Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QS7HQowVHGBO85Ogukl59QkCASw.cer
File: QS7HQowVHGBO85Ogukl59QkCASw.cer (raw, json)
Hash identifier: V7dLqB/PUWa5CoHWfIW+YVgnztzGsqAiFSn8PDAE8C4=
Subject key identifier: 41:2E:C7:42:8C:15:1C:60:4E:F3:93:A0:BA:49:79:F5:09:02:01:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9EDA6C8E87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/QS7HQowVHGBO85Ogukl59QkCASw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:53:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.80.224.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682269380231 (0x9eda6c8e87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=412ec7428c151c604ef393a0ba4979f50902012c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:8f:42:c5:d7:09:d2:6e:5a:1f:7a:2a:c2:
8a:18:3b:01:a3:03:9d:47:2c:4a:0b:ea:35:28:63:
61:13:af:cd:42:e8:4c:94:f7:30:d4:13:95:73:4a:
90:7c:b8:db:fc:d0:b1:71:74:0b:07:d0:b7:72:54:
46:d3:b8:92:8c:e2:f0:de:21:06:39:bc:38:ad:a6:
ca:3f:c8:6c:32:06:52:a8:4e:e7:03:c7:e5:c9:b5:
40:1e:56:31:a2:ca:7d:fd:be:4a:3b:36:2e:fb:27:
61:66:aa:07:6c:d8:ab:37:2b:bf:b1:59:7d:0f:3b:
27:8b:58:53:2a:2f:e5:39:97:c7:b9:0b:e9:9f:e7:
25:dd:b6:5b:b5:ee:17:5e:61:82:ef:6c:ab:e0:26:
c3:6a:4c:ad:ee:89:9f:92:d4:9e:a5:9e:97:62:22:
e8:67:fd:83:76:bd:1f:65:29:73:75:69:d4:f4:76:
55:6c:3f:14:ee:9b:df:6b:52:ca:1c:11:83:b9:11:
3f:44:7f:61:ed:a0:b1:fd:1d:5a:0f:6a:0b:b4:15:
9e:85:12:a4:b7:6f:78:27:19:17:6d:d1:3d:fd:5f:
65:b8:09:3b:ec:44:38:5c:07:43:9d:0e:8b:f9:bd:
19:c2:53:6e:e8:ec:d0:0d:48:12:ed:1a:1b:ae:32:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2E:C7:42:8C:15:1C:60:4E:F3:93:A0:BA:49:79:F5:09:02:01:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/QS7HQowVHGBO85Ogukl59QkCASw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.224.0/22
Signature Algorithm: sha256WithRSAEncryption
98:71:fe:e3:ed:e1:75:6f:1b:1d:c5:25:05:45:04:09:f2:4e:
61:cf:eb:65:f7:bc:7f:a7:14:e0:39:87:1b:e8:93:a1:f1:e8:
11:cd:b4:2d:a5:11:fc:b3:f9:45:e6:c9:40:fd:e4:5b:5f:f9:
cd:3e:c7:28:2e:78:1f:d9:c6:30:60:4c:1f:00:7d:84:00:01:
63:8b:00:85:06:79:6e:f9:cf:b6:5a:17:cb:cb:03:1c:3a:0c:
05:23:0a:1d:8b:00:b9:a4:dc:2b:4b:7a:6a:2c:dc:d0:72:37:
0e:1e:9f:dd:9e:68:72:aa:cf:19:b2:d2:d9:ba:51:6d:97:51:
2d:44:ee:b2:3e:7a:10:86:b5:5a:b0:91:d8:eb:f4:dc:75:bd:
f3:4d:05:3a:f9:59:a7:8c:f6:22:bf:51:36:13:3d:c6:10:ec:
d5:22:eb:3f:a5:36:e9:06:67:c2:5e:a0:0b:19:2d:52:8d:87:
69:16:44:d9:83:3a:28:6b:9f:d4:4c:00:af:77:11:fc:52:4b:
01:f6:94:b4:7c:3b:86:47:01:97:3d:a5:ea:59:13:73:4a:fc:
45:43:9c:c7:8f:d3:08:30:70:f5:2c:ec:15:e8:8a:39:2e:29:
e0:82:8b:f8:a4:66:d6:ff:e3:0b:66:3c:28:4a:d1:1e:6a:44:
d1:26:49:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-fra.rpki-client.org