Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zVeJTJnbnb90XmZKOg0nT-FuXa0.cer
File: zVeJTJnbnb90XmZKOg0nT-FuXa0.cer (raw, json)
Hash identifier: HSl0o7MSkjtzQe7bPMqiHnmCG0krybIfgrQT2CC9gwY=
Subject key identifier: CD:57:89:4C:99:DB:9D:BF:74:5E:66:4A:3A:0D:27:4F:E1:6E:5D:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A39D83D1F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/zVeJTJnbnb90XmZKOg0nT-FuXa0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:55:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 6734
AS: 47902
AS: 197664
IP: 31.223.240.0/20
IP: 46.19.232.0/21
IP: 46.254.232.0/21
IP: 79.143.112.0/20
IP: 82.193.32.0/19
IP: 89.189.48.0/21
IP: 92.245.160.0/22
IP: 92.245.168.0/21
IP: 92.245.180.0 -- 92.245.188.255
IP: 92.245.190.0/23
IP: 93.189.184.0/21
IP: 147.123.0.0/16
IP: 185.100.108.0/22
IP: 185.202.184.0/22
IP: 213.178.208.0 -- 213.178.221.255
IP: 2001:7f8:2::/48
IP: 2a00:1360::/32
IP: 2a02:9a8::/32
IP: 2a03:6800::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702722331121 (0xa39d83d1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd57894c99db9dbf745e664a3a0d274fe16e5dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:76:b8:30:a7:18:49:27:77:35:43:b6:17:
ea:fa:43:19:17:10:3f:b3:2e:02:57:1f:c3:b7:a0:
09:5b:45:21:0e:69:9a:fd:1d:d0:0f:19:24:f5:4b:
92:90:92:51:f7:c7:73:0a:f4:63:bd:91:85:c2:03:
8d:36:82:d8:dc:56:44:f8:6c:0f:2e:20:32:c1:75:
69:8f:04:46:06:40:e6:2d:8d:6e:7a:8d:de:ba:ef:
d7:da:75:9e:05:5d:20:e1:75:f7:26:ad:9d:39:cf:
0f:08:7c:ae:33:6c:9f:06:2d:28:1b:35:a8:5c:16:
da:cd:b5:6d:9b:9f:a7:de:db:da:47:1b:38:57:66:
60:e5:0e:97:91:fe:ca:d2:59:28:61:36:cc:7d:f4:
2c:08:b4:88:f4:6c:1a:00:ca:69:f0:6b:96:16:7b:
86:7b:16:3d:29:3d:3e:3f:35:6f:26:9a:29:f6:e4:
5e:09:5b:c2:ff:c8:fd:38:8f:25:d2:1d:c2:78:d7:
40:fb:4d:92:58:31:3a:07:94:f3:9a:05:97:3c:e7:
32:e0:4f:1a:ed:5f:6d:89:d4:97:fb:90:53:0b:1a:
64:c4:5f:aa:f3:e2:58:95:83:76:23:d8:85:68:ba:
b7:aa:8b:2f:7f:56:ea:68:15:d0:18:63:66:e3:e0:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:89:4C:99:DB:9D:BF:74:5E:66:4A:3A:0D:27:4F:E1:6E:5D:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/zVeJTJnbnb90XmZKOg0nT-FuXa0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.240.0/20
46.19.232.0/21
46.254.232.0/21
79.143.112.0/20
82.193.32.0/19
89.189.48.0/21
92.245.160.0/22
92.245.168.0/21
92.245.180.0-92.245.188.255
92.245.190.0/23
93.189.184.0/21
147.123.0.0/16
185.100.108.0/22
185.202.184.0/22
213.178.208.0-213.178.221.255
IPv6:
2001:7f8:2::/48
2a00:1360::/32
2a02:9a8::/32
2a03:6800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6734
47902
197664
Signature Algorithm: sha256WithRSAEncryption
b0:1e:74:4c:37:28:be:b9:00:6c:5b:5a:0d:36:87:db:d4:a0:
98:10:27:95:16:73:87:89:1a:53:fa:be:63:3e:19:aa:6d:a8:
46:11:f4:57:26:68:fb:33:b9:5d:52:55:da:fc:40:eb:f8:56:
84:23:d0:33:1e:0e:97:34:f2:82:cc:68:9b:61:81:a5:5e:72:
ec:15:37:82:69:d2:f2:63:96:11:7b:85:0e:cb:d3:bb:d2:c7:
52:3b:73:90:9d:97:a8:05:9b:83:73:26:b2:9c:81:ea:a2:e2:
25:3b:f4:81:50:9b:89:1b:b1:b9:d0:e0:3f:e7:e9:75:05:b5:
6f:3e:a3:41:5d:16:54:fc:f7:57:99:b8:e5:dc:b6:cd:c2:56:
6e:3a:ce:b5:88:ed:fb:0b:f1:cf:36:26:a5:0b:03:13:4c:95:
0d:bd:72:90:aa:ff:7b:2a:ed:3b:a6:73:a4:be:de:0f:cf:0c:
38:8a:2a:d4:8d:3a:e3:ea:c8:5d:7f:1d:b8:27:ca:75:3d:f8:
b9:8f:6f:94:c9:d3:75:c0:e8:28:c3:0a:b4:0f:6a:a3:2c:89:
17:64:be:d9:06:f9:d9:0c:d3:aa:04:d6:3c:ef:61:08:ba:10:
99:84:2a:33:67:5c:0f:a2:78:7a:64:bb:9e:76:bd:89:82:c1:
7b:ed:c2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:17 2024 by rpki-client on console-fra.rpki-client.org