Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QjHzDrMOcCIV1-2DnmksXR9frcw.cer
File: QjHzDrMOcCIV1-2DnmksXR9frcw.cer (raw, json)
Hash identifier: jOpyro/PLKb669Q/N7ipFw+brhXkifxSt8fl1KwahM0=
Subject key identifier: 42:31:F3:0E:B3:0E:70:22:15:D7:ED:83:9E:69:2C:5D:1F:5F:AD:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A3A2B9B0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/QjHzDrMOcCIV1-2DnmksXR9frcw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:53:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.93.56.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662400899850 (0x9a3a2b9b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4231f30eb30e702215d7ed839e692c5d1f5fadcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:d2:b4:61:3a:81:b3:bb:ad:74:a9:d7:e6:
33:87:91:a9:96:b2:6f:61:9e:81:41:d0:4f:a4:fa:
63:7b:4d:7f:9c:2a:c7:ff:e6:3d:b6:c2:3d:a9:a3:
c6:8b:97:64:8d:1a:87:a3:31:fe:02:26:8e:d5:01:
2a:16:0b:e6:c6:0f:0e:31:2a:7d:53:87:a7:ac:db:
60:53:61:d7:ef:a8:6e:c2:53:cb:e3:53:e2:57:1a:
f8:44:98:51:da:33:e4:ed:7d:e5:f0:62:ec:86:78:
b6:39:e7:31:e4:cd:1c:30:5e:ef:d6:6a:fb:0d:1c:
5c:49:88:0e:db:f8:af:54:a2:6a:c3:de:45:bb:8b:
f9:f1:2e:6b:53:db:78:1a:32:65:76:a5:2c:b9:c1:
b4:0e:e6:77:69:49:7a:b5:7c:9a:86:b9:37:b0:ab:
e6:77:a2:d9:1a:54:31:a2:85:1d:91:e7:a1:ff:84:
c9:6c:94:09:5b:7d:48:56:c8:84:8d:a7:2e:57:82:
9c:11:54:a4:fd:39:c1:3c:b4:ef:e5:01:e5:76:a7:
53:fe:ab:80:2a:80:41:0d:ec:2b:75:d4:a9:5d:0b:
da:01:f6:60:5e:f7:35:b3:d1:aa:5b:11:27:c9:43:
26:d7:ae:32:d6:8a:1b:67:cf:1b:d8:bf:ea:1b:85:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:31:F3:0E:B3:0E:70:22:15:D7:ED:83:9E:69:2C:5D:1F:5F:AD:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/QjHzDrMOcCIV1-2DnmksXR9frcw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.56.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:18:e1:ea:c3:35:85:e2:9e:6a:7d:08:38:e4:f1:2b:71:14:
e5:34:f6:56:32:11:df:e4:e0:c6:76:35:c3:34:67:dc:d8:bc:
1d:f8:f4:eb:9b:ee:c1:f3:fa:f4:08:5d:66:0d:88:58:41:05:
10:29:d2:51:71:05:2c:d8:b6:ff:28:b0:f0:4b:0c:57:d1:b7:
d3:c5:64:d2:fb:85:08:59:82:96:b4:d1:00:da:f6:5a:28:f9:
41:3a:0e:37:44:56:3e:25:71:93:19:17:da:78:1c:8a:cc:47:
d4:92:70:dd:17:bb:7a:61:e9:c0:5b:cc:50:6e:d5:dd:54:fe:
96:13:f1:e2:d5:65:9f:a9:46:fe:d0:a8:df:a5:2f:b1:79:b3:
8b:d1:a3:0a:bd:31:9b:5e:ce:3f:71:e2:bc:e4:9e:e2:99:d7:
e2:4f:bb:69:b8:81:7f:69:d7:54:22:83:4b:3f:c4:86:2e:aa:
59:56:48:e4:07:3a:96:42:0f:ca:8f:4a:b4:48:c5:93:28:4f:
76:c1:3a:d7:54:58:85:86:8e:42:2b:29:97:63:df:f4:34:52:
0a:7b:ca:31:b7:a4:97:b2:a9:10:47:e5:dd:e4:7b:48:29:6b:
c4:1f:f1:a3:44:5d:8b:cb:ed:77:96:da:75:25:59:d9:05:de:
18:18:0b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:17 2024 by rpki-client on console-ams.rpki-client.org