Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w_tfhIwT5rKrtpGWmKJFRa8Dpq8.cer
File: w_tfhIwT5rKrtpGWmKJFRa8Dpq8.cer (raw, json)
Hash identifier: iGTOlpGH9Ggv5dYhglQ1sPkr7FS4vHl0dZU4+YDuv24=
Subject key identifier: C3:FB:5F:84:8C:13:E6:B2:AB:B6:91:96:98:A2:45:45:AF:03:A6:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A101DB0588
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/3d676d-5140-4373-8d46-5f95d9d11b4f/1/w_tfhIwT5rKrtpGWmKJFRa8Dpq8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/3d676d-5140-4373-8d46-5f95d9d11b4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:03:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 41412
IP: 46.245.176.0/21
IP: 86.105.222.0/23
IP: 89.38.36.0/23
IP: 91.90.144.0/20
IP: 91.230.172.0/22
IP: 109.70.216.0/21
IP: 185.187.64.0/22
IP: 195.93.242.0/23
IP: 2a00:14e0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691520865672 (0xa101db0588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3fb5f848c13e6b2abb6919698a24545af03a6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:11:b0:ba:47:bf:d3:f4:fb:c4:bb:91:a1:
de:21:67:d6:b1:02:6c:e5:bc:26:62:05:9f:d5:3b:
1b:26:5c:82:98:04:8f:0d:29:f0:b3:cb:07:1d:75:
8e:69:86:3f:8a:43:8b:02:06:73:84:d8:a2:93:ec:
88:70:eb:06:7d:7a:21:7d:fb:5e:e1:b8:92:60:ee:
88:ab:3f:52:21:d2:37:ca:c6:67:ed:91:f8:d2:5b:
e3:72:4a:81:27:c9:6e:5a:52:aa:cf:05:84:e4:0c:
4d:3b:41:b4:ff:54:6a:06:b0:4c:63:8a:b7:b3:a1:
ef:88:c3:18:07:90:b2:eb:3d:72:c0:8e:fc:f3:4d:
56:be:d7:76:78:05:06:88:70:1a:16:8e:e9:e5:a7:
65:bf:1f:0e:14:33:7b:ba:9a:0d:2f:61:54:d4:16:
b6:37:16:79:df:d8:6c:f4:2f:2e:bb:b8:0f:98:5c:
b3:f4:39:6e:32:89:53:79:f8:0f:cb:37:fd:cc:a0:
a2:60:c9:f3:94:67:4a:25:c4:67:e8:18:3e:3d:9d:
cc:3b:e1:1c:3a:30:10:0e:9a:cf:11:9b:7d:a5:47:
d6:d7:5d:f4:a1:f3:62:5c:8b:8a:0e:a0:d1:e8:15:
28:49:15:79:87:34:cd:51:ac:b6:6c:45:14:ca:62:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FB:5F:84:8C:13:E6:B2:AB:B6:91:96:98:A2:45:45:AF:03:A6:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3d676d-5140-4373-8d46-5f95d9d11b4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3d676d-5140-4373-8d46-5f95d9d11b4f/1/w_tfhIwT5rKrtpGWmKJFRa8Dpq8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.176.0/21
86.105.222.0/23
89.38.36.0/23
91.90.144.0/20
91.230.172.0/22
109.70.216.0/21
185.187.64.0/22
195.93.242.0/23
IPv6:
2a00:14e0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41412
Signature Algorithm: sha256WithRSAEncryption
36:dc:9c:9e:95:5b:c1:b2:0b:64:c4:0c:68:73:5a:0e:ce:e4:
9f:21:4c:67:7b:9b:ea:b5:bc:1c:d7:1f:38:0c:68:1a:82:08:
fb:f2:2d:65:74:a7:07:c2:3c:c9:f8:f8:d9:51:b9:7d:18:9d:
38:00:b4:83:3c:18:c4:05:0f:47:c3:55:db:ec:da:85:04:92:
4f:14:bf:56:5d:65:89:50:36:48:fd:cb:2e:87:62:59:ee:b8:
c6:f9:48:3c:1e:95:05:5f:fb:0d:64:93:d8:a8:f9:b5:ec:bb:
d6:34:3b:b1:f2:65:bd:56:e3:dd:56:1b:43:4a:6e:f9:f1:ff:
f2:b0:73:04:81:30:16:c2:ee:31:35:03:ac:21:f6:c6:22:29:
c6:75:aa:f4:5d:8e:51:f3:ee:9d:85:d3:7d:4f:31:d9:bf:10:
78:31:fd:a1:b8:01:67:92:11:b7:6b:7b:21:d4:38:2d:a9:1c:
2b:26:a7:51:51:8e:05:be:5e:ea:bb:1f:98:9a:2f:9d:36:7c:
2b:35:4c:99:d0:0d:b5:53:d3:58:86:91:09:18:44:73:ba:03:
0e:5d:25:a4:08:3b:dd:a7:75:ea:19:bb:aa:f9:a6:5e:6b:e9:
18:29:fb:9d:43:e3:2b:da:e6:b6:75:fa:c2:a0:cf:d4:ba:57:
de:11:21:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:52 2024 by rpki-client on console-fra.rpki-client.org