Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RQ-e0F_gPzjPpT1qhds7eb_-jJE.cer
File: RQ-e0F_gPzjPpT1qhds7eb_-jJE.cer (raw, json)
Hash identifier: 8+yMLHKN7wKCwkX5uAT8Na9NJdF9MqJoBq+R1J5lCqE=
Subject key identifier: 45:0F:9E:D0:5F:E0:3F:38:CF:A5:3D:6A:85:DB:3B:79:BF:FE:8C:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F319C574C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/RQ-e0F_gPzjPpT1qhds7eb_-jJE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:57:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34907
IP: 45.132.56.0/22
IP: 2a0e:68c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683732129612 (0x9f319c574c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=450f9ed05fe03f38cfa53d6a85db3b79bffe8c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:a1:89:5b:d7:73:b1:af:ac:a8:a5:c9:04:
86:0f:0d:b3:90:59:44:5f:05:97:99:fb:6f:a3:14:
2e:3e:96:b4:89:70:8d:f1:89:70:a1:52:ee:17:e3:
2c:d6:7d:52:52:82:15:b8:cf:63:80:93:e0:d1:3f:
5d:a2:73:00:9c:29:14:73:57:c9:bb:2a:01:44:0b:
ca:10:3d:78:06:f1:39:c5:06:89:7a:17:c6:04:25:
9e:9e:ab:fd:a9:d5:c4:03:27:5f:e3:fe:4a:47:8a:
e6:c8:6c:0e:aa:e8:a7:a0:06:08:74:f8:54:a9:f2:
ae:07:e7:9c:65:92:4a:86:34:bd:f9:ae:a2:85:9f:
62:80:fe:9b:9a:90:d6:41:cf:15:eb:8c:2d:b8:ab:
6b:f6:57:f6:2d:ae:8a:70:f0:41:31:d8:f0:6e:32:
a1:14:d9:ec:68:cd:96:2f:60:c1:27:5a:a1:0b:ba:
82:ec:e0:52:29:e4:60:46:9d:1e:24:7b:a5:a5:87:
b9:22:51:c6:94:94:2b:14:fb:9e:ef:65:ab:79:d2:
01:15:9b:4c:97:a1:67:39:aa:6e:61:63:50:6c:ba:
27:a0:2b:f2:d9:c6:55:cc:90:d9:dc:04:78:d3:93:
fe:bb:09:e8:83:c2:24:3c:26:49:8d:ce:39:5d:3d:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0F:9E:D0:5F:E0:3F:38:CF:A5:3D:6A:85:DB:3B:79:BF:FE:8C:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/RQ-e0F_gPzjPpT1qhds7eb_-jJE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.56.0/22
IPv6:
2a0e:68c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34907
Signature Algorithm: sha256WithRSAEncryption
91:29:65:a5:1f:e2:51:36:ee:b6:84:0c:48:15:64:4f:93:7d:
6d:cb:e2:f5:bb:1f:1d:79:ec:0f:ac:28:99:22:0b:fb:b0:24:
ab:d6:f4:d7:a0:a6:f5:85:05:7f:92:f1:ad:24:11:d0:36:64:
94:df:c5:1c:01:6f:ea:1a:30:68:62:20:70:67:39:28:e7:3f:
af:79:4c:df:5c:b9:6d:34:b5:78:b8:ae:cd:7f:d4:80:01:c6:
0e:b1:f4:57:6f:4b:2c:f6:18:cd:68:a9:5d:a7:61:4b:7a:16:
73:0f:68:1b:91:95:7d:1d:f7:46:f2:77:73:9a:b7:2a:2a:e6:
5e:63:c7:20:a2:2d:ef:fe:3d:50:af:2f:af:07:28:8e:d9:be:
40:dd:5a:30:b7:84:9a:f2:6b:07:e6:76:ec:5c:24:cb:8b:05:
03:b6:f1:2a:f0:43:b2:7d:eb:35:1e:cb:43:a8:e5:78:08:b4:
97:88:5e:49:6e:6a:f3:dc:1d:7b:72:ac:be:4f:33:f4:bc:5d:
af:9a:27:df:c1:fa:d9:b8:67:56:93:84:04:41:b4:62:b0:64:
48:40:06:af:57:db:a2:65:04:d0:17:6e:03:01:a4:f3:87:9a:
6e:25:07:04:a1:ef:8f:70:25:3e:85:90:41:86:a1:e1:a9:84:
8d:c8:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:29 2024 by rpki-client on console-fra.rpki-client.org