Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dQCQWovTATKNCBSFwDNMN0CKtXI.cer
File: dQCQWovTATKNCBSFwDNMN0CKtXI.cer (raw, json)
Hash identifier: CQwba1Y9fxcqQD0FL3zatrFRVzFB8dt/fY929X5K7GU=
Subject key identifier: 75:00:90:5A:8B:D3:01:32:8D:08:14:85:C0:33:4C:37:40:8A:B5:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A49D8BC9AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/dQCQWovTATKNCBSFwDNMN0CKtXI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:54:28 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 92.249.60.0/22
IP: 2a09:b700::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707017820589 (0xa49d8bc9ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7500905a8bd301328d081485c0334c37408ab572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:44:5e:77:f0:97:c0:f6:a5:93:b4:5f:40:34:
9c:10:b3:29:0a:9e:65:be:84:ff:08:42:89:38:70:
26:be:81:39:95:b0:b5:1c:1c:7f:14:c2:eb:18:55:
af:88:9b:5e:59:21:d9:5e:5b:42:d2:49:46:c7:63:
7f:90:4b:14:39:64:8f:09:3f:76:da:0c:7a:15:5b:
9f:76:6e:63:bc:eb:4a:f6:4a:b2:2e:bb:3c:1d:00:
fc:29:70:d4:d2:89:5a:88:44:0f:d4:fd:f8:a1:29:
ec:e0:39:b8:06:33:57:86:0a:23:ca:e6:e5:b6:e6:
e4:39:cd:a5:99:b6:ae:cc:b1:2e:38:e1:52:5a:06:
2b:ff:9d:3a:83:32:0f:a7:49:6d:fd:00:0c:38:d6:
81:c8:db:e2:bf:4b:e4:a7:84:77:97:8b:72:d8:44:
f7:67:15:9b:da:cf:f7:09:e3:65:37:bb:62:9b:26:
95:de:73:49:b1:a7:44:53:20:41:27:49:c7:a9:51:
d2:ae:d7:63:fe:a9:cb:65:b1:65:7e:d2:2a:56:2e:
f1:d6:c8:de:4f:a1:d1:96:07:4e:d6:53:28:ab:89:
16:95:0d:49:48:29:1d:86:9e:1d:2b:c7:c2:2c:70:
b8:02:fb:05:e0:b8:58:e9:12:63:97:59:a2:01:18:
fc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:00:90:5A:8B:D3:01:32:8D:08:14:85:C0:33:4C:37:40:8A:B5:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/dQCQWovTATKNCBSFwDNMN0CKtXI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.60.0/22
IPv6:
2a09:b700::/29
Signature Algorithm: sha256WithRSAEncryption
04:a5:9b:4c:d3:ec:ac:7a:74:20:c6:73:9b:ac:3a:c9:f9:d1:
0d:93:7a:90:a4:ed:0e:2c:b0:60:f6:d7:8e:fb:71:03:35:d6:
3c:67:e8:75:c4:f3:65:28:6d:5c:90:93:dc:d9:46:c9:9f:71:
ac:3c:6c:a0:f3:bb:bb:4d:3c:3c:ea:fe:b6:9d:91:5e:12:c8:
bc:c2:af:ec:fc:6f:1c:b2:7d:a0:36:70:c6:14:0f:6f:08:7c:
a1:c5:b7:ba:be:f0:d4:c3:fb:16:eb:08:74:e4:76:cb:bf:2b:
2b:30:ef:ac:5d:3c:8c:c9:da:32:9b:4f:bf:39:d0:72:53:b0:
e3:28:c0:66:ce:b4:bb:d6:fd:57:2e:1b:29:e0:94:39:e9:c2:
de:97:f1:f8:91:ed:d5:09:f3:e2:c5:db:20:c9:45:70:57:88:
2e:9f:83:32:7b:16:95:31:50:2a:94:34:e4:c4:a3:de:17:1f:
6e:b9:72:5e:fe:c6:4f:8a:b7:96:87:f3:25:7c:1d:a3:f9:4f:
89:7f:08:a3:2d:70:8c:b9:79:45:10:0d:b6:59:80:6f:d2:7e:
ae:9b:13:ed:f4:a6:46:8c:63:f2:bd:93:c6:32:d4:ea:83:b5:
31:f6:c5:17:e6:4a:7f:64:2e:a3:98:97:6c:2c:29:2e:ef:13:
b8:ff:27:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:19 2024 by rpki-client on console-ams.rpki-client.org