Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QBHTegRdE5KJ0KK5M6AtIoA2Ays.cer
File: QBHTegRdE5KJ0KK5M6AtIoA2Ays.cer (raw, json)
Hash identifier: 18kW6PKcejxbTyklR9wwL/Dhd+PpmySE6MwLNiGtYPg=
Subject key identifier: 40:11:D3:7A:04:5D:13:92:89:D0:A2:B9:33:A0:2D:22:80:36:03:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2C97D1720
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/62e7bb-5357-468f-b787-d15f52357ec3/1/QBHTegRdE5KJ0KK5M6AtIoA2Ays.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/62e7bb-5357-468f-b787-d15f52357ec3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:58:57 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.153.248.0/22
IP: 2a07:89c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699165120288 (0xa2c97d1720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:58:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4011d37a045d139289d0a2b933a02d228036032b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:43:ff:2b:8b:83:d5:77:41:cd:dd:ba:7b:d6:
06:6b:7e:34:3c:6d:cb:39:c3:33:7a:e1:30:14:1d:
ca:f4:d2:04:57:f8:38:09:fd:03:35:a1:05:18:fb:
a8:ea:98:9f:2b:63:30:65:12:82:69:6e:a2:21:8f:
be:b4:78:7d:6b:a5:38:57:86:af:a1:59:97:74:65:
07:71:5c:d9:1a:dd:bb:f0:0f:4e:87:d2:5f:ef:ae:
f6:fe:9f:b8:ab:44:e0:0d:24:7c:71:cf:29:bf:a6:
9e:72:7a:d7:4f:ef:0e:d7:34:89:f3:e7:bd:c5:6a:
b3:cd:85:69:d0:d1:6f:07:06:fa:15:5a:fc:47:9d:
16:da:34:96:ee:27:11:06:49:37:64:2f:fa:12:8c:
3d:b3:3b:01:8d:85:13:50:ef:43:03:a3:e4:e5:ea:
d7:03:df:7e:73:41:94:67:ce:18:90:82:18:b6:f1:
47:9d:27:33:30:2d:ad:06:9c:29:d3:09:8e:82:09:
cf:7c:7f:d5:64:59:79:06:28:d2:b9:8f:d5:fd:0d:
15:71:6f:ba:6b:49:99:3f:a7:a5:35:87:9c:b2:1a:
ce:db:31:ef:96:28:ec:76:f3:d8:9e:e0:6f:80:36:
86:77:d7:10:c1:73:f2:fc:39:3e:31:d1:3f:6b:3b:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:11:D3:7A:04:5D:13:92:89:D0:A2:B9:33:A0:2D:22:80:36:03:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/62e7bb-5357-468f-b787-d15f52357ec3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/62e7bb-5357-468f-b787-d15f52357ec3/1/QBHTegRdE5KJ0KK5M6AtIoA2Ays.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.248.0/22
IPv6:
2a07:89c0::/29
Signature Algorithm: sha256WithRSAEncryption
92:bc:33:be:74:47:dd:42:1e:a9:5a:c6:55:e1:62:31:91:8d:
0f:b3:2c:cb:48:fb:75:30:d9:08:3e:80:37:63:68:f7:0c:77:
18:fc:4b:59:37:ad:a1:07:d4:45:06:10:23:1b:1f:10:86:8d:
0c:2d:04:77:69:a6:ba:43:ff:2b:21:88:38:79:73:e5:3d:83:
e9:87:cd:fb:30:f7:c6:6f:49:3d:bd:ff:33:1d:95:f5:4e:ee:
b8:53:53:b9:cb:b8:a0:a4:82:d0:df:77:0a:06:09:1e:59:84:
2e:b6:ce:96:15:51:03:2a:e7:c6:4a:93:20:db:bf:eb:46:6b:
90:d8:70:68:5b:aa:cb:0e:bb:c3:27:98:39:17:0f:99:36:63:
e3:e4:48:02:38:99:09:42:13:60:d2:a3:80:b7:a6:3b:b0:9b:
54:03:9c:c1:00:78:d7:97:b1:a4:ac:14:c4:b8:99:b2:e0:ff:
95:d5:16:f0:b3:0b:5b:85:50:7e:da:44:19:63:ad:de:5c:2a:
9c:82:21:0a:1f:6e:b9:cf:ff:d6:30:49:61:cd:0c:0c:f2:87:
8f:4e:50:5e:89:e4:32:dd:c7:51:e1:c5:90:31:87:77:71:f5:
00:eb:60:47:3e:bf:14:26:7f:c1:2f:7a:15:59:02:5f:f2:35:
fe:ef:fe:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:11 2024 by rpki-client on console-fra.rpki-client.org