Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CqmeHMdLTKd7Ys-gk555I10qucE.cer
File: CqmeHMdLTKd7Ys-gk555I10qucE.cer (raw, json)
Hash identifier: Q7Kohhmp73tr2md0CUCyI9FpaGDtS1KAMn5LeXUmp/Y=
Subject key identifier: 0A:A9:9E:1C:C7:4B:4C:A7:7B:62:CF:A0:93:9E:79:23:5D:2A:B9:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99557E4F9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/CqmeHMdLTKd7Ys-gk555I10qucE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:55:45 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.247.184.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658564337565 (0x99557e4f9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:55:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0aa99e1cc74b4ca77b62cfa0939e79235d2ab9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:35:8d:68:72:92:8f:9e:04:8f:f7:5a:6e:
5d:24:5e:e6:b9:7e:97:d9:a9:bf:bd:08:b3:9f:1e:
ed:16:2e:28:2a:a7:24:03:5f:98:5c:8d:82:7f:8a:
f8:61:1c:ee:d6:9b:08:98:19:1b:a4:fc:af:e7:cb:
be:3a:82:29:a9:ad:90:53:cb:f8:60:bf:84:db:0d:
4e:7d:5d:5b:6c:58:fe:bc:8d:b5:66:03:76:67:98:
97:d8:07:b1:ef:df:8d:8c:81:2a:b5:3b:04:80:05:
65:ef:f9:32:39:9a:80:74:07:d1:2f:25:79:2f:81:
c4:ea:fd:5b:07:91:84:63:ae:c1:53:47:d0:fd:80:
a9:76:dd:61:fd:09:b1:ed:c1:3d:78:7e:eb:48:09:
84:52:ae:40:0f:12:7d:99:0d:9c:ec:04:3a:58:1e:
bc:2d:e2:20:7a:eb:21:03:2f:d8:4d:ed:bb:59:ce:
d5:17:d6:fc:64:ad:64:39:d9:fb:4e:8f:69:fe:b3:
43:dd:37:91:2c:1c:63:3b:46:c9:43:1a:cb:83:ef:
ee:03:93:9a:24:19:db:58:eb:29:45:f2:f7:58:04:
ad:0d:6b:5d:81:07:ed:98:96:c6:7a:68:d2:45:70:
fe:1f:f9:ec:5a:40:70:46:b3:7b:e1:51:0f:e3:e7:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A9:9E:1C:C7:4B:4C:A7:7B:62:CF:A0:93:9E:79:23:5D:2A:B9:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/CqmeHMdLTKd7Ys-gk555I10qucE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.184.0/23
Signature Algorithm: sha256WithRSAEncryption
24:ba:08:f5:c8:18:35:90:07:6e:99:8e:97:76:0d:f6:f6:58:
87:64:74:45:a0:7b:38:04:8c:ff:a8:ca:a5:cc:0b:a5:b8:09:
99:bb:91:02:0a:23:b9:43:6a:6a:c2:ff:f9:d4:e9:d9:86:88:
bf:3c:0a:fc:4e:9b:f3:1a:c1:37:2c:34:fb:31:c8:03:b7:d1:
f0:7e:2e:c6:c3:38:1e:57:58:6d:15:40:90:29:be:4a:39:6b:
94:f4:25:84:7d:04:fb:33:33:0d:ac:ce:c2:7f:20:b9:14:86:
d8:d9:62:e1:2c:7f:7c:e5:c9:15:d6:0f:57:c1:4c:70:c1:85:
17:ca:96:7c:f7:56:52:54:de:97:88:c1:e8:4d:82:b9:34:20:
70:16:b2:3d:36:fa:c0:58:15:1f:fc:af:90:ee:0f:10:a8:4d:
ce:5e:e5:83:2a:3c:01:ae:e0:ea:a4:d0:6b:1c:ee:ef:a3:16:
73:fd:9b:28:d7:03:5e:5b:91:be:1d:11:cf:1c:ae:76:9e:1a:
31:42:6c:64:27:d7:bf:98:eb:6c:3e:7a:b8:2f:39:5c:bb:7a:
20:24:73:cc:9e:84:ac:99:7f:4e:60:0b:53:ed:7b:5d:a9:5e:
37:b2:ad:48:2e:5e:0c:4d:ae:5f:cf:00:e5:a1:ce:f2:08:f1:
b6:2a:1a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:01 2024 by rpki-client on console-fra.rpki-client.org