Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qf91M6G1ObTOyHkYuHipphwCYJI.cer
File: Qf91M6G1ObTOyHkYuHipphwCYJI.cer (raw, json)
Hash identifier: TJtikoxQvpN1qwYemou8+m80aRy6jlzfbrn5NKkj1Rs=
Subject key identifier: 41:FF:75:33:A1:B5:39:B4:CE:C8:79:18:B8:78:A9:A6:1C:02:60:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9EEA54777D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/97d3dc-7245-4fb3-8f4e-9ee46aeaa4ce/1/Qf91M6G1ObTOyHkYuHipphwCYJI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/97d3dc-7245-4fb3-8f4e-9ee46aeaa4ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:53:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211715
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682536236925 (0x9eea54777d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41ff7533a1b539b4cec87918b878a9a61c026092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:4f:af:73:54:03:3d:77:88:6b:d0:d3:ae:
66:84:9e:14:1c:98:dc:a6:56:4e:17:e6:94:f8:85:
9f:52:62:e9:29:23:ff:cf:97:20:b3:f9:26:1e:17:
b2:d4:2d:e6:cf:60:82:38:77:49:16:97:90:49:02:
95:0d:8f:71:c1:75:b2:ec:ca:38:f2:4e:8c:65:af:
88:b3:a9:be:72:1c:ba:34:f0:9d:75:57:2c:cb:40:
67:1e:96:ed:9e:92:b2:ca:58:de:38:93:24:57:d8:
f1:6f:cb:88:d9:97:81:b2:ed:e5:5a:3b:3c:8a:70:
40:1c:dd:fa:ae:8a:c7:29:44:97:69:b8:ef:91:77:
83:7c:9e:d5:f4:23:cd:6a:73:ad:df:72:23:f9:9a:
2d:cd:bd:d6:a6:3b:23:6c:9c:d5:76:29:dc:a4:90:
d2:5b:8b:d8:37:88:86:e0:48:c5:cc:05:8b:90:7a:
5e:e2:77:65:83:f2:83:96:fb:22:11:c6:41:93:bf:
91:2c:5f:65:6e:9f:b8:58:6b:33:99:d4:e0:59:a4:
17:d8:aa:96:e8:5e:65:5c:54:ed:3c:ad:02:8b:1b:
49:1d:86:17:61:52:84:3a:bc:bc:11:94:ca:f1:ea:
0c:36:0b:d2:0e:48:f7:51:79:51:0c:f1:2c:6d:f4:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FF:75:33:A1:B5:39:B4:CE:C8:79:18:B8:78:A9:A6:1C:02:60:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/97d3dc-7245-4fb3-8f4e-9ee46aeaa4ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/97d3dc-7245-4fb3-8f4e-9ee46aeaa4ce/1/Qf91M6G1ObTOyHkYuHipphwCYJI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211715
Signature Algorithm: sha256WithRSAEncryption
50:3f:ba:bc:65:c7:97:ea:ed:43:b3:37:71:98:e3:9d:bd:3d:
20:cc:ff:cf:26:95:a5:cc:80:6f:d9:02:7e:6f:b5:a3:15:3f:
51:f9:7b:91:51:ab:bb:ce:e0:83:b6:5e:d4:35:f7:ec:20:13:
66:17:13:18:d3:b0:91:d7:fa:63:87:d6:f3:11:ae:2d:cd:7a:
cd:e7:aa:c3:6a:08:e3:46:13:38:bf:7b:1b:ac:4b:b2:2e:00:
2c:bc:b6:c7:da:b6:6f:c2:9e:d6:cf:27:38:72:b8:fb:a2:e6:
c8:d6:a0:ff:f7:13:30:a2:ae:c8:fc:55:ca:ac:dc:ab:17:fa:
90:df:8e:6b:49:f5:6c:f6:1d:17:95:15:e2:8a:c0:e4:81:4e:
4e:3a:f8:84:7e:8c:b7:ce:f4:10:61:e7:73:b8:56:f2:c0:cb:
a5:1c:be:32:0f:84:0f:eb:10:eb:ff:d9:84:c0:75:e1:6d:a7:
dd:f6:b3:8f:b5:0a:f1:3d:95:f1:46:ba:6b:a0:e8:80:12:12:
95:76:f0:7c:78:6f:f1:3c:1f:1e:f7:81:ab:8e:7c:28:85:da:
fd:82:ec:cc:23:9a:d7:e9:60:94:c0:96:d3:9b:c2:27:28:e6:
f8:f0:fa:6f:17:15:fb:1f:2e:9e:b9:49:74:ab:d2:0c:5e:bb:
43:16:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:16 2024 by rpki-client on console-ams.rpki-client.org