Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.cer
File: IbQQoXRA_Ksc3JCvpvy3JMgMgqk.cer (raw, json)
Hash identifier: TvhquZ1gsU3204B5QKyG2T/59dq+pekJc9mduTP8Ff4=
Subject key identifier: 21:B4:10:A1:74:40:FC:AB:1C:DC:90:AF:A6:FC:B7:24:C8:0C:82:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AACF0682B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:59:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 199380
IP: 89.32.194.0/23
IP: 89.36.40.0/22
IP: 89.37.80.0/22
IP: 89.42.236.0/23
IP: 185.16.120.0/22
IP: 188.208.24.0/22
IP: 188.239.184.0/22
IP: 188.247.168.0/22
IP: 2a04:300::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733617750712 (0xaacf0682b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21b410a17440fcab1cdc90afa6fcb724c80c82a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:92:86:9d:94:80:c2:44:60:3c:70:8a:cc:1e:
a3:bc:a1:6d:32:72:11:2e:01:47:25:c0:45:cf:8d:
01:30:8f:74:c5:7c:b6:29:74:ac:71:69:36:3d:aa:
3d:e2:20:f8:1d:ca:b3:4d:c7:6b:30:1e:86:97:89:
54:14:45:cb:fe:bb:d0:ce:c8:73:29:b5:c2:37:74:
9f:9e:95:45:74:17:50:9b:e5:df:0c:cc:4b:cc:31:
d7:b5:9a:ec:22:2d:26:8b:a4:9b:e6:44:62:1e:9e:
cd:8c:4f:53:3e:79:8d:4d:b0:80:fd:41:7f:9f:5e:
32:ae:cd:d1:39:4d:be:68:bd:a7:1d:c9:90:4a:ba:
ab:28:5a:59:d2:e4:e0:ef:a2:14:ca:b0:88:2d:6f:
11:c1:7a:1d:7c:6c:02:eb:1a:ee:07:6e:f8:57:cd:
30:42:51:63:e9:0a:c4:a3:89:ec:cd:5c:2d:79:e0:
1e:2d:24:75:ba:15:af:6e:ca:9f:7e:b6:bf:89:f8:
ee:50:9c:a7:07:2b:12:d0:42:a0:70:38:f9:3a:0e:
1a:c3:6c:7a:71:28:04:2c:b0:19:c3:0e:b3:16:82:
15:ec:00:a8:3a:e9:24:8f:7d:e6:f3:58:62:b8:a0:
ec:ca:f4:b2:96:c0:c3:01:03:48:28:0f:5c:8c:35:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B4:10:A1:74:40:FC:AB:1C:DC:90:AF:A6:FC:B7:24:C8:0C:82:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.194.0/23
89.36.40.0/22
89.37.80.0/22
89.42.236.0/23
185.16.120.0/22
188.208.24.0/22
188.239.184.0/22
188.247.168.0/22
IPv6:
2a04:300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199380
Signature Algorithm: sha256WithRSAEncryption
a6:10:89:f3:ad:7d:0e:30:70:4e:eb:8d:ef:3e:a5:60:7a:68:
a2:93:06:99:a6:ae:89:31:1a:89:ce:e9:b5:63:ee:6d:da:24:
ea:33:c8:66:61:2d:80:5d:e7:b7:d4:b3:3a:e8:9c:90:f0:39:
c0:dc:f3:37:71:0f:b7:9d:15:15:08:4f:6b:b8:69:7f:d7:53:
ab:24:36:88:1b:f6:12:8c:6e:ea:52:22:4b:76:ef:c7:e6:0b:
00:2a:4a:a6:59:0a:05:fc:af:e2:73:5e:e5:f2:21:a6:13:f8:
44:7d:da:da:f9:a1:1b:1e:28:e2:44:02:d0:45:e6:5d:75:01:
e6:45:17:b5:9c:a0:ef:24:a4:b5:a6:7e:2a:9d:31:47:df:b0:
28:1a:03:ff:23:da:69:91:f3:e8:c4:e5:2c:19:3b:0f:e4:9a:
e7:63:0f:2f:4c:22:15:a0:4a:9c:e4:67:5e:a2:57:8b:65:48:
f2:45:a4:9a:11:0a:20:a5:32:2e:cb:01:3f:6d:55:6b:6b:d3:
d1:d0:e4:b4:48:48:ad:ff:15:2d:c7:f4:dc:f5:70:3d:44:a2:
90:b6:a2:66:fc:43:4f:e5:f1:02:20:c0:41:55:1a:90:4d:0f:
d6:ba:59:f7:e0:67:f1:e0:0f:d0:f7:18:62:9a:b3:93:9e:c1:
9b:b2:a1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:42 2024 by rpki-client on console-ams.rpki-client.org