Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QzwEl63wdICVtr81FH73-862Cqw.cer
File: QzwEl63wdICVtr81FH73-862Cqw.cer (raw, json)
Hash identifier: KHb0hSf4nE289HPcmsaYr7y+72RLbNsla4006OTlOoY=
Subject key identifier: 43:3C:04:97:AD:F0:74:80:95:B6:BF:35:14:7E:F7:FB:CE:B6:0A:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AE97AE2BD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/6a44db-e6ca-429e-9e58-17526364fd12/1/QzwEl63wdICVtr81FH73-862Cqw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/6a44db-e6ca-429e-9e58-17526364fd12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Mar 2022 14:16:26 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212898
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749869083604 (0xae97ae2bd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 14:16:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=433c0497adf0748095b6bf35147ef7fbceb60aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:ff:0a:71:ea:3d:c4:b4:f1:80:9e:90:9b:
bc:48:f1:03:d4:79:36:3b:da:d2:04:2c:8c:98:e5:
51:79:d4:2e:ec:49:2d:7d:6a:17:c1:bc:57:76:bf:
8c:a8:13:3b:e0:b3:bd:af:85:9c:3b:19:93:6e:1f:
37:eb:51:78:44:75:a5:0a:08:ea:ab:5f:4a:d8:d8:
2e:e3:3e:8a:0d:8c:8d:4f:e3:8e:88:de:5d:e4:a1:
a1:27:72:b6:d8:fe:44:4a:ec:fe:ca:67:9a:c1:02:
45:aa:ff:62:cc:d0:65:bc:38:3f:04:64:5a:68:54:
e4:54:ea:ed:1e:24:e4:5a:c8:53:89:4c:9b:50:55:
68:89:14:33:6d:cc:ca:81:c2:1d:5d:14:22:1f:bd:
bf:cb:33:fb:72:6e:da:3f:42:e7:45:d3:ab:42:4c:
50:4d:39:31:cb:84:02:a3:2e:b6:e4:b0:fd:31:70:
13:73:7a:62:6c:bb:e7:bb:72:ae:59:3a:ec:d2:44:
f0:d7:dc:a4:6a:8a:d2:c2:a1:8b:c6:e4:b1:e7:3a:
a7:62:73:40:ac:d5:7c:96:07:9a:bd:3b:5c:ad:72:
c9:3e:c8:45:2d:2d:cd:85:54:7b:d1:de:8a:30:43:
e4:cf:a0:17:39:ab:98:77:91:49:c8:0d:54:9e:b3:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3C:04:97:AD:F0:74:80:95:B6:BF:35:14:7E:F7:FB:CE:B6:0A:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a44db-e6ca-429e-9e58-17526364fd12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a44db-e6ca-429e-9e58-17526364fd12/1/QzwEl63wdICVtr81FH73-862Cqw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212898
Signature Algorithm: sha256WithRSAEncryption
52:cf:a4:03:1e:a4:86:31:d2:dc:17:5b:d6:28:c7:6b:5d:a0:
32:c0:83:3e:b3:5d:8f:a6:3a:83:a5:5d:4b:45:e8:f0:9c:21:
09:73:cd:41:4b:6c:33:af:b6:12:83:b8:80:63:7e:2a:4c:36:
cf:00:e4:12:75:cd:78:2f:19:51:73:f9:15:f8:cb:c1:a5:55:
7c:a8:2e:67:90:81:03:d5:52:51:c9:1b:2e:e2:02:c9:a7:b5:
ce:5d:bd:34:c3:b6:78:38:23:20:21:d2:8c:7f:54:14:af:a6:
8e:7d:b4:79:22:bd:a1:65:91:7b:bb:5a:20:29:70:87:87:08:
ed:56:6b:3a:0e:a4:f7:03:aa:f8:31:dc:71:38:1e:26:ba:a4:
c3:55:e7:60:a2:1e:b0:33:17:6e:64:72:86:7a:d1:7b:84:77:
d4:84:c5:a0:94:58:90:66:7c:20:47:19:c5:fa:18:9b:fb:df:
ca:39:7b:11:0f:94:55:15:f1:bd:7f:66:50:61:f2:0b:cd:e4:
3b:06:a5:7d:02:60:0c:cf:a1:8f:b3:0c:6d:a8:94:43:4a:a4:
99:d7:96:13:0e:ea:09:59:0c:9c:f7:85:10:75:61:0d:d3:0d:
7d:82:c0:b5:ef:34:cd:30:81:3a:fe:ef:73:a3:04:eb:98:19:
20:38:19:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:22 2024 by rpki-client on console-ams.rpki-client.org