Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q-CYgB9UyaPEeuLzWLjj-9RoYU8.cer
File: q-CYgB9UyaPEeuLzWLjj-9RoYU8.cer (raw, json)
Hash identifier: M8MHmHHQ3eeAtZTkfern3H7BU9EuseMnWiUa3CONPSs=
Subject key identifier: AB:E0:98:80:1F:54:C9:A3:C4:7A:E2:F3:58:B8:E3:FB:D4:68:61:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA12CCE632
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/f2e659-5bb1-46b5-b55d-bd717752f2f6/1/q-CYgB9UyaPEeuLzWLjj-9RoYU8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/f2e659-5bb1-46b5-b55d-bd717752f2f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:04:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 202599
IP: 185.159.212.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730459858482 (0xaa12cce632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:04:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abe098801f54c9a3c47ae2f358b8e3fbd468614f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:af:23:89:f4:1a:dd:d2:d1:f7:28:12:3b:
90:60:59:66:e6:9c:cf:6c:e7:46:fe:88:3d:6a:73:
86:8e:ba:90:c7:f7:6e:16:17:1c:5e:8b:71:cc:0a:
08:31:79:f1:9c:2c:a8:96:8c:f8:43:1a:04:3a:57:
42:e1:67:47:6d:6d:e8:e7:6a:9a:ad:8e:89:b5:e1:
a2:7d:6a:00:ce:b5:35:9e:7c:50:87:f6:90:b6:6f:
1f:35:f1:89:e6:4e:95:ef:3b:9e:f8:11:2f:5b:44:
df:05:67:c7:bd:18:82:3a:51:e8:68:17:9b:63:a0:
83:dd:ef:98:33:13:f4:a9:2c:ff:74:fe:15:f8:23:
5d:a8:8e:01:29:1a:ec:e0:99:54:d3:7a:64:f3:70:
20:ce:7a:77:3d:8a:d2:bf:58:9b:24:8d:33:46:b2:
82:ba:9d:06:53:66:bb:5a:7b:37:91:0f:3d:47:8d:
99:aa:ca:34:a7:f0:68:08:24:5d:f0:45:7c:a2:b2:
5f:9b:83:b2:f9:7f:5a:a7:c8:31:17:5a:eb:b6:c5:
45:b4:4c:b6:e6:46:57:90:3a:b0:5a:5c:51:93:ec:
6a:e3:6e:16:43:69:be:a6:4e:36:82:7c:f3:51:14:
82:35:0b:1c:63:49:78:03:0d:1a:ad:c8:60:d3:95:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:98:80:1F:54:C9:A3:C4:7A:E2:F3:58:B8:E3:FB:D4:68:61:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f2e659-5bb1-46b5-b55d-bd717752f2f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f2e659-5bb1-46b5-b55d-bd717752f2f6/1/q-CYgB9UyaPEeuLzWLjj-9RoYU8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.212.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202599
Signature Algorithm: sha256WithRSAEncryption
77:8e:fd:a0:f7:87:ff:d3:67:58:1c:e6:f3:aa:f2:64:18:bc:
68:6f:b8:18:e2:fb:75:f3:a9:40:dd:bf:71:a4:c5:75:1d:84:
bd:6a:f0:b8:9f:38:af:ae:67:2b:b1:61:f5:63:dd:37:cf:20:
2f:86:97:6a:0f:20:4c:77:ff:30:78:49:fc:85:33:2d:fc:5c:
fa:7d:1a:22:8e:a4:b0:89:25:d9:ad:78:e6:39:76:7e:5f:77:
7c:65:e1:18:a2:1e:3f:51:ea:94:8a:7c:a4:22:b6:11:4f:9d:
93:2c:dd:cf:a4:db:39:24:88:bc:0c:b1:2c:4b:5e:cd:be:da:
ff:3a:69:1e:7d:3d:ff:49:16:16:2a:ac:d8:24:7b:bc:fe:12:
3e:4d:5f:3e:32:c8:2b:89:fe:af:23:14:4c:87:a9:62:7d:33:
37:be:12:2d:52:af:60:00:91:4a:b7:df:07:a1:a7:a5:df:85:
c3:92:e5:c5:fd:4e:3a:9c:b0:83:ad:6b:fc:cf:2b:b7:41:0d:
c6:27:fa:7f:b5:42:62:08:1e:6a:9e:66:24:b1:4a:3d:82:5f:
39:a0:5e:56:22:d3:43:12:05:01:fd:d4:5b:97:82:1e:73:48:
6f:f2:ed:5f:ad:11:10:30:2f:da:bd:6c:0e:28:41:ba:78:7b:
1b:83:e8:59
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIGAKoSzOYyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTUwNDI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhYmUwOTg4MDFm
NTRjOWEzYzQ3YWUyZjM1OGI4ZTNmYmQ0Njg2MTRmMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA2javI4n0Gt3S0fcoEjuQYFlm5pzPbOdG/og9anOGjrqQ
x/duFhccXotxzAoIMXnxnCyoloz4QxoEOldC4WdHbW3o52qarY6JteGifWoAzrU1
nnxQh/aQtm8fNfGJ5k6V7zue+BEvW0TfBWfHvRiCOlHoaBebY6CD3e+YMxP0qSz/
dP4V+CNdqI4BKRrs4JlU03pk83Agznp3PYrSv1ibJI0zRrKCup0GU2a7Wns3kQ89
R42Zqso0p/BoCCRd8EV8orJfm4Oy+X9ap8gxF1rrtsVFtEy25kZXkDqwWlxRk+xq
424WQ2m+pk42gnzzURSCNQscY0l4Aw0archg05Wg9wIDAQABo4ICoDCCApwwHQYD
VR0OBBYEFKvgmIAfVMmjxHri81i44/vUaGFPMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2YyZTY1OS01YmIxLTQ2YjUt
YjU1ZC1iZDcxNzc1MmYyZjYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvZjJlNjU5LTViYjEtNDZiNS1i
NTVkLWJkNzE3NzUyZjJmNi8xL3EtQ1lnQjlVeWFQRWV1THpXTGpqLTlSb1lVOC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCuZ/UMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXZzANBgkqhkiG
9w0BAQsFAAOCAQEAd479oPeH/9NnWBzm86ryZBi8aG+4GOL7dfOpQN2/caTFdR2E
vWrwuJ84r65nK7Fh9WPdN88gL4aXag8gTHf/MHhJ/IUzLfxc+n0aIo6ksIkl2a14
5jl2fl93fGXhGKIeP1HqlIp8pCK2EU+dkyzdz6TbOSSIvAyxLEtezb7a/zppHn09
/0kWFiqs2CR7vP4SPk1fPjLIK4n+ryMUTIepYn0zN74SLVKvYACRSrffB6Gnpd+F
w5Llxf1OOpywg61r/M8rt0ENxif6f7VCYggeap5mJLFKPYJfOaBeViLTQxIFAf3U
W5eCHnNIb/LtX60REDAv2r1sDihBunh7G4PoWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:07 2024 by rpki-client on console-ams.rpki-client.org