Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
File: Qk6L1SWxme3BtzktogIl90iW2p0.cer (raw, json)
Hash identifier: CuqgvLkTLdxc06GsILGM03wd1OBVewVWnxj2hFe6N5g=
Subject key identifier: 42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99A887A9EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:58:50 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.9.156.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659957459439 (0x99a887a9ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=424e8bd525b199edc1b7392da20225f74896da9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:5b:e8:04:5e:22:79:ca:96:f0:fd:a5:c1:
f5:24:72:cb:3c:0f:4f:a1:92:89:53:b3:2b:8b:c7:
31:c9:49:3b:52:7d:dc:2e:99:80:f0:8c:22:be:8f:
23:b7:45:c5:88:83:7e:95:85:44:71:9b:be:5d:bd:
38:17:1a:0d:c0:95:57:c0:c8:b8:9b:94:c5:02:d6:
e0:f8:55:7a:c2:fa:09:28:aa:67:71:21:b9:c4:ec:
60:14:b2:f4:fb:82:df:bb:65:c7:04:56:b8:c9:ec:
b4:7e:18:9a:41:66:ef:b0:3d:6d:5b:37:7e:b8:3e:
62:d0:19:62:1c:af:e9:b6:3a:2b:9b:50:6c:99:7b:
fc:eb:88:a4:9e:f8:53:76:5e:e8:2d:99:68:d4:02:
b2:5d:e5:43:5e:70:c6:94:c4:be:cf:db:8c:2c:de:
77:62:2f:04:c3:8b:15:95:72:71:e2:a6:16:4d:82:
54:e6:b3:b6:80:26:60:2d:22:69:ec:00:86:c6:90:
47:c0:0f:a9:58:3b:0b:98:01:25:c4:ad:cb:64:ec:
8b:db:15:c2:d8:2d:5b:7a:df:a4:cf:7a:b0:69:76:
a1:55:87:97:e0:58:9a:eb:bb:cc:09:1e:65:36:15:
6e:ce:15:b9:21:00:87:fa:d5:bd:84:ae:2f:09:4b:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/22
Signature Algorithm: sha256WithRSAEncryption
41:1e:53:15:70:42:0c:00:84:4d:56:ab:03:a2:35:7a:6e:9e:
d2:f2:b1:00:c3:80:d0:42:e8:1c:16:5d:61:18:83:26:84:a1:
b6:32:cb:59:73:63:6e:7b:d6:5c:86:ac:68:98:23:45:62:31:
c2:04:fa:e7:8e:02:55:5b:f3:c3:0d:e5:6b:b7:56:c2:ac:c4:
7f:f9:9e:f2:f1:87:99:3b:de:ac:77:ee:2c:1e:44:2c:c8:09:
87:47:ae:40:bd:7d:73:4d:3f:2c:4f:ef:0f:62:60:3d:2c:3f:
9b:c6:17:9e:53:47:0b:a1:bc:a7:f5:8e:81:0f:57:0f:bf:c8:
b6:3a:c1:a8:65:e9:1d:aa:f8:19:62:2b:a0:94:78:64:d8:9f:
bf:eb:1c:f3:ba:28:0a:60:16:81:18:d6:b0:f2:14:53:04:ae:
52:a0:d6:b2:2e:ab:74:2a:c5:db:f3:28:34:8b:b5:fa:13:c0:
36:98:b9:23:94:6d:fe:6a:3e:52:a9:e5:6c:03:e7:23:b3:9f:
7f:97:29:c0:07:a5:48:c1:a6:58:9d:b1:2b:95:3d:36:07:66:
d1:3e:0f:e2:e5:b1:0b:38:d3:72:b8:e0:bd:4a:f7:ab:2f:a4:
63:da:7c:34:85:3e:c7:c6:e2:36:90:03:2c:38:0c:0e:ec:cb:
72:9e:dd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:17 2024 by rpki-client on console-ams.rpki-client.org