Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_QDl--M-T9yefNRCdDrHWGH1YZ0.cer
File: _QDl--M-T9yefNRCdDrHWGH1YZ0.cer (raw, json)
Hash identifier: Tm+rYBxzVA6YPZDEvY/0d5GTJKxM6wMzcaagHHl3f2M=
Subject key identifier: FD:00:E5:FB:E3:3E:4F:DC:9E:7C:D4:42:74:3A:C7:58:61:F5:61:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F653C46B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/e02b9b-5bb2-4b31-b68e-f1e1abb874dc/1/_QDl--M-T9yefNRCdDrHWGH1YZ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/e02b9b-5bb2-4b31-b68e-f1e1abb874dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:01:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34296
IP: 37.130.64.0/18
IP: 46.1.0.0/16
IP: 95.173.224.0/19
IP: 109.228.192.0/18
IP: 185.19.152.0/22
IP: 217.65.176.0/20
IP: 2a01:7840::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684598249136 (0x9f653c46b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd00e5fbe33e4fdc9e7cd442743ac75861f5619d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:2c:45:07:75:a8:a4:52:fe:a6:f0:6b:21:
21:49:54:7e:15:33:93:f5:ec:d0:41:a9:7b:ea:6a:
68:87:03:77:6c:51:a4:ba:78:6a:02:32:c7:65:ef:
8d:8f:65:b1:62:46:f3:df:9c:48:65:19:17:2e:ba:
08:ab:5d:9c:db:27:63:45:d3:0e:92:5e:bd:d4:10:
6b:43:b7:b0:50:35:28:a9:e0:30:d6:10:f5:11:7b:
10:83:8c:c8:c6:d2:be:e3:4f:86:fc:56:b0:15:2b:
1e:a5:d8:f5:6a:3c:5c:7b:24:5a:74:c3:70:a2:d7:
75:0a:c6:ee:4e:b3:b6:18:3b:eb:29:7c:a1:d5:9d:
f5:51:0c:f1:d7:d0:f1:50:6f:af:d4:ca:09:86:a2:
1d:0c:c4:0d:d2:24:eb:f0:bb:f7:f7:cf:62:4b:f4:
16:77:05:29:5b:44:7b:b0:39:a1:a0:3d:15:83:23:
37:76:2d:2b:85:9a:86:7e:41:cf:4f:8f:75:65:07:
dd:3b:74:cc:5b:ee:40:0f:a9:2b:9e:6b:e2:c7:dd:
f6:58:ee:8f:d1:4d:c1:03:06:ed:3b:2f:b5:a4:d0:
c4:2f:c4:5a:b5:18:b4:cb:60:3c:2c:36:e3:1d:28:
67:4b:ae:88:3a:33:6f:35:33:e8:95:b9:52:d8:2e:
f1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:00:E5:FB:E3:3E:4F:DC:9E:7C:D4:42:74:3A:C7:58:61:F5:61:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e02b9b-5bb2-4b31-b68e-f1e1abb874dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e02b9b-5bb2-4b31-b68e-f1e1abb874dc/1/_QDl--M-T9yefNRCdDrHWGH1YZ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.64.0/18
46.1.0.0/16
95.173.224.0/19
109.228.192.0/18
185.19.152.0/22
217.65.176.0/20
IPv6:
2a01:7840::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34296
Signature Algorithm: sha256WithRSAEncryption
a7:db:26:c0:4e:93:10:82:98:e9:1f:b5:06:07:99:80:bb:12:
39:be:d6:88:bb:a3:44:8e:be:28:a6:63:c2:81:e5:fa:0d:88:
cc:4f:c8:23:47:49:65:1d:1a:46:20:91:58:b5:65:46:a0:76:
d9:5f:b7:9b:18:0b:c5:86:34:05:e4:45:9f:46:a0:53:e8:a3:
a5:aa:31:66:bd:7a:c6:9d:e4:d9:43:a6:f1:79:85:57:8c:d8:
c7:77:d6:cd:30:ba:3e:5b:21:6e:c6:53:a2:91:cf:aa:84:64:
19:35:80:96:dc:b4:9b:a2:6c:34:99:f7:7e:b0:5c:4c:ee:7e:
88:66:65:4f:17:b4:8b:f9:24:9d:f7:ad:18:42:89:f3:ae:72:
21:f8:fa:5c:e5:65:e6:2b:ef:b5:0e:7e:d8:5f:79:77:d8:55:
dd:9f:6a:73:94:46:61:b2:5e:9c:90:c0:61:01:8f:6c:59:46:
28:e2:70:ea:9f:ff:fd:e9:54:7d:20:d6:0f:98:cb:be:07:0e:
b6:09:f9:a6:05:b0:5e:30:45:59:20:46:8e:b4:4b:5f:63:b7:
c3:be:8b:51:a0:14:59:75:44:ea:4b:0a:b6:06:c5:8d:5d:94:
da:80:16:d9:ce:a8:14:ab:c9:9c:ce:ed:9d:1e:d5:ec:9f:fb:
56:9b:87:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:31 2024 by rpki-client on console-ams.rpki-client.org