Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer
File: KqaU9ED7dgISuSBW4OtbMdUVD_s.cer (raw, json)
Hash identifier: V4qTeowgRlOlpQQl9Z/hmCzAn89Cn5eaE+lOS3+ry2Y=
Subject key identifier: 2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A412220C24
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/KqaU9ED7dgISuSBW4OtbMdUVD_s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:00:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 207610
IP: 193.26.14.0/24
IP: 193.26.21.0 -- 193.26.22.255
IP: 193.26.121.0/24
IP: 2a0f:8140::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704678857764 (0xa412220c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:50:8b:3f:c2:ab:0c:0d:4f:7a:84:0e:9c:
a0:48:0f:81:95:bb:19:b5:71:28:bc:2c:e9:65:1b:
0d:b5:2d:64:26:85:50:33:e1:e3:04:f2:1f:e0:fd:
83:ee:39:5a:60:53:cb:51:8e:89:0c:03:55:9d:7a:
36:be:6a:a2:9e:b6:4a:fa:0b:a6:0e:c7:f9:1d:6c:
f5:4e:97:8b:71:da:1e:92:2d:62:ee:42:34:92:7d:
c7:3a:42:73:3b:d4:04:22:67:00:aa:0b:ca:cc:4f:
da:54:11:1c:d0:5c:bf:8c:87:97:e0:98:80:02:9f:
ad:d5:30:bd:c8:c4:43:15:4d:88:95:9f:69:19:6f:
b0:3e:27:52:20:cf:be:dc:4f:27:de:86:3b:b0:f8:
33:81:21:f8:fa:a4:fe:00:4a:25:d2:e2:c5:ac:7a:
c1:f2:d5:3d:fa:44:1a:96:b7:6c:7f:40:f7:5c:ba:
92:df:e9:1e:b1:a5:92:10:f2:b5:fb:22:dc:82:90:
84:35:97:f5:7c:88:d1:60:bd:55:b4:7e:4b:62:70:
13:15:0e:9e:e1:a3:a4:04:b8:4a:9e:5a:2e:2c:61:
20:5f:62:cd:73:22:77:dc:89:d9:90:22:c7:f1:8d:
d5:f9:07:b4:10:eb:c3:d2:ee:02:04:69:5b:16:29:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/KqaU9ED7dgISuSBW4OtbMdUVD_s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.14.0/24
193.26.21.0-193.26.22.255
193.26.121.0/24
IPv6:
2a0f:8140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207610
Signature Algorithm: sha256WithRSAEncryption
a9:ee:c0:81:0e:73:9b:bd:5b:8a:2b:da:c5:85:ae:17:b2:14:
fc:f0:d0:e6:91:52:2e:61:1f:b2:5c:f9:da:ef:b0:ad:b0:11:
5d:6c:11:ff:66:6f:da:93:da:d9:a2:1c:56:c4:d1:e1:0a:70:
d9:dc:03:35:ad:37:8d:6c:19:5c:19:10:de:2f:73:99:d9:fc:
5b:c0:1f:56:84:9d:de:73:66:42:55:38:6e:74:94:69:b0:c4:
6d:9b:82:29:71:d9:8c:a8:83:85:8f:7a:4a:0b:68:8b:1d:9b:
eb:e0:33:e1:21:c4:ea:5d:2e:4a:c6:ed:57:34:6d:15:d1:ed:
7c:8c:27:57:5f:6b:64:f5:61:34:66:40:31:7c:ab:34:d5:3a:
49:41:3b:95:78:b7:61:fc:e0:a1:22:b4:dc:fe:11:db:8f:84:
22:89:23:c0:51:7b:6d:ef:a6:83:af:cb:cc:f0:f0:a8:d5:78:
70:24:b4:c5:b1:c9:05:54:25:8c:d6:3f:75:5f:cc:7c:47:b3:
5a:21:e2:83:b5:8d:b1:1b:3e:e7:4b:80:8b:23:2c:56:bb:cf:
88:22:ae:a2:11:18:3a:5f:f4:3a:e8:5a:88:19:62:75:f2:4b:
10:6e:bc:2e:0a:fb:8d:c0:77:16:c1:38:69:38:42:c7:5b:bf:
a4:6a:e2:d7
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIGAKQSIgwkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTAwMDU5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyYWE2OTRmNDQw
ZmI3NjAyMTJiOTIwNTZlMGViNWIzMWQ1MTUwZmZiMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEArgxQiz/CqwwNT3qEDpygSA+BlbsZtXEovCzpZRsNtS1k
JoVQM+HjBPIf4P2D7jlaYFPLUY6JDANVnXo2vmqinrZK+gumDsf5HWz1TpeLcdoe
ki1i7kI0kn3HOkJzO9QEImcAqgvKzE/aVBEc0Fy/jIeX4JiAAp+t1TC9yMRDFU2I
lZ9pGW+wPidSIM++3E8n3oY7sPgzgSH4+qT+AEol0uLFrHrB8tU9+kQalrdsf0D3
XLqS3+kesaWSEPK1+yLcgpCENZf1fIjRYL1VtH5LYnATFQ6e4aOkBLhKnlouLGEg
X2LNcyJ33InZkCLH8Y3V+Qe0EOvD0u4CBGlbFin9kwIDAQABo4ICwzCCAr8wHQYD
VR0OBBYEFCqmlPRA+3YCErkgVuDrWzHVFQ/7MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzJkZDM5Ny0wMGMxLTQ2YmIt
OTA3Zi00ZmIyNzkwMmUzM2QvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvMmRkMzk3LTAwYzEtNDZiYi05
MDdmLTRmYjI3OTAyZTMzZC8xL0txYVU5RUQ3ZGdJU3VTQlc0T3RiTWRVVkRfcy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAg
BAIAATAaAwQAwRoOMAwDBADBGhUDBADBGhYDBADBGnkwDQQCAAIwBwMFAyoPgUAw
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAyr6MA0GCSqGSIb3DQEBCwUAA4IBAQCp
7sCBDnObvVuKK9rFha4XshT88NDmkVIuYR+yXPna77CtsBFdbBH/Zm/ak9rZohxW
xNHhCnDZ3AM1rTeNbBlcGRDeL3OZ2fxbwB9WhJ3ec2ZCVThudJRpsMRtm4IpcdmM
qIOFj3pKC2iLHZvr4DPhIcTqXS5Kxu1XNG0V0e18jCdXX2tk9WE0ZkAxfKs01TpJ
QTuVeLdh/OChIrTc/hHbj4QiiSPAUXtt76aDr8vM8PCo1XhwJLTFsckFVCWM1j91
X8x8R7NaIeKDtY2xGz7nS4CLIyxWu8+IIq6iERg6X/Q66FqIGWJ18ksQbrwuCvuN
wHcWwThpOELHW7+kauLX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:53 2024 by rpki-client on console-fra.rpki-client.org