Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_qz-9Qws5e0Vn0-AZIPB6miC67A.cer
File: _qz-9Qws5e0Vn0-AZIPB6miC67A.cer (raw, json)
Hash identifier: wA/+sfBkCDlEnL+64ACC0PTTQqHhWIa9G6CKPaGS718=
Subject key identifier: FE:AC:FE:F5:0C:2C:E5:ED:15:9F:4F:80:64:83:C1:EA:68:82:EB:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AAD330AA55
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/c213df-6abc-46f3-a27b-5bdeabd13754/1/_qz-9Qws5e0Vn0-AZIPB6miC67A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/c213df-6abc-46f3-a27b-5bdeabd13754/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:59:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 198537
IP: 91.236.32.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733687622229 (0xaad330aa55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=feacfef50c2ce5ed159f4f806483c1ea6882ebb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:c5:44:04:8e:6a:36:76:a5:93:1f:62:c5:
c6:07:db:64:a0:1f:56:c9:f1:9b:90:d7:59:d2:c6:
be:fb:ec:f7:39:2e:f9:da:d2:26:5b:07:68:5a:bb:
6f:1d:63:02:cd:3b:ad:3f:60:4d:f5:0b:b2:32:97:
9a:26:e5:5d:b9:c3:d3:56:11:9b:1a:5d:53:4b:7e:
e9:6c:c3:ee:cb:e4:2a:02:5e:05:6f:e5:6c:61:48:
41:4e:fc:1e:ef:58:d9:35:3c:3c:c3:43:0d:dc:3f:
d9:a7:8a:51:9e:af:d9:bb:38:68:51:90:96:3f:85:
66:d9:d5:6e:0d:6f:0f:af:4d:bb:d0:cf:4e:11:f8:
48:11:5e:73:7e:f7:b1:ca:8f:7d:7c:ce:ad:f4:bb:
a0:33:43:e0:7c:47:af:0b:bd:eb:73:1e:c0:8e:0b:
9f:8d:d9:c9:64:a8:7e:b5:fb:f0:c4:b9:90:3f:80:
cb:2c:0e:e9:8b:8c:e3:de:a9:4a:5f:90:88:91:43:
57:f4:ff:0f:6e:0d:29:05:b6:20:5f:c8:3c:17:6c:
d6:49:8e:77:3d:0d:eb:4e:54:ee:0e:79:fd:0e:be:
45:51:ac:1d:43:72:6b:5a:5f:eb:a3:02:f9:87:ed:
80:15:77:f8:c6:fa:1a:6f:03:10:e6:cb:66:3e:4f:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AC:FE:F5:0C:2C:E5:ED:15:9F:4F:80:64:83:C1:EA:68:82:EB:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c213df-6abc-46f3-a27b-5bdeabd13754/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c213df-6abc-46f3-a27b-5bdeabd13754/1/_qz-9Qws5e0Vn0-AZIPB6miC67A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.32.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198537
Signature Algorithm: sha256WithRSAEncryption
ac:30:f7:5c:e0:6e:1c:3c:23:8e:ca:26:e3:f5:26:74:4f:9b:
ac:f8:32:b1:7a:f7:92:ee:37:66:63:fb:4b:cf:4e:40:35:ab:
3d:01:83:8f:67:2b:1b:df:69:10:fe:e1:98:6b:e7:aa:15:23:
52:75:71:c6:c0:14:ed:7c:99:8b:e3:ee:ef:18:31:49:af:bb:
ec:c9:da:3b:86:38:c4:51:19:31:df:6c:10:0a:3f:f0:54:43:
c9:0d:72:ae:c2:22:85:93:a1:b4:af:42:3a:2a:11:05:8a:fb:
af:1d:bc:23:d1:c2:0c:6b:70:9b:53:33:38:b3:7d:a2:85:e6:
f7:47:48:e2:73:77:0c:10:ea:64:91:66:60:76:0f:51:59:44:
c1:5e:4e:8c:35:af:e5:16:de:ed:14:98:1d:b8:2d:69:73:de:
2e:d4:30:3a:d5:ad:34:dd:40:3e:58:13:06:45:2a:44:59:b1:
ea:25:42:67:dd:36:34:09:6e:cb:14:92:56:1e:01:13:c1:80:
65:d0:fb:05:5b:c0:9a:08:fc:66:02:91:76:01:e4:35:fa:55:
47:23:f1:2b:6f:50:25:33:68:9d:9f:38:24:00:0f:ed:d9:81:
f3:42:db:92:c1:f6:38:48:b5:8e:5b:2f:11:1b:7f:52:a0:2b:
28:b9:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:43 2024 by rpki-client on console-fra.rpki-client.org