA:83:BC:03:65:80:8A:D7:B5:BB:B4:18:A3:4B:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d23df1-07c8-4024-a186-48e1a9800202/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d23df1-07c8-4024-a186-48e1a9800202/1/wRZLws3qg7wDZYCK17W7tBijSwc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.142.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50774
Signature Algorithm: sha256WithRSAEncryption
70:0e:a0:05:84:c3:e1:e1:c2:9f:b3:4f:0e:b1:c0:3a:c0:67:
78:7f:f1:7f:57:f6:2a:34:e0:82:b3:29:da:e8:08:60:7f:56:
4c:5a:d7:34:dc:e8:cd:17:d4:5f:6c:7a:26:6e:2f:78:db:06:
77:d3:81:e1:3d:e5:f3:46:69:9a:05:4b:24:c7:49:b1:8b:68:
cb:73:c1:d7:36:7c:d1:2d:01:09:5a:f0:3c:d2:a5:3e:20:a9:
50:f6:14:65:16:ab:83:9d:71:35:d6:a5:e9:53:72:2c:b7:04:
89:58:cf:ea:c0:56:09:f5:64:c3:29:6c:f5:e8:ac:5c:75:df:
72:35:27:34:8e:ea:b2:a1:80:c3:99:58:64:fd:2d:2f:ac:42:
0f:7d:84:d9:87:96:a7:35:37:16:b1:d2:e1:6c:6c:78:7f:9f:
6e:79:ff:b3:cc:87:c4:df:f7:89:f2:9e:91:c8:a1:e6:5b:b4:
96:36:a5:1d:33:35:f1:3d:5c:16:90:65:d6:60:89:7d:2f:6f:
75:a1:40:2e:54:57:05:83:bf:4e:c8:05:54:63:73:80:bc:39:
f2:4a:09:19:a5:f0:20:a0:ea:51:52:30:56:74:95:da:14:12:
20:96:b0:de:95:20:98:91:6a:0d:30:63:8d:8d:8e:f3:6e:1e:
f7:f7:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:51 2024 by rpki-client on console-fra.rpki-client.org