Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BqRZq9OclporeUrQIk558t6iIsw.cer
File: BqRZq9OclporeUrQIk558t6iIsw.cer (raw, json)
Hash identifier: +Q+wZNekBS+L8h5SqfeeuRmCcmFqNchVPa4H7U6qE50=
Subject key identifier: 06:A4:59:AB:D3:9C:96:9A:2B:79:4A:D0:22:4E:79:F2:DE:A2:22:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A28D544F8F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/b16cfa-bf3c-4072-8f7b-c35c6c9ff7ec/1/BqRZq9OclporeUrQIk558t6iIsw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/b16cfa-bf3c-4072-8f7b-c35c6c9ff7ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:56:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.200.140.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698155814799 (0xa28d544f8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:56:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06a459abd39c969a2b794ad0224e79f2dea222cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:73:4a:c1:42:7e:2a:52:0c:27:3f:aa:7f:52:
60:fe:fe:95:01:4d:12:af:0e:12:32:dd:2f:dc:99:
e5:db:d0:8c:3c:72:21:7b:8d:b0:14:cd:47:37:94:
4f:ac:7b:c2:4d:1d:7c:cf:51:9a:5d:7e:43:0d:b4:
de:12:d4:9c:dc:df:40:9c:0f:72:14:92:a6:e3:2f:
84:22:51:89:d1:8c:b8:35:0b:d5:33:d3:10:0d:fd:
15:34:30:9d:e9:e1:57:99:45:38:39:12:ea:6d:d1:
11:30:f4:5a:f3:80:b6:fd:34:8d:a0:58:42:16:79:
23:bd:32:37:6b:ba:64:f9:f7:d9:20:ad:2f:73:41:
33:06:94:bf:9c:d7:8a:38:07:0a:8b:cf:38:49:d6:
e0:61:13:d8:9b:2f:66:21:1e:62:34:8b:9d:2f:a2:
61:db:31:2a:c1:a1:3e:a8:c2:79:34:9f:bf:dc:cd:
3c:83:73:e3:7f:92:4f:98:4a:6e:24:40:b6:0f:62:
0d:d6:fb:26:f4:0d:33:83:e9:4a:b1:60:95:0c:21:
da:f8:27:44:0e:2f:08:75:a4:63:29:73:fb:1f:42:
fa:69:9a:1d:e6:0d:f3:3f:b8:c0:dd:e0:9b:b1:d9:
cd:4b:63:0d:0a:f6:c1:c3:0b:dd:c0:69:c1:48:f9:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A4:59:AB:D3:9C:96:9A:2B:79:4A:D0:22:4E:79:F2:DE:A2:22:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b16cfa-bf3c-4072-8f7b-c35c6c9ff7ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b16cfa-bf3c-4072-8f7b-c35c6c9ff7ec/1/BqRZq9OclporeUrQIk558t6iIsw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.140.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e1:8b:e5:b0:d9:49:a3:be:ed:e3:bf:80:c0:49:99:a9:1a:
5f:aa:71:68:0b:0d:5f:ba:33:ab:26:9c:28:cf:f5:92:50:6b:
b8:99:67:ac:e1:05:cc:7b:5f:3f:c5:4a:5c:68:d4:63:3c:b7:
a3:f7:55:50:b9:62:61:0f:6e:6a:9c:53:a3:f8:a6:dd:17:77:
ca:27:05:21:6b:1e:a1:ac:11:27:0c:ed:9b:c5:13:68:2d:a6:
01:d1:4a:8d:c5:6a:03:bb:90:a6:39:2e:b8:9c:30:a9:f0:93:
e7:b7:e4:07:6f:fa:af:35:0d:e3:1b:ee:a0:a9:ac:b4:3a:c0:
7a:25:04:f1:41:96:f9:1f:ca:a8:42:be:9f:57:aa:8e:df:7d:
91:e7:2b:4a:67:bf:d3:4c:35:87:c9:ed:20:7b:9d:dc:16:7c:
28:34:68:5e:dd:c7:19:49:c9:23:29:83:a4:3c:e1:9b:57:79:
44:a2:e6:fc:3f:0d:15:51:c8:52:5c:f2:9d:41:23:49:1b:f0:
1c:a2:04:ab:e9:d1:9f:55:24:ac:82:b0:07:61:b9:46:c1:ca:
7b:4e:e4:2b:f9:86:0d:67:0e:d1:f0:60:fe:d1:6c:33:5a:ec:
29:b5:8f:28:f9:99:bb:13:b9:e9:d9:dd:e9:1c:c8:c7:29:e8:
59:16:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:26 2024 by rpki-client on console-ams.rpki-client.org