Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q1gFJmdWRHshJS6YoXj8AxuXI8o.cer
File: Q1gFJmdWRHshJS6YoXj8AxuXI8o.cer (raw, json)
Hash identifier: JD1AhB+CTTgSa+jvrpjPde9jZSyBZFB1rMwkhET9ll0=
Subject key identifier: 43:58:05:26:67:56:44:7B:21:25:2E:98:A1:78:FC:03:1B:97:23:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0183C78A2E6573A0458B5711BD22E340439A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/6a9a1e-ab6f-4ef5-ab1c-7f2e87882fff/1/Q1gFJmdWRHshJS6YoXj8AxuXI8o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/6a9a1e-ab6f-4ef5-ab1c-7f2e87882fff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Oct 2022 14:54:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 60385
IP: 185.18.248.0/22
IP: 2a04:f00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:8a:2e:65:73:a0:45:8b:57:11:bd:22:e3:40:43:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 11 14:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=435805266756447b21252e98a178fc031b9723ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:f7:27:c8:71:73:5b:a5:dc:36:55:ab:6e:
66:4a:59:96:03:e2:2c:4f:27:b3:9d:2e:b6:b8:b9:
c6:33:7a:94:6b:26:5d:a5:20:7f:1f:57:1b:d8:d5:
f1:a2:96:c8:dc:ab:40:65:17:c9:b6:11:dd:34:d4:
80:8f:fa:dd:a6:13:75:d5:9c:c7:6e:fc:4c:ee:9f:
1e:c8:aa:40:24:bb:7f:df:3b:15:e9:e8:27:c2:2c:
e3:92:fe:8a:31:0d:2d:9b:6e:ee:1d:1e:e0:b4:ba:
f8:f6:09:ab:ab:d3:fb:ea:fc:6e:68:ac:1b:21:eb:
08:ac:64:fc:a9:fa:81:ff:66:ed:e9:55:8c:51:b3:
ef:23:b2:2f:33:c9:80:ed:cd:b1:cb:7f:30:fa:4f:
18:a6:e4:de:77:30:34:6d:84:82:69:31:34:c1:4e:
b6:20:f7:df:92:c7:6d:a6:3b:be:3b:1b:69:d4:1c:
90:dd:44:99:c6:78:66:f8:dd:08:ba:c4:b2:b9:84:
f9:15:c7:1f:1a:b0:8e:fe:e7:c9:d0:96:36:ef:9d:
e9:05:80:76:ab:fc:c5:fa:00:85:17:ba:ec:da:ca:
67:c2:50:b1:a0:67:b7:76:5c:a3:90:4a:27:c7:c6:
cd:3e:65:a4:2c:89:a9:e9:fc:ab:02:09:6c:a3:e9:
e2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:58:05:26:67:56:44:7B:21:25:2E:98:A1:78:FC:03:1B:97:23:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6a9a1e-ab6f-4ef5-ab1c-7f2e87882fff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6a9a1e-ab6f-4ef5-ab1c-7f2e87882fff/1/Q1gFJmdWRHshJS6YoXj8AxuXI8o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.248.0/22
IPv6:
2a04:f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60385
Signature Algorithm: sha256WithRSAEncryption
5f:96:5d:5e:1e:59:08:a4:10:21:e8:8d:dd:3d:e5:3b:81:4b:
01:44:b8:dc:a3:ff:c0:a1:18:a0:be:03:48:f9:a7:6d:b3:4e:
b9:88:4a:4d:e3:9a:c5:d0:1e:8e:71:7c:25:be:08:26:04:90:
b6:06:d9:d6:08:5c:74:54:ab:3a:9f:94:aa:df:a1:21:d0:da:
6b:0f:9d:40:be:6e:de:96:4f:ef:38:57:a6:77:88:2e:1f:1d:
35:63:5c:2a:7d:3f:f6:b4:7d:30:15:fa:32:38:6f:4a:34:b3:
1c:21:f4:97:25:28:1b:1e:1e:d0:35:37:5a:76:1d:a1:b5:ce:
d2:ea:a2:95:bb:35:1f:20:60:c3:c1:8e:55:2c:fd:3b:17:d9:
03:6a:8b:bf:87:ed:bb:f4:88:9e:e0:c5:30:be:16:c8:fb:7e:
1c:7b:c9:c1:9b:8e:9a:43:5e:34:fb:56:cb:3d:5a:6b:c8:89:
85:6c:38:71:02:a5:ec:bf:77:08:a8:09:83:64:f5:8c:93:e5:
63:a9:2c:22:00:99:e7:bd:e8:72:43:b6:d0:8e:f5:3e:69:cf:
67:50:f2:2b:e4:4a:a9:c4:5b:88:4f:55:7b:79:db:d4:09:b4:
9c:2a:9c:1c:d0:be:44:6a:73:14:a6:c1:0c:a5:cb:aa:ec:13:
2a:b4:36:11
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYPHii5lc6BFi1cRvSLjQEOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMDExMTQ1NDI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzU4MDUyNjY3NTY0NDdiMjEyNTJlOThhMTc4ZmMwMzFiOTcyM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh/3J8hxc1ul3DZVq25mSlmWA+Is
TyeznS62uLnGM3qUayZdpSB/H1cb2NXxopbI3KtAZRfJthHdNNSAj/rdphN11ZzH
bvxM7p8eyKpAJLt/3zsV6egnwizjkv6KMQ0tm27uHR7gtLr49gmrq9P76vxuaKwb
IesIrGT8qfqB/2bt6VWMUbPvI7IvM8mA7c2xy38w+k8YpuTedzA0bYSCaTE0wU62
IPffksdtpju+Oxtp1ByQ3USZxnhm+N0IusSyuYT5FccfGrCO/ufJ0JY2753pBYB2
q/zF+gCFF7rs2spnwlCxoGe3dlyjkEonx8bNPmWkLImp6fyrAglso+ni4wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFENYBSZnVkR7ISUumKF4/AMblyPKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzZhOWEx
ZS1hYjZmLTRlZjUtYWIxYy03ZjJlODc4ODJmZmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvNmE5YTFl
LWFiNmYtNGVmNS1hYjFjLTdmMmU4Nzg4MmZmZi8xL1ExZ0ZKbWRXUkhzaEpTNllv
WGo4QXh1WEk4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuRL4MA0EAgACMAcDBQMqBA8AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDr4TANBgkqhkiG9w0BAQsFAAOCAQEAX5ZdXh5ZCKQQ
IeiN3T3lO4FLAUS43KP/wKEYoL4DSPmnbbNOuYhKTeOaxdAejnF8Jb4IJgSQtgbZ
1ghcdFSrOp+Uqt+hIdDaaw+dQL5u3pZP7zhXpneILh8dNWNcKn0/9rR9MBX6Mjhv
SjSzHCH0lyUoGx4e0DU3WnYdobXO0uqilbs1HyBgw8GOVSz9OxfZA2qLv4ftu/SI
nuDFML4WyPt+HHvJwZuOmkNeNPtWyz1aa8iJhWw4cQKl7L93CKgJg2T1jJPlY6ks
IgCZ573ockO20I71PmnPZ1DyK+RKqcRbiE9Ve3nb1Am0nCqcHNC+RGpzFKbBDKXL
quwTKrQ2EQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:05 2024 by rpki-client on console-ams.rpki-client.org