Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Q-C7si_V95poCqFrCclKbV47Fs.cer
File: 4Q-C7si_V95poCqFrCclKbV47Fs.cer (raw, json)
Hash identifier: B8U2AF0qvXvs3Jv2qzscomd2WsPNsBt5bOoiGWfrEHY=
Subject key identifier: E1:0F:82:EE:C8:BF:57:DE:69:A0:2A:85:AC:27:25:29:B5:78:EC:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 60F3D613AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/875078-416e-4d01-88ec-2c8c0ad2be40/1/4Q-C7si_V95poCqFrCclKbV47Fs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/875078-416e-4d01-88ec-2c8c0ad2be40/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2020 15:21:51 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 185.246.208.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416407753644 (0x60f3d613ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 15:21:51 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=e10f82eec8bf57de69a02a85ac272529b578ec5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:03:32:f2:6d:16:e5:17:e8:a1:8f:c8:0d:
59:4a:9d:c9:d8:63:43:bf:b4:35:be:ee:eb:6e:4e:
62:b4:dc:f8:fa:e2:82:2a:4a:81:87:e5:74:bd:d7:
fd:c5:87:e3:db:07:6c:c7:a8:bb:26:64:28:b1:d9:
6f:11:7f:a4:ed:41:3d:13:7d:3e:8a:63:e8:ec:bd:
46:3f:67:35:8c:8b:37:d4:96:c1:db:83:bf:81:b6:
1e:54:37:37:0f:9f:84:aa:5b:40:a9:87:58:e1:18:
f4:e6:72:6f:32:5a:de:81:45:4b:91:ad:d4:51:e0:
00:7f:b6:ca:49:a4:3e:77:9f:92:ce:92:3e:1e:87:
07:c3:2b:03:0a:9e:57:51:4b:42:9c:c6:9d:9c:fe:
47:d6:b6:98:da:78:b8:af:77:6d:74:85:1f:a7:aa:
e5:8b:0a:b2:58:8e:92:70:c4:31:7d:a8:76:c2:b3:
41:09:80:db:f9:78:7b:c8:6d:a1:a5:25:fd:f7:55:
f8:e5:f7:44:56:25:3d:f4:37:7d:1a:ad:c1:75:8f:
3e:73:65:84:0d:14:7e:76:63:45:8b:ee:25:96:ab:
b8:53:52:fb:3b:fe:17:0b:ca:a1:e3:bb:0e:21:ab:
73:01:c7:bc:db:7c:b2:e1:49:d0:8a:c7:ce:1c:18:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0F:82:EE:C8:BF:57:DE:69:A0:2A:85:AC:27:25:29:B5:78:EC:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/875078-416e-4d01-88ec-2c8c0ad2be40/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/875078-416e-4d01-88ec-2c8c0ad2be40/1/4Q-C7si_V95poCqFrCclKbV47Fs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.208.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:be:8f:32:a1:da:6b:69:c3:1c:04:34:67:e4:2a:95:21:6a:
0f:3a:14:9f:be:81:42:89:a2:91:51:f2:d6:cf:6d:08:23:d6:
9b:b3:62:c4:e8:ab:48:27:fa:bd:1f:d6:ff:51:1d:b9:17:3e:
5f:36:5c:ab:29:4e:e0:15:fd:8e:d8:27:99:bc:27:cb:04:a1:
01:ea:5e:5a:a1:e1:c6:2c:a4:31:cd:50:1c:b6:09:ec:2f:a9:
16:26:51:d2:af:18:b2:ac:6f:36:44:a2:54:92:aa:fc:15:a8:
2b:26:9a:c7:0a:5d:d3:75:a5:8c:31:05:61:f4:4a:24:ab:e0:
64:da:31:1a:54:7b:52:ce:0f:fb:59:6b:e1:4f:1b:ae:dc:ec:
c4:7e:7b:81:f0:51:4c:8b:b8:97:14:93:70:16:9e:1e:e1:06:
9f:de:13:f8:9c:1b:11:e8:49:9e:c1:3e:c8:03:08:91:ea:18:
89:a3:b2:bd:e5:9a:f1:d1:c1:b3:b4:4c:d9:9c:70:df:41:7f:
a3:bf:20:e0:f3:f7:c1:34:4c:27:1e:d2:20:02:6f:3e:30:93:
4f:b7:70:13:65:02:3b:20:40:a8:1a:67:0c:fd:4b:66:c2:ac:
0c:ca:b5:cd:a4:34:30:d5:06:55:7c:2c:52:84:8d:de:f4:2a:
a7:0c:d0:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:33 2023 by rpki-client on console-fra.rpki-client.org