Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wjt-cUHnZ-cqTmeA5nP2HNqF6vM.cer
File: wjt-cUHnZ-cqTmeA5nP2HNqF6vM.cer (raw, json)
Hash identifier: H8Ow7iAJr0J3p08/Q6pCHDlDP+BjWMiv+wQHyn4gBgs=
Subject key identifier: C2:3B:7E:71:41:E7:67:E7:2A:4E:67:80:E6:73:F6:1C:DA:85:EA:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A7451440F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/9d60f1-5d78-403d-84a5-b399f6c88693/1/wjt-cUHnZ-cqTmeA5nP2HNqF6vM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/9d60f1-5d78-403d-84a5-b399f6c88693/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:58:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 202829
IP: 185.152.188.0/22
IP: 2a07:80c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718418493680 (0xa7451440f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c23b7e7141e767e72a4e6780e673f61cda85eaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:36:44:e9:69:5e:a1:80:cc:15:56:43:ae:
11:6a:f3:60:f3:bb:e8:eb:9b:5b:a0:8d:b9:00:36:
9e:92:53:a9:64:c8:a7:33:20:7d:49:84:43:fd:2c:
fd:7d:b0:01:24:63:7a:11:41:9f:63:cb:a1:ad:e6:
19:4f:1e:ec:64:05:de:12:1e:fd:6e:2a:80:81:47:
1f:b6:68:94:cb:6e:de:d1:a3:5d:74:9e:72:8f:da:
20:38:15:62:82:58:0d:53:30:c7:ed:86:7a:36:03:
79:5c:ea:74:3b:63:07:9d:5a:93:58:0a:f6:0f:fe:
a6:5b:86:7b:8c:b2:45:f5:d4:d5:46:14:82:15:fc:
f6:db:f3:02:ba:e1:01:b7:6b:37:fa:07:be:f7:d0:
85:b5:56:1d:ca:5b:d6:04:59:7f:25:01:c2:f4:c8:
7b:b2:ce:84:22:17:d9:17:45:47:26:64:5b:21:b5:
21:eb:69:59:6f:47:71:4a:81:8c:3c:4f:08:c2:06:
3d:a4:a7:0a:a4:55:44:9d:5b:a0:44:65:bc:5e:0a:
f5:01:3a:3e:49:bb:44:dc:82:ff:33:27:dc:8b:01:
b7:4a:f6:c8:b2:22:75:96:69:7f:64:1b:24:a9:8e:
f0:ff:a6:cc:08:64:2b:ad:ed:04:83:74:97:09:b0:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3B:7E:71:41:E7:67:E7:2A:4E:67:80:E6:73:F6:1C:DA:85:EA:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9d60f1-5d78-403d-84a5-b399f6c88693/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9d60f1-5d78-403d-84a5-b399f6c88693/1/wjt-cUHnZ-cqTmeA5nP2HNqF6vM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.188.0/22
IPv6:
2a07:80c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202829
Signature Algorithm: sha256WithRSAEncryption
13:c6:b0:e3:c3:3b:5f:86:f0:5a:8d:73:8f:52:4d:59:d1:79:
d6:6b:08:75:61:eb:eb:d8:b5:04:20:a3:40:65:b1:9e:50:1c:
d3:b9:f2:fc:09:81:d3:77:c7:42:8d:1f:19:33:94:52:47:fb:
5e:22:7d:65:15:b2:ad:9c:11:97:26:33:19:e3:4b:21:da:ac:
90:49:30:0c:62:c6:92:c8:3e:8a:41:a5:3a:58:ed:e9:1d:68:
38:91:18:01:fb:5c:3e:fa:dc:d5:fe:76:a5:d3:63:99:92:87:
4b:f6:e9:8e:ee:c4:69:5f:44:54:54:ba:95:83:9b:ac:b1:fd:
db:95:76:60:72:ba:69:f2:62:3e:a5:09:96:13:01:20:c2:c3:
9b:73:37:9a:55:3c:61:16:36:fd:1b:5c:8b:0c:25:65:2b:69:
1c:b8:91:3e:65:34:17:07:cc:85:7a:a8:aa:35:dc:2e:5e:81:
7e:d0:2a:ec:b1:b2:d7:af:2b:a6:48:4f:09:6e:96:f5:c8:b7:
64:63:bc:4e:65:a4:42:e8:c2:19:37:91:ca:5f:b8:80:36:72:
82:cc:dd:9d:18:a9:db:9c:63:cf:47:df:97:f1:0b:cd:8d:9c:
1a:91:40:86:1a:74:7f:54:3b:26:4d:99:c4:03:2e:b8:1e:a9:
73:66:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:53 2024 by rpki-client on console-fra.rpki-client.org