Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QisVScjMLuv4WAZ7sqYr_vkKHrU.cer
File: QisVScjMLuv4WAZ7sqYr_vkKHrU.cer (raw, json)
Hash identifier: hyepdBQnibS2FlEonI31FL7a90QTPuLTKW3L8h3chls=
Subject key identifier: 42:2B:15:49:C8:CC:2E:EB:F8:58:06:7B:B2:A6:2B:FE:F9:0A:1E:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A206200E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/4f5830-cfa2-4ecd-9361-8950981da470/1/QisVScjMLuv4WAZ7sqYr_vkKHrU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/4f5830-cfa2-4ecd-9361-8950981da470/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:52:07 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 176.119.202.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661968257256 (0x9a206200e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:52:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=422b1549c8cc2eebf858067bb2a62bfef90a1eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:41:0d:8a:24:de:10:e2:ee:f2:dc:32:84:
ef:8f:6b:34:9b:64:6e:40:43:79:fd:75:72:f3:ad:
94:f9:83:13:14:b9:2a:31:93:65:3e:2a:f3:e2:7c:
9e:2b:3b:6b:7f:2b:78:66:ab:be:88:50:8b:59:be:
64:70:e7:44:b7:8d:dc:8c:24:97:a3:e2:e5:d1:a5:
ec:b7:a2:67:b3:58:70:dc:19:42:64:ce:52:11:fa:
b4:3d:12:60:36:e7:8a:a6:52:e9:fe:ff:9f:57:24:
a2:a1:74:f6:d3:1d:81:ff:ad:9b:ff:9d:23:de:1a:
e3:52:62:6c:b1:86:e3:d9:8b:db:9d:b0:45:09:d4:
c0:8c:32:67:bc:b0:4d:2b:bd:09:dd:a0:37:32:d3:
79:50:df:dd:d2:9c:42:b4:e2:a0:49:b9:52:90:42:
34:a9:e7:f4:96:f1:02:74:c0:11:d0:e7:e5:7b:83:
97:b1:78:80:de:8f:21:e3:56:cc:ea:a6:7d:f3:be:
38:49:8c:c2:23:fe:18:ae:95:3c:db:20:87:9b:ee:
3e:71:8c:20:69:8e:85:c4:0b:ca:cd:80:14:02:a1:
9b:86:64:68:f2:c9:20:bb:93:07:d1:23:0f:ba:9b:
f3:5c:8d:93:89:87:b0:57:d5:ae:fb:13:98:41:93:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2B:15:49:C8:CC:2E:EB:F8:58:06:7B:B2:A6:2B:FE:F9:0A:1E:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4f5830-cfa2-4ecd-9361-8950981da470/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4f5830-cfa2-4ecd-9361-8950981da470/1/QisVScjMLuv4WAZ7sqYr_vkKHrU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.202.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:87:7f:c8:8f:65:f4:2e:22:48:2a:b1:8c:44:49:1f:27:fb:
59:67:cb:fd:52:9e:c6:4b:d5:75:da:4c:6c:21:4e:a4:63:a1:
9d:d8:24:27:4d:e4:cd:5f:2a:b2:ce:b3:b3:f0:50:4d:a6:24:
f8:fb:4f:68:32:c7:f4:d5:18:e1:98:5b:27:14:59:dc:82:99:
52:0c:c5:23:14:04:22:49:b9:cb:38:b2:9c:ee:d0:9d:d5:7a:
27:87:22:d5:95:4d:9f:35:66:dd:70:da:2e:50:29:ab:6c:94:
42:59:c3:cb:41:ad:a5:c6:57:c5:6d:4f:45:d1:03:a2:fb:28:
2e:b0:00:01:ee:b1:98:12:d5:50:14:ea:49:03:a4:3d:88:1e:
08:a8:66:f8:11:22:c3:c3:ce:50:70:b5:98:df:6e:cf:65:d1:
e8:7d:f6:13:8c:f6:0d:26:a6:0e:d9:74:fa:94:9b:f9:22:53:
e9:da:a5:df:50:d7:3f:7e:16:f2:f2:fa:f0:20:30:4b:82:e0:
a7:0f:b6:5d:fb:9b:09:dd:3f:83:ab:29:e1:a2:ba:b2:13:f2:
16:36:a2:0d:33:5b:24:da:d2:8c:a3:ee:0f:f3:19:ef:af:29:
eb:61:d1:95:0c:f9:b1:cc:82:da:85:b1:63:54:8b:7f:d8:44:
ac:e5:4a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:36 2025 by rpki-client