Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QCA4zxEo5UY3A2xhgsEfZULnZDs.cer
File: QCA4zxEo5UY3A2xhgsEfZULnZDs.cer (raw, json)
Hash identifier: 9IpX8rBznwIbKckPJLGWKfImkVZ5eU2E66dFnYAEnUg=
Subject key identifier: 40:20:38:CF:11:28:E5:46:37:03:6C:61:82:C1:1F:65:42:E7:64:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185E84CBFF6C28AC4623F902BF71562DC76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/e88416-250d-42cb-88d9-476faa7cbe93/1/QCA4zxEo5UY3A2xhgsEfZULnZDs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/e88416-250d-42cb-88d9-476faa7cbe93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Jan 2023 09:40:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 12815
IP: 193.17.229.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:4c:bf:f6:c2:8a:c4:62:3f:90:2b:f7:15:62:dc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 25 09:40:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=402038cf1128e54637036c6182c11f6542e7643b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:f8:af:4e:9d:b7:20:d7:18:98:52:70:c4:
d8:4c:18:8f:b7:e9:2d:0d:47:f4:da:3b:dc:4e:fb:
a4:0e:48:f7:39:57:d2:9a:96:47:9f:2e:1c:b0:52:
09:9e:17:08:32:cf:3b:64:83:2c:36:7f:ea:8c:80:
40:9d:c0:a4:af:b5:c2:9e:3b:dd:06:78:ce:0d:b9:
4a:eb:04:80:a7:f9:2a:f5:27:eb:a1:56:5b:17:33:
7e:35:fa:19:43:5b:23:17:45:72:c2:8a:7d:32:57:
65:94:ee:38:a0:0a:75:d2:93:69:94:af:a8:f6:02:
af:ed:80:3d:e2:95:b0:0f:07:9a:c4:82:f9:b1:76:
e2:b4:94:2b:0f:9a:dd:2a:9e:17:6d:5e:9b:ad:4d:
c7:8d:6f:db:ca:45:72:91:a4:e6:2a:d9:b3:1e:13:
0b:2f:08:d6:66:34:c9:4c:65:7c:bb:4b:fd:af:04:
5c:f1:27:16:07:db:63:c7:c3:81:b8:39:42:e8:e1:
c0:f5:45:4e:bf:1b:6b:43:34:79:15:64:29:83:49:
b2:03:ce:69:b1:31:e5:b3:8c:89:95:0a:54:c7:8e:
c2:0b:74:ed:14:b3:a1:ba:f7:a0:af:e1:ee:57:4d:
47:b3:02:24:24:d7:5c:06:7c:df:e2:24:d4:a1:24:
aa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:20:38:CF:11:28:E5:46:37:03:6C:61:82:C1:1F:65:42:E7:64:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e88416-250d-42cb-88d9-476faa7cbe93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e88416-250d-42cb-88d9-476faa7cbe93/1/QCA4zxEo5UY3A2xhgsEfZULnZDs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.229.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12815
Signature Algorithm: sha256WithRSAEncryption
6f:41:21:6f:eb:17:01:ba:90:33:79:5a:07:70:19:66:51:1a:
de:ef:c6:46:39:ec:c6:3a:6e:e7:99:25:39:c2:c6:95:32:04:
a9:b7:67:d3:38:5e:3d:4b:42:d1:87:59:ae:50:6a:4f:a8:ec:
98:21:36:8d:13:98:fd:a1:e4:e1:78:47:d5:ed:c3:66:20:dc:
0a:37:d1:54:42:ac:e1:90:e8:af:8a:85:4d:42:a8:c2:91:4b:
30:c2:7b:2f:4c:bf:d0:2e:5b:38:3b:7b:ca:c6:1c:af:9c:12:
fb:2d:b0:9e:cb:b3:e1:d6:5c:44:98:12:21:c6:e9:82:66:b6:
9f:d7:81:c4:7e:cd:cf:e2:63:69:cd:d5:18:45:30:90:dd:34:
d4:de:10:0a:2d:5c:18:f0:81:d7:d3:8a:a4:60:2e:b7:ed:56:
6b:34:2d:fb:a7:e0:f9:bd:2a:fd:53:c5:8c:f7:27:52:cf:c1:
b3:d6:66:2a:2e:7d:e8:57:2e:36:89:6e:4e:d7:db:f3:b0:17:
a5:4d:fa:49:a0:14:e7:20:35:bd:b2:72:26:12:f7:e8:2a:58:
37:b0:88:62:be:4d:db:04:da:19:ad:29:27:74:8e:af:90:4f:
27:36:e1:e8:b5:72:fd:33:07:b1:8b:eb:da:52:c5:8c:65:82:
71:da:76:26
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYXoTL/2worEYj+QK/cVYtx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTI1MDk0MDIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDIwMzhjZjExMjhlNTQ2MzcwMzZjNjE4MmMxMWY2NTQyZTc2NDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE34r06dtyDXGJhScMTYTBiPt+kt
DUf02jvcTvukDkj3OVfSmpZHny4csFIJnhcIMs87ZIMsNn/qjIBAncCkr7XCnjvd
BnjODblK6wSAp/kq9SfroVZbFzN+NfoZQ1sjF0Vywop9MldllO44oAp10pNplK+o
9gKv7YA94pWwDweaxIL5sXbitJQrD5rdKp4XbV6brU3HjW/bykVykaTmKtmzHhML
LwjWZjTJTGV8u0v9rwRc8ScWB9tjx8OBuDlC6OHA9UVOvxtrQzR5FWQpg0myA85p
sTHls4yJlQpUx47CC3TtFLOhuvegr+HuV01HswIkJNdcBnzf4iTUoSSqYQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFEAgOM8RKOVGNwNsYYLBH2VC52Q7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkL2U4ODQx
Ni0yNTBkLTQyY2ItODhkOS00NzZmYWE3Y2JlOTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvZTg4NDE2
LTI1MGQtNDJjYi04OGQ5LTQ3NmZhYTdjYmU5My8xL1FDQTR6eEVvNVVZM0EyeGhn
c0VmWlVMblpEcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwRHlMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AjIPMA0GCSqGSIb3DQEBCwUAA4IBAQBvQSFv6xcBupAzeVoHcBlmURre78ZGOezG
Om7nmSU5wsaVMgSpt2fTOF49S0LRh1muUGpPqOyYITaNE5j9oeTheEfV7cNmINwK
N9FUQqzhkOivioVNQqjCkUswwnsvTL/QLls4O3vKxhyvnBL7LbCey7Ph1lxEmBIh
xumCZraf14HEfs3P4mNpzdUYRTCQ3TTU3hAKLVwY8IHX04qkYC637VZrNC37p+D5
vSr9U8WM9ydSz8Gz1mYqLn3oVy42iW5O19vzsBelTfpJoBTnIDW9snImEvfoKlg3
sIhivk3bBNoZrSkndI6vkE8nNuHotXL9Mwexi+vaUsWMZYJx2nYm
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:29:59 2025 by rpki-client