Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QkR6d9gvW6NSFlNhXJgghLYhBpQ.cer
File: QkR6d9gvW6NSFlNhXJgghLYhBpQ.cer (raw, json)
Hash identifier: rMagjHWVJkjQz+Lee5Fla0yHabS0gNMd+FYsvHH+iHw=
Subject key identifier: 42:44:7A:77:D8:2F:5B:A3:52:16:53:61:5C:98:20:84:B6:21:06:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1BFFC62AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/QkR6d9gvW6NSFlNhXJgghLYhBpQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:59:40 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 29119
IP: 89.37.227.0/24
IP: 89.40.203.0/24
IP: 94.24.32.0/22
IP: 94.24.40.0/21
IP: 94.24.104.0/22
IP: 94.176.194.0/23
IP: 159.253.248.0/21
IP: 185.32.112.0/22
IP: 185.132.164.0/22
IP: 185.155.68.0/22
IP: 188.64.96.0/21
IP: 212.63.124.0/22
IP: 213.170.224.0/19
IP: 2a00:8a80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694710723247 (0xa1bffc62af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42447a77d82f5ba3521653615c982084b6210694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:d8:88:6e:12:4a:b9:29:b7:74:f2:5d:a1:
56:7b:5a:e6:27:23:31:79:e9:df:61:a6:0c:22:57:
de:42:aa:d3:e8:45:fa:90:d9:8e:ca:6d:ef:3d:9e:
7d:af:cb:61:ba:03:04:4d:da:d8:8b:78:04:57:d5:
7a:62:62:c7:7c:1e:c5:e9:9a:09:11:aa:19:91:b2:
6a:f8:6b:55:9e:f2:a4:e2:d5:99:18:b4:99:3c:81:
5c:e8:cf:ec:61:7a:03:e0:39:e0:b7:0f:1f:0e:b5:
9b:c0:c1:f1:66:4f:45:cd:d5:79:43:b8:83:16:df:
a6:aa:3b:c9:4e:e6:20:2e:51:11:96:4b:2c:b4:47:
04:a0:70:98:25:7e:5b:d3:aa:cc:9a:06:fa:80:62:
30:06:40:7e:0f:9d:4f:e3:f8:41:d8:f3:c7:10:9e:
c2:53:e6:3d:26:02:d5:91:3a:78:a0:ab:f3:98:ab:
2b:c7:1d:bb:b8:a3:f8:fb:47:af:41:84:e1:b3:78:
2d:ad:8d:98:21:d5:58:1e:2f:ad:7c:eb:62:00:81:
c4:70:b8:bb:52:7a:33:69:cd:f5:f8:62:46:3b:b6:
c9:90:dd:73:fe:5e:0f:11:81:2d:74:46:3e:5b:cc:
0d:13:9d:95:c2:c2:74:6c:ab:26:ac:26:72:c2:e4:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:44:7A:77:D8:2F:5B:A3:52:16:53:61:5C:98:20:84:B6:21:06:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/QkR6d9gvW6NSFlNhXJgghLYhBpQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.227.0/24
89.40.203.0/24
94.24.32.0/22
94.24.40.0/21
94.24.104.0/22
94.176.194.0/23
159.253.248.0/21
185.32.112.0/22
185.132.164.0/22
185.155.68.0/22
188.64.96.0/21
212.63.124.0/22
213.170.224.0/19
IPv6:
2a00:8a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29119
Signature Algorithm: sha256WithRSAEncryption
78:84:bb:20:de:c2:d5:db:6c:b3:f7:a6:3e:1f:d7:bc:63:bb:
37:0a:85:7c:96:b6:96:be:b5:be:2a:a4:ba:04:61:a9:ce:7f:
7b:29:dd:a3:e3:db:e4:88:78:31:34:78:c7:75:e7:0d:eb:6e:
15:e2:86:4d:4b:ff:7c:54:a0:86:f8:cb:b3:4c:c9:15:09:50:
a8:e3:1c:82:a7:6e:88:53:41:c2:a7:18:92:83:e3:e0:d6:64:
af:cc:dd:07:99:e7:dd:4f:f0:5b:6b:8b:30:ac:3a:f7:55:3c:
76:f3:c9:0b:91:65:b9:51:5a:69:97:9e:92:b0:93:54:ae:f4:
b8:b5:75:7c:b8:46:03:27:f6:9c:a9:d6:26:41:17:c9:45:68:
36:32:3a:c1:f6:bb:74:22:11:3f:09:67:e0:12:d7:cc:4f:84:
23:b1:b7:f7:fa:f5:2b:a7:11:a0:2d:c5:87:57:0c:5e:f9:61:
0f:18:76:21:a9:7e:6f:a5:43:40:4a:ae:4f:3c:2c:18:d2:fa:
7c:b8:08:4d:14:c0:31:af:e2:81:3d:69:7e:f6:fe:cc:2a:7f:
a1:10:ca:3a:8e:ca:42:c5:a1:1f:37:4c:be:45:59:e3:4b:f0:
9c:df:ff:23:52:ee:53:eb:b7:54:81:cc:fa:81:24:4a:73:15:
c9:f4:ce:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-fra.rpki-client.org