Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QV8_7i62C9ABw-sej5CFRYD54RA.cer
File: QV8_7i62C9ABw-sej5CFRYD54RA.cer (raw, json)
Hash identifier: SnbLtDuCPCGKNrsvQD6J6CceXqu6cQuvVYwz0sVCTQc=
Subject key identifier: 41:5F:3F:EE:2E:B6:0B:D0:01:C3:EB:1E:8F:90:85:45:80:F9:E1:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0182D054302E32D717A38A205B3543257F05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/4fc7d4-2efa-4fc6-80ea-ee7673440e3f/1/QV8_7i62C9ABw-sej5CFRYD54RA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/4fc7d4-2efa-4fc6-80ea-ee7673440e3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Aug 2022 14:49:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.252.8.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:54:30:2e:32:d7:17:a3:8a:20:5b:35:43:25:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 24 14:49:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=415f3fee2eb60bd001c3eb1e8f90854580f9e110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:a9:fa:fc:7a:16:df:4e:e6:14:32:c2:5b:
56:6b:6d:5d:7a:5f:1a:28:13:ca:89:68:08:17:5f:
e7:69:de:9e:61:71:48:9d:c0:41:4e:d6:14:59:db:
39:af:1f:d2:ce:54:b3:1f:27:f1:88:46:7b:5e:c1:
6f:2a:fb:6d:0e:bf:0f:9f:6e:ec:d4:86:a9:86:d9:
cd:2d:b1:56:08:a4:f3:8f:ac:b2:64:62:33:58:a3:
cc:0e:f5:8c:37:75:b6:c4:74:3b:50:3f:8b:fe:52:
aa:6b:c0:85:61:10:98:66:c9:0b:37:6e:19:49:56:
e4:e7:39:01:5b:b9:c7:c2:43:37:00:99:0a:88:c6:
0f:db:e0:24:c1:f2:87:13:d0:83:93:a4:dd:f4:e0:
76:ae:40:f1:d6:b0:a6:24:b7:ab:e4:cb:0c:fa:41:
7b:6e:39:50:24:9d:d9:fb:22:80:70:ff:bd:53:9b:
25:3a:f8:5b:bf:01:fe:65:90:3b:db:58:04:d4:9a:
88:f9:b9:5e:47:14:f2:bf:e3:b4:a3:71:41:13:f2:
fb:75:1a:7e:d7:c9:37:77:e4:33:0d:6b:30:7a:3e:
15:2c:aa:da:8d:21:57:ec:8c:16:19:82:86:b0:55:
ca:dc:a5:17:7c:49:0f:14:bd:f2:46:4d:f7:ca:0e:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:3F:EE:2E:B6:0B:D0:01:C3:EB:1E:8F:90:85:45:80:F9:E1:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4fc7d4-2efa-4fc6-80ea-ee7673440e3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4fc7d4-2efa-4fc6-80ea-ee7673440e3f/1/QV8_7i62C9ABw-sej5CFRYD54RA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:58:19:07:dd:e7:01:6b:f1:f6:b6:b1:be:4c:52:7e:83:e1:
13:89:aa:b8:3e:f9:ea:c7:95:d1:de:36:3d:fa:b4:8c:a6:89:
2b:b1:d9:ee:71:9f:eb:91:0b:36:0b:06:2f:5e:5a:2b:a6:86:
1f:0a:ee:a5:53:c9:f7:c4:3d:3d:c5:76:1d:96:ee:85:46:a5:
93:4c:d7:5e:7a:b0:b5:bf:e1:7d:e9:fa:fb:35:e7:94:d3:3f:
6c:88:0b:59:81:f8:0e:8c:8a:d7:57:70:74:e9:11:06:49:8c:
ef:31:82:b6:31:b8:a1:47:5a:74:d0:45:b1:b5:7c:f2:38:c1:
43:99:42:1a:17:6e:6d:b4:49:7e:be:b4:9e:44:05:7a:26:c2:
e1:5b:05:e3:44:ae:fa:a8:e7:0a:76:a9:38:bc:3a:ec:c1:e7:
44:8c:ff:d8:ec:1f:2c:af:71:be:c8:84:b9:7d:f7:39:7d:a0:
2b:8d:25:9e:ff:f5:51:02:b7:0a:61:94:40:f9:21:d3:8f:da:
0a:44:fa:fe:d6:b2:40:fa:31:bd:2f:ee:a0:65:fe:27:25:6d:
d4:7b:1b:4a:b6:a6:98:51:02:88:ca:d7:59:8f:70:75:52:1b:
82:81:1b:b6:74:5b:21:74:d0:7f:b3:7e:db:61:26:96:42:9f:
4c:16:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:57 2025 by rpki-client