Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
File: Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer (raw, json)
Hash identifier: +mqg2mC3CG6LGMOshGi5BSyeg4tCGr9Fe5EeM9aGowY=
Subject key identifier: 43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA40DD98E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:06:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 205170
AS: 208888
IP: 45.80.196.0/22
IP: 45.85.180.0/22
IP: 89.34.76.0/24
IP: 103.23.62.0/23
IP: 185.227.216.0/22
IP: 185.240.88.0/22
IP: 185.240.164.0/22
IP: 194.30.161.0/24
IP: 194.30.165.0/24
IP: 194.30.183.0/24
IP: 194.31.1.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731232704739 (0xaa40dd98e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:06:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43931de6e91b40f4b2bb201253e57a86741105a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:b0:39:65:cd:fd:f9:fd:ec:f2:0f:4d:83:
8e:20:dd:6b:e8:4a:32:77:43:19:5b:71:5c:4a:47:
26:bf:45:cc:04:be:c5:43:54:57:15:bc:65:94:dc:
f8:6b:2f:a5:ee:47:ee:78:2f:f5:38:35:eb:8b:3a:
66:65:64:6b:0f:a1:1f:a9:c1:ea:9a:cd:93:27:58:
76:8e:7d:9e:a9:3e:3a:1e:dc:ed:3b:75:15:75:69:
33:14:04:ec:34:0a:98:6c:cc:45:72:75:36:c9:de:
44:62:9c:a9:08:70:fa:06:a3:ac:a1:6b:39:d3:10:
49:3d:c5:a5:2a:7f:c6:d6:f6:70:5e:c6:e1:c9:61:
04:a2:92:54:8d:67:c4:bb:db:6c:db:e8:86:0a:e2:
df:ee:26:a8:51:cc:1a:01:7c:85:40:d3:e5:77:64:
f2:9c:58:bb:27:b8:49:a2:0d:fb:d9:c6:c9:86:3e:
d4:59:e7:1a:98:34:07:db:f0:bd:60:36:f6:00:e9:
e0:9e:a5:43:ef:28:ee:05:57:d1:2a:5b:3d:2c:1f:
59:42:ca:9d:d9:b3:55:61:a1:1d:c5:75:a2:43:3e:
66:2a:b7:a9:cf:b7:64:79:6c:0a:56:e3:8b:31:e7:
c1:e3:d5:1e:47:3a:e4:47:95:8e:8d:7b:5f:08:58:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.196.0/22
45.85.180.0/22
89.34.76.0/24
103.23.62.0/23
185.227.216.0/22
185.240.88.0/22
185.240.164.0/22
194.30.161.0/24
194.30.165.0/24
194.30.183.0/24
194.31.1.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205170
208888
Signature Algorithm: sha256WithRSAEncryption
a5:4a:3a:44:5c:00:1b:a3:af:a3:e6:4d:4d:49:f2:a1:d1:f6:
d4:a0:a2:28:90:ae:93:45:11:97:1b:4a:17:b7:5d:8d:54:41:
1b:97:1b:c0:04:eb:49:53:3d:a5:7b:c9:c4:62:4e:7d:ac:f7:
a7:31:00:8f:3e:df:68:ed:c6:ea:a2:a6:22:f2:2d:e2:3e:5f:
6b:f5:65:26:56:9c:d7:66:ec:52:9c:26:dc:57:4f:72:25:ca:
0f:94:d1:aa:3a:a7:60:75:d3:af:78:c9:bf:da:97:94:d9:dd:
ec:94:5b:47:0e:e1:20:87:57:50:01:af:5d:ec:9c:70:85:f7:
28:07:72:40:08:d0:de:b6:38:3f:13:19:bf:92:41:49:dc:47:
16:8a:3f:f6:6e:22:3b:82:30:bb:37:d4:18:60:43:1e:15:f2:
d7:ec:3d:36:20:40:68:a1:d5:13:95:af:c8:b6:00:c5:82:d3:
fd:b4:53:d9:f7:1c:cd:54:78:f2:58:28:33:8e:f5:fa:11:30:
7c:23:f6:10:f1:9a:e0:7e:94:cc:b3:63:07:f9:38:ca:f2:89:
90:1b:9b:b0:cf:3e:eb:7b:a7:fb:f6:95:2b:c6:8e:13:3a:ce:
ad:45:0d:ea:b5:ac:60:fd:ed:b7:97:fc:cd:cb:0b:71:60:8d:
40:b7:df:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:05 2024 by rpki-client on console-ams.rpki-client.org