Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q3caLn8G6THM9mLGswVmpiZ-Koc.cer
File: q3caLn8G6THM9mLGswVmpiZ-Koc.cer (raw, json)
Hash identifier: nLILLNC8gWvohaOI1I55DXlvq0yb1KSEJtXGVyYLglk=
Subject key identifier: AB:77:1A:2E:7F:06:E9:31:CC:F6:62:C6:B3:05:66:A6:26:7E:2A:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F34781C16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/e3bbf7-16ce-4d84-bc81-957a0e5db6ef/1/q3caLn8G6THM9mLGswVmpiZ-Koc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/e3bbf7-16ce-4d84-bc81-957a0e5db6ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:57:49 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.250.92.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683780086806 (0x9f34781c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab771a2e7f06e931ccf662c6b30566a6267e2a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:0c:47:31:e2:6f:62:75:92:6a:85:dd:48:
7f:47:11:3a:03:66:29:61:c8:9d:37:4b:23:43:1e:
61:e6:84:7e:88:5c:a2:37:54:ad:04:09:cb:ae:b8:
28:1d:44:10:5a:da:aa:c9:f8:f8:a9:5c:e0:98:a1:
0a:93:4f:1e:49:c4:ac:c5:90:d5:f2:4f:0f:08:04:
c7:82:86:ca:d1:d7:9b:46:10:a2:b4:0a:6f:86:84:
49:dd:89:8b:ec:a5:ce:57:c2:3f:2e:fe:e0:0e:f2:
de:ad:d9:de:8f:28:0b:f5:c4:df:0e:10:ee:0a:08:
98:78:5f:29:9c:ab:02:c0:dd:22:c9:4c:3f:05:33:
9c:35:e5:e9:d9:24:6a:3e:08:3e:e3:63:db:89:f4:
c2:fb:a3:f9:ba:09:12:1c:c0:54:2a:c7:bd:b4:c5:
0a:4e:a9:11:ed:b2:50:a0:a2:7a:b2:cd:88:3e:f6:
a1:83:18:00:75:d7:62:87:4e:74:10:25:0f:9e:07:
6a:80:39:2e:dc:d5:b6:90:a4:63:55:14:de:b5:20:
f7:68:dc:1a:43:9c:ab:e5:07:11:e6:b3:7f:5b:ac:
df:06:4b:c8:e7:1f:6c:fa:44:2f:a9:f1:f4:a0:94:
2e:b6:b4:ad:bd:6e:f2:17:5d:5d:e1:8a:a7:2d:3c:
52:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:77:1A:2E:7F:06:E9:31:CC:F6:62:C6:B3:05:66:A6:26:7E:2A:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e3bbf7-16ce-4d84-bc81-957a0e5db6ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e3bbf7-16ce-4d84-bc81-957a0e5db6ef/1/q3caLn8G6THM9mLGswVmpiZ-Koc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.92.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:38:93:0f:74:00:e8:c3:d6:7a:98:89:2d:af:ba:d8:9c:a4:
76:d1:42:f8:e1:c5:80:48:32:73:7d:38:49:db:f5:83:f1:bd:
6e:a4:a9:fc:80:6d:04:18:e2:a4:91:36:09:e0:a9:11:f3:12:
ed:b9:7c:d0:17:39:c1:7d:28:63:c0:17:6f:50:b8:19:a5:d2:
4a:3e:a5:ba:0f:39:84:dd:81:54:ca:60:8e:1a:6a:19:8b:7b:
d7:06:3f:3d:b4:49:c0:fc:74:8e:9d:91:6c:2b:8a:fb:06:74:
18:1e:8f:51:e1:82:c2:f1:10:fe:2e:5b:3c:45:9f:4a:ac:34:
de:c1:7d:6a:fb:e2:96:44:cf:4a:59:61:16:e9:a2:ab:9c:15:
dc:d3:c6:c8:c3:0f:05:58:c0:f7:fe:c2:dd:f9:ce:a3:4f:c8:
d4:47:0c:66:2e:1f:64:8a:59:e2:f7:71:d9:fd:41:33:ff:98:
f0:c2:60:df:de:79:8d:08:6f:39:9c:43:5c:a3:7a:e2:cc:ba:
08:1e:cc:52:6c:ee:ae:34:d0:78:de:c2:da:eb:a4:e9:b1:03:
51:c1:6a:0f:98:db:ee:2e:17:43:7b:f7:11:f9:2d:5c:5e:f7:
ab:d8:63:ef:17:76:6e:3f:c4:43:de:21:f0:42:97:06:9c:3c:
b5:c3:e7:e6
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJ80eBwWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDU1NzQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhYjc3MWEyZTdm
MDZlOTMxY2NmNjYyYzZiMzA1NjZhNjI2N2UyYTg3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAtiEMRzHib2J1kmqF3Uh/RxE6A2YpYcidN0sjQx5h5oR+
iFyiN1StBAnLrrgoHUQQWtqqyfj4qVzgmKEKk08eScSsxZDV8k8PCATHgobK0deb
RhCitApvhoRJ3YmL7KXOV8I/Lv7gDvLerdnejygL9cTfDhDuCgiYeF8pnKsCwN0i
yUw/BTOcNeXp2SRqPgg+42PbifTC+6P5ugkSHMBUKse9tMUKTqkR7bJQoKJ6ss2I
PvahgxgAdddih050ECUPngdqgDku3NW2kKRjVRTetSD3aNwaQ5yr5QcR5rN/W6zf
BkvI5x9s+kQvqfH0oJQutrStvW7yF11d4YqnLTxSiwIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFKt3Gi5/BukxzPZixrMFZqYmfiqHMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2UzYmJmNy0xNmNlLTRkODQt
YmM4MS05NTdhMGU1ZGI2ZWYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZTNiYmY3LTE2Y2UtNGQ4NC1i
YzgxLTk1N2EwZTVkYjZlZi8xL3EzY2FMbjhHNlRITTltTEdzd1ZtcGlaLUtvYy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCufpcMA0GCSqGSIb3DQEBCwUAA4IBAQB+OJMPdADow9Z6mIktr7rY
nKR20UL44cWASDJzfThJ2/WD8b1upKn8gG0EGOKkkTYJ4KkR8xLtuXzQFznBfShj
wBdvULgZpdJKPqW6DzmE3YFUymCOGmoZi3vXBj89tEnA/HSOnZFsK4r7BnQYHo9R
4YLC8RD+Lls8RZ9KrDTewX1q++KWRM9KWWEW6aKrnBXc08bIww8FWMD3/sLd+c6j
T8jURwxmLh9kilni93HZ/UEz/5jwwmDf3nmNCG85nENco3rizLoIHsxSbO6uNNB4
3sLa66TpsQNRwWoPmNvuLhdDe/cR+S1cXver2GPvF3ZuP8RD3iHwQpcGnDy1w+fm
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:51 2024 by rpki-client on console-fra.rpki-client.org