Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
File: Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer (raw, json)
Hash identifier: 9T+DORLfLmiZUTRbOD+zrkIPka8frhkTG83c+PNmEDE=
Subject key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0184C2C4C94977455B3EF0936C04104A30C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 29 Nov 2022 09:43:07 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.238.44.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:c4:c9:49:77:45:5b:3e:f0:93:6c:04:10:4a:30:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 29 09:43:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4354d70a988e257ec57c3408159dc8b504f5723a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:e0:5b:98:39:0f:b3:8a:04:d7:d7:3f:38:
f3:50:ec:54:58:05:6f:af:53:71:01:06:be:fc:d4:
30:f7:8a:44:e9:d8:91:3d:3c:96:c6:da:0a:02:31:
c9:cf:d2:18:22:6c:36:b1:47:8f:ed:79:45:a6:3c:
82:df:91:47:a9:6b:f2:4b:8f:f4:75:2b:7e:21:7a:
0f:02:48:4a:32:db:90:19:75:5f:ce:a5:1d:2a:21:
ad:63:79:5e:c2:6d:2f:a1:c0:0d:e8:2b:87:30:ed:
b3:24:dc:c3:27:c5:96:92:50:6d:2f:13:a5:16:7c:
e1:63:6a:b1:20:1a:0b:d5:eb:ee:8f:71:e1:0a:af:
4d:f0:77:4e:6a:13:0e:e3:84:c8:b8:73:51:5e:ab:
11:0a:65:9e:02:6e:7f:14:7f:1a:bf:3b:4f:7a:63:
ed:36:30:72:49:e6:70:62:bc:a6:eb:ff:ac:2d:c0:
da:90:7d:a6:b5:ba:24:f2:2d:32:71:dc:2c:f4:88:
a3:fc:9a:ae:32:d7:a9:d7:99:64:43:f0:51:e0:4d:
fe:ca:f6:fa:0e:98:25:19:0d:b6:5a:7e:ac:93:83:
32:e1:1e:7e:25:af:b8:c2:fe:4d:db:fd:c4:23:7c:
fb:43:41:4d:e4:f6:80:5d:af:09:88:b0:4f:86:45:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:3f:a4:ab:97:69:1f:55:ad:89:3c:20:61:08:83:80:db:53:
f9:39:54:31:b2:1a:50:72:57:ac:1f:79:e2:a5:af:18:41:0b:
ff:97:da:b3:1e:9c:03:ab:d3:ec:b2:19:6f:da:f0:45:cb:69:
fc:7c:3f:c6:21:1e:75:8d:85:b1:c4:50:7e:fb:60:9e:e5:3b:
4f:2f:ae:d5:bd:58:22:13:50:31:a6:d8:46:fc:bd:c2:ef:fc:
e6:7f:77:9a:fb:8f:97:8e:76:ec:0b:fe:d2:19:e0:d1:5b:56:
ae:46:2e:f2:e8:15:c4:ba:9a:0d:ae:4a:61:83:7d:28:9a:8d:
40:40:95:a9:53:54:38:50:4e:7d:ab:74:d2:bf:68:6a:f7:c5:
62:00:74:0c:da:f6:0a:f7:20:2d:a2:fe:a6:29:e4:75:64:5e:
b9:5e:5f:d2:04:89:f0:cd:53:40:7d:98:27:6e:d8:27:31:9c:
02:10:07:d6:d6:67:15:dd:b3:06:92:1b:98:c7:bf:33:1f:5c:
93:7f:d4:9d:7b:a2:08:39:15:f2:82:90:43:a4:4e:2a:b6:de:
be:e3:61:06:d3:30:28:64:ed:c8:9b:45:18:92:84:25:75:c9:
5f:4f:f8:a6:da:56:08:22:62:0b:fb:35:c8:56:c3:cb:dd:12:
8c:c8:3b:89
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYTCxMlJd0VbPvCTbAQQSjDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMTI5MDk0MzA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzU0ZDcwYTk4OGUyNTdlYzU3YzM0MDgxNTlkYzhiNTA0ZjU3MjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArljgW5g5D7OKBNfXPzjzUOxUWAVv
r1NxAQa+/NQw94pE6diRPTyWxtoKAjHJz9IYImw2sUeP7XlFpjyC35FHqWvyS4/0
dSt+IXoPAkhKMtuQGXVfzqUdKiGtY3lewm0vocAN6CuHMO2zJNzDJ8WWklBtLxOl
FnzhY2qxIBoL1evuj3HhCq9N8HdOahMO44TIuHNRXqsRCmWeAm5/FH8avztPemPt
NjBySeZwYrym6/+sLcDakH2mtbok8i0ycdws9Iij/JquMtep15lkQ/BR4E3+yvb6
DpglGQ22Wn6sk4My4R5+Ja+4wv5N2/3EI3z7Q0FN5PaAXa8JiLBPhkWfqwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFENU1wqYjiV+xXw0CBWdyLUE9XI6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2M1YzAx
Ni00ZjFjLTRmMzMtYWNmMC0yNzQ5OGY4NzRkNGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvYzVjMDE2
LTRmMWMtNGYzMy1hY2YwLTI3NDk4Zjg3NGQ0Zi8xL1ExVFhDcGlPSlg3RmZEUUlG
WjNJdFFUMWNqby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwe4sMA0GCSqGSIb3DQEBCwUAA4IBAQCpP6Sr
l2kfVa2JPCBhCIOA21P5OVQxshpQclesH3nipa8YQQv/l9qzHpwDq9Psshlv2vBF
y2n8fD/GIR51jYWxxFB++2Ce5TtPL67VvVgiE1AxpthG/L3C7/zmf3ea+4+Xjnbs
C/7SGeDRW1auRi7y6BXEupoNrkphg30omo1AQJWpU1Q4UE59q3TSv2hq98ViAHQM
2vYK9yAtov6mKeR1ZF65Xl/SBInwzVNAfZgnbtgnMZwCEAfW1mcV3bMGkhuYx78z
H1yTf9Sde6IIORXygpBDpE4qtt6+42EG0zAoZO3Im0UYkoQldclfT/im2lYIImIL
+zXIVsPL3RKMyDuJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:09 2024 by rpki-client on console-fra.rpki-client.org