Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zwc5Ad2FUPbCT8pGriZgkcgGSIY.cer
File: zwc5Ad2FUPbCT8pGriZgkcgGSIY.cer (raw, json)
Hash identifier: R51kVmAFInuvk8ZxcNKMoufpGXzDGGr5i+22SnlcbA4=
Subject key identifier: CF:07:39:01:DD:85:50:F6:C2:4F:CA:46:AE:26:60:91:C8:06:48:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99485425C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/8ab32c-2fcd-4b69-b01b-b090831c9c31/1/zwc5Ad2FUPbCT8pGriZgkcgGSIY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/8ab32c-2fcd-4b69-b01b-b090831c9c31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:55:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 42932
IP: 194.110.239.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658343470535 (0x99485425c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf073901dd8550f6c24fca46ae266091c8064886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:77:11:fe:e1:0b:69:d9:19:48:c2:27:9d:
2f:64:bf:ba:17:9f:da:6a:da:19:7e:2b:45:89:94:
c8:86:29:42:d2:0c:de:8c:b4:05:c5:39:b9:9c:84:
10:80:61:55:d3:3e:c3:90:87:76:23:c6:d6:47:96:
4a:c3:95:cd:55:38:26:b2:5c:b4:e4:9e:fa:50:60:
d6:51:87:17:70:29:55:88:de:1d:84:a6:3e:57:e3:
45:32:dc:1b:ff:bb:02:db:2c:f0:af:a4:db:88:ad:
0f:b6:26:85:8a:9d:d3:4e:e0:87:8a:a9:b0:61:3c:
1f:d3:e9:84:91:14:22:8a:77:2e:4b:b5:17:e5:6f:
71:e5:ba:98:22:be:c0:a9:1d:3e:14:ed:a3:71:ce:
fa:b0:d1:c5:0a:1f:fd:ef:68:ef:38:53:cb:9c:84:
7f:4a:f9:b7:bf:22:fe:ee:13:57:8e:12:3a:ac:9c:
53:ba:a7:94:21:99:ce:c1:34:36:89:38:7f:df:90:
3e:ef:6a:71:c5:31:23:73:fb:c7:36:9e:8f:99:41:
79:c2:cd:3e:2a:04:07:e8:c9:fc:42:ba:e0:da:9d:
e3:f3:c7:b5:d6:6f:14:11:96:0d:5d:dd:ab:1d:19:
ed:74:56:0b:e5:7f:52:94:07:51:27:b7:13:d5:c0:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:39:01:DD:85:50:F6:C2:4F:CA:46:AE:26:60:91:C8:06:48:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/8ab32c-2fcd-4b69-b01b-b090831c9c31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/8ab32c-2fcd-4b69-b01b-b090831c9c31/1/zwc5Ad2FUPbCT8pGriZgkcgGSIY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.239.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42932
Signature Algorithm: sha256WithRSAEncryption
8a:a1:24:6e:52:77:0c:61:d4:ca:68:05:55:da:f8:97:54:43:
d9:21:43:61:ee:e9:aa:2b:22:0a:cf:98:e3:00:23:e5:14:e3:
80:03:f3:4c:d1:84:fa:6b:fd:89:cd:b7:12:9c:3a:f8:85:c3:
24:ee:d9:c7:2d:fa:78:96:39:aa:b8:ab:65:c0:8c:78:c9:58:
2b:9c:2d:65:6d:5b:d4:62:e8:e8:a4:eb:f0:6b:a3:66:d6:31:
c3:83:a6:a9:0c:f0:1a:bf:25:42:69:3b:16:16:42:c2:cc:66:
9d:54:1e:14:98:ec:b9:3d:55:74:b4:38:96:55:50:89:60:e5:
f4:8d:68:6a:34:28:5d:75:11:88:b7:f2:a1:8c:c9:55:ba:c3:
f9:4d:e6:7b:dc:2d:b3:7d:5c:32:d6:d9:52:54:b6:f5:40:2a:
69:2e:84:63:d1:30:28:fb:8a:10:46:b4:a3:21:27:a3:6b:8b:
3b:29:f0:18:a5:97:99:c0:f6:95:a4:b4:e7:94:06:2d:1c:d0:
f4:c0:03:6e:f8:34:60:f1:11:4b:f3:b7:4c:77:90:18:ae:a4:
c9:92:d6:13:81:dc:23:c8:9c:f2:67:8d:1d:0b:b8:15:5f:86:
3f:30:45:2c:82:96:d2:a8:cd:5b:be:ee:6f:14:fe:5b:73:54:
61:a4:d9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-fra.rpki-client.org