Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QlxhBKroOTEoHgBPrV2fdiMsCXg.cer
File: QlxhBKroOTEoHgBPrV2fdiMsCXg.cer (raw, json)
Hash identifier: uonuNLnqRVLGLRT3/lZ7KSaIE7sD9nOp44kS2bIZPeo=
Subject key identifier: 42:5C:61:04:AA:E8:39:31:28:1E:00:4F:AD:5D:9F:76:23:2C:09:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01853900B60D2DE0206FDE7BDECBEE8C3B26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/QlxhBKroOTEoHgBPrV2fdiMsCXg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Dec 2022 08:43:46 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 203025
AS: 209375
AS: 209883
AS: 209963
IP: 89.33.135.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:00:b6:0d:2d:e0:20:6f:de:7b:de:cb:ee:8c:3b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 22 08:43:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=425c6104aae83931281e004fad5d9f76232c0978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:8e:76:20:75:90:a4:57:8a:7e:80:46:1b:
42:48:e3:90:41:59:57:e1:a1:e8:ea:54:b9:84:54:
70:76:60:a0:2a:2e:b0:fd:75:92:e6:1b:ee:8e:2d:
5a:1b:7b:b0:20:62:f4:39:26:c3:ce:3d:ad:fe:74:
19:02:f0:b3:c0:e4:b9:06:b2:22:b7:37:c4:5f:af:
4f:60:f8:76:b2:9a:61:c1:5f:a6:a7:c1:42:c6:11:
92:cb:23:9b:cb:14:94:93:74:7b:8b:8a:04:f3:28:
b9:4f:38:2b:7a:ce:7d:44:c7:8a:17:43:99:b4:82:
a7:5a:42:2c:d0:6e:bc:af:78:75:fe:d9:a6:31:c7:
f7:9c:b2:76:5d:eb:f0:a7:43:fc:84:73:55:21:71:
79:3d:f8:0c:84:8f:fd:94:c0:c6:b0:bc:82:2c:68:
2d:1f:ef:e1:39:02:4f:77:88:0d:f3:27:94:94:96:
15:87:e9:47:a9:f3:6b:ac:f9:62:63:d4:1f:35:a4:
d2:b6:90:f5:b1:d2:56:f0:d4:56:7f:6a:7d:37:27:
a6:98:31:93:06:bf:b7:12:8d:15:ed:ae:ff:56:1a:
7d:f4:6c:8c:fa:35:8c:cf:07:65:b0:6b:8a:61:4e:
6a:1f:93:d9:18:c1:e6:3f:18:ee:ae:24:a9:8f:bc:
d4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:61:04:AA:E8:39:31:28:1E:00:4F:AD:5D:9F:76:23:2C:09:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/QlxhBKroOTEoHgBPrV2fdiMsCXg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.135.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203025
209375
209883
209963
Signature Algorithm: sha256WithRSAEncryption
98:e6:98:5c:52:42:7f:87:ac:d8:54:6d:23:0e:5b:de:25:0b:
a5:44:f4:83:40:86:06:7d:28:84:0c:0d:24:f5:63:b2:d6:20:
2e:88:8b:a8:0d:25:fb:3c:b8:77:8f:b3:5e:5c:10:2d:77:23:
4c:be:77:f1:00:de:37:51:91:1a:83:82:0b:b8:e4:b8:a0:b1:
30:e3:6d:d3:df:a7:1f:30:4a:68:7f:45:7c:97:98:85:ab:ed:
cc:84:20:a7:b3:e4:a5:2f:2b:3c:a4:2c:b2:fe:6a:3d:54:63:
fa:f5:82:87:a5:ca:ca:7c:7b:c0:83:47:af:b4:48:b6:e8:ad:
56:f4:8c:34:7f:3f:e5:9e:0e:6e:05:56:6f:cd:a6:f7:91:4a:
76:aa:ac:bb:1f:7f:dc:40:fc:8e:e7:12:5e:38:2d:ff:88:c5:
f1:e4:34:29:fb:1f:c7:dd:cc:6a:ff:33:d2:45:b4:5c:69:aa:
79:5c:d8:1c:b8:1f:c0:19:37:5b:cf:02:48:7d:e8:4b:2b:1b:
cf:40:b8:6c:74:19:09:0e:94:64:aa:85:9d:de:b1:37:00:81:
a6:6b:38:59:f4:87:e8:cb:bd:4c:d1:96:f4:cd:89:39:aa:39:
dd:7d:24:53:65:f7:cc:99:fe:08:bb:5b:f0:5c:29:5b:c8:bd:
43:4d:b7:cc
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYU5ALYNLeAgb9573svujDsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMjIyMDg0MzQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjVjNjEwNGFhZTgzOTMxMjgxZTAwNGZhZDVkOWY3NjIzMmMwOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNGOdiB1kKRXin6ARhtCSOOQQVlX
4aHo6lS5hFRwdmCgKi6w/XWS5hvuji1aG3uwIGL0OSbDzj2t/nQZAvCzwOS5BrIi
tzfEX69PYPh2spphwV+mp8FCxhGSyyObyxSUk3R7i4oE8yi5Tzgres59RMeKF0OZ
tIKnWkIs0G68r3h1/tmmMcf3nLJ2Xevwp0P8hHNVIXF5PfgMhI/9lMDGsLyCLGgt
H+/hOQJPd4gN8yeUlJYVh+lHqfNrrPliY9QfNaTStpD1sdJW8NRWf2p9NyemmDGT
Br+3Eo0V7a7/Vhp99GyM+jWMzwdlsGuKYU5qH5PZGMHmPxjuriSpj7zUfQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEJcYQSq6DkxKB4AT61dn3YjLAl4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzliYTY4
MS0zNjQ5LTQyMGYtOGYyNC02N2NkYjJmMDY5M2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvOWJhNjgx
LTM2NDktNDIwZi04ZjI0LTY3Y2RiMmYwNjkzZC8xL1FseGhCS3JvT1RFb0hnQlBy
VjJmZGlNc0NYZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAWSGHMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQC
AwMZEQIDAzHfAgMDM9sCAwM0KzANBgkqhkiG9w0BAQsFAAOCAQEAmOaYXFJCf4es
2FRtIw5b3iULpUT0g0CGBn0ohAwNJPVjstYgLoiLqA0l+zy4d4+zXlwQLXcjTL53
8QDeN1GRGoOCC7jkuKCxMONt09+nHzBKaH9FfJeYhavtzIQgp7PkpS8rPKQssv5q
PVRj+vWCh6XKynx7wINHr7RItuitVvSMNH8/5Z4ObgVWb82m95FKdqqsux9/3ED8
jucSXjgt/4jF8eQ0Kfsfx93Mav8z0kW0XGmqeVzYHLgfwBk3W88CSH3oSysbz0C4
bHQZCQ6UZKqFnd6xNwCBpms4WfSH6Mu9TNGW9M2JOao53X0kU2X3zJn+CLtb8Fwp
W8i9Q023zA==
-----END CERTIFICATE-----
Generated at Wed Mar 12 16:15:40 2025 by rpki-client