Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kqyTO-EkBaVvGU19rXA-so4TGDc.cer
File: kqyTO-EkBaVvGU19rXA-so4TGDc.cer (raw, json)
Hash identifier: ngzamL+lQa7jN/pLldiedcqTEw3x66suSynTBWNRixg=
Subject key identifier: 92:AC:93:3B:E1:24:05:A5:6F:19:4D:7D:AD:70:3E:B2:8E:13:18:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 997DDC6F93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/9bf57f-28c5-4e86-bb6e-cd0b648c3cb5/1/kqyTO-EkBaVvGU19rXA-so4TGDc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/9bf57f-28c5-4e86-bb6e-cd0b648c3cb5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:57:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 141.98.48.0/22
IP: 2a09:fc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659241594771 (0x997ddc6f93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92ac933be12405a56f194d7dad703eb28e131837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:8d:9a:3b:04:87:44:83:f8:51:03:41:26:
4b:aa:fc:95:74:a4:ef:7e:bd:c2:6b:5c:0d:53:31:
5a:d4:e8:0f:d4:16:6a:ab:39:32:a8:70:2d:d5:86:
a2:21:88:01:b3:ca:cd:2b:44:a4:35:34:b5:38:53:
8d:0d:b5:24:f4:12:24:cf:60:ef:89:5c:06:98:af:
34:a5:00:0f:15:7e:37:56:80:02:5b:77:a5:18:96:
b2:70:9a:ab:f9:16:2b:e5:35:c9:32:7e:31:77:27:
d2:fb:1e:d5:1d:e4:bf:cd:21:a0:31:03:e4:de:b3:
50:63:cc:a9:a7:90:5e:f8:c8:1d:e2:54:82:bb:7d:
72:36:80:06:2f:90:cc:44:cd:42:1e:9a:50:fe:55:
32:bc:54:57:96:20:14:05:8d:9f:05:67:8e:d8:87:
66:61:4b:9b:ca:2d:69:15:4b:ea:a6:ea:c8:e5:ac:
33:1d:b6:45:08:d6:fe:b9:d9:e1:6e:7c:da:d1:ce:
09:86:ed:a0:e8:b7:8f:43:b9:32:3a:ee:9f:5c:79:
10:41:5f:cb:8a:06:dc:75:bd:8c:6a:e1:9b:54:cc:
97:19:8b:3c:4b:8d:b3:34:d2:5b:66:87:3d:19:87:
1a:ec:21:1b:97:7b:4f:40:0d:7e:53:77:a6:e1:7e:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AC:93:3B:E1:24:05:A5:6F:19:4D:7D:AD:70:3E:B2:8E:13:18:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9bf57f-28c5-4e86-bb6e-cd0b648c3cb5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9bf57f-28c5-4e86-bb6e-cd0b648c3cb5/1/kqyTO-EkBaVvGU19rXA-so4TGDc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.48.0/22
IPv6:
2a09:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
50:8b:59:91:e8:3d:40:f6:5b:c8:e1:75:fb:c9:83:92:f8:9d:
3a:65:5c:09:13:27:dd:97:b7:c1:61:95:de:7f:b0:4f:2f:90:
67:82:ab:ad:3b:29:b1:7c:ac:9c:5f:b1:28:e3:5d:79:07:4c:
01:55:86:35:f0:4c:1d:27:28:64:c7:1c:6c:70:4a:36:e5:3a:
73:36:aa:14:a4:20:56:57:ec:07:f5:c3:56:14:fc:36:fa:d4:
6f:d0:0d:d2:94:fe:24:6d:01:19:49:b6:2f:03:1e:bf:ee:db:
eb:6f:26:a9:1b:72:a8:62:fd:d4:f2:9e:bb:4d:32:74:cf:9b:
8b:33:45:a3:84:d7:cc:ef:04:d8:e3:6e:c1:7f:c4:a0:21:41:
4d:77:17:cd:b5:8b:50:7b:ad:50:7c:7d:da:96:ae:7a:74:a0:
15:a0:57:07:84:cc:61:6a:73:89:c6:eb:26:8c:67:3f:89:87:
68:e8:e6:0d:b9:bb:4b:73:0e:90:c1:1f:de:0b:31:b0:0b:88:
e4:59:4f:11:5e:da:be:22:42:c9:9e:d2:67:7a:3a:52:58:42:
47:b2:b1:e1:3a:c9:0f:19:dc:1c:84:bb:83:65:e9:2c:22:a9:
2e:34:5f:5b:08:68:07:e7:97:40:5c:cf:e9:1c:71:a6:15:12:
51:b5:03:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:01 2024 by rpki-client on console-fra.rpki-client.org