Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QKoMyOFlzXBSIfOqiqbmKIRiAT4.cer
File: QKoMyOFlzXBSIfOqiqbmKIRiAT4.cer (raw, json)
Hash identifier: qbmAiNKWMNZ9qHLha+kS/zVLXstHoBP3c1g7D9s1o/w=
Subject key identifier: 40:AA:0C:C8:E1:65:CD:70:52:21:F3:AA:8A:A6:E6:28:84:62:01:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A13AD93087
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/QKoMyOFlzXBSIfOqiqbmKIRiAT4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:53:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.138.156.0/22
IP: 2a0e:af40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692477046919 (0xa13ad93087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40aa0cc8e165cd705221f3aa8aa6e6288462013e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:6b:42:8c:97:22:9e:81:73:9f:ec:1b:5f:
43:3d:00:4b:6a:c4:3a:18:24:ee:87:87:ed:d0:0d:
12:64:8f:4e:dc:0d:5f:58:04:3e:35:c3:4e:d1:0f:
38:09:6c:cc:49:db:9a:f4:80:fd:de:04:74:9b:96:
4d:a4:25:35:6d:70:cd:89:bc:4b:2d:7e:4f:ca:40:
85:81:d0:bf:50:79:a2:8b:e7:9d:65:95:ed:d9:0e:
95:f4:c5:ec:cd:35:50:e4:29:7f:62:c1:e9:3b:0e:
55:44:47:ce:03:ed:42:63:4d:b5:ff:77:aa:e2:c5:
37:9e:a4:b8:a7:fb:8e:1e:95:7d:b8:97:77:86:af:
30:83:49:38:7a:da:03:88:24:d2:87:67:69:b7:fb:
a5:21:0f:8c:73:db:34:eb:2c:c6:d1:2f:aa:ce:a3:
4a:2c:9b:79:fd:65:52:3d:f9:de:54:65:4b:ec:74:
6f:0d:d8:95:36:13:37:86:0c:27:c9:a6:65:25:e7:
71:03:31:12:eb:88:fe:7d:23:47:8d:e0:2e:1f:61:
e9:14:7a:b5:cb:80:bb:9f:0f:eb:88:36:8b:1d:cc:
d3:c0:22:61:6b:be:f8:eb:f6:6b:e7:1e:ba:9b:9b:
f4:c9:75:09:70:b2:47:99:d4:d4:40:e5:be:76:a3:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AA:0C:C8:E1:65:CD:70:52:21:F3:AA:8A:A6:E6:28:84:62:01:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/QKoMyOFlzXBSIfOqiqbmKIRiAT4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.156.0/22
IPv6:
2a0e:af40::/29
Signature Algorithm: sha256WithRSAEncryption
9c:47:d2:b7:d7:5e:89:0d:59:5a:dc:cf:51:21:b1:b5:60:3e:
07:97:8d:b9:19:3a:97:c1:6b:e4:08:37:5b:7d:52:23:ce:6c:
44:6f:79:e9:4b:d2:4b:62:78:33:2e:8d:34:e5:ed:b4:fa:c1:
c8:35:bc:13:0a:ce:8f:01:58:f4:42:7b:be:35:a9:60:1e:d2:
a5:67:16:95:9b:f3:bc:5e:1a:d2:1b:50:0f:6b:2c:72:5f:9f:
a5:ab:5f:2d:3c:88:07:83:1f:2a:75:7b:bf:63:b1:5d:c4:b6:
b1:3b:e7:36:b1:f4:68:45:ad:21:43:4c:bd:77:c5:22:08:f6:
90:52:40:0f:a7:a4:96:91:ae:d9:42:c1:50:7a:f0:54:6a:fb:
a6:23:8b:01:25:27:9f:7a:19:6a:cd:76:f3:59:03:bd:94:8f:
82:80:44:16:7a:ca:ea:07:0a:77:d9:d9:52:16:98:ab:a3:32:
e0:a3:7c:ec:5a:29:fa:9c:fd:4f:14:8f:43:e7:db:6d:03:29:
39:f1:93:2c:ec:10:e4:2c:7f:a0:bf:d2:c2:68:37:ce:e7:25:
b3:75:2b:7f:96:82:92:63:27:76:09:7f:aa:d4:36:7d:75:3e:
83:44:7d:a0:01:cb:c3:2a:7e:ec:be:a7:a2:66:85:cf:68:fe:
29:be:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:10 2024 by rpki-client on console-ams.rpki-client.org