Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qUwhoSUldK0nPNeANVLPHrRiOVg.cer
File: qUwhoSUldK0nPNeANVLPHrRiOVg.cer (raw, json)
Hash identifier: RQfzEkpdsv7saKwriCTke7RU+9n+HkGFjK35RzqQx6o=
Subject key identifier: A9:4C:21:A1:25:25:74:AD:27:3C:D7:80:35:52:CF:1E:B4:62:39:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A537C88465
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/a5e527-2cc8-4644-ae72-80f3147b8715/1/qUwhoSUldK0nPNeANVLPHrRiOVg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/a5e527-2cc8-4644-ae72-80f3147b8715/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:59:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 139.28.56.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709605491813 (0xa537c88465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a94c21a1252574ad273cd7803552cf1eb4623958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:6e:d0:21:8c:c5:aa:16:34:9f:19:e6:06:
d0:01:7f:7a:d2:eb:1a:9d:4b:eb:bc:dd:c0:de:71:
c3:f4:4b:ab:03:c1:25:11:51:53:c8:1b:a1:a2:b3:
dc:0e:3b:0d:b3:17:b8:99:0a:4f:98:e3:54:0c:69:
17:24:f2:1c:88:66:f4:c7:e4:ee:78:f5:09:b9:15:
38:71:3f:b1:b3:e7:ad:4d:2e:e6:9b:78:e5:76:40:
db:e3:e6:f6:a1:ed:3c:1d:75:41:c5:b0:67:55:20:
3e:9c:71:54:b3:fd:00:7c:84:c8:79:0c:51:c7:4a:
58:86:d6:81:22:c1:94:88:91:13:48:7a:5e:2d:7b:
ec:f9:b6:94:3b:57:24:b1:1b:be:84:95:e4:12:5e:
82:c8:e3:49:48:c9:57:b0:36:d6:f1:37:e2:c3:f4:
b5:4e:26:46:f5:96:d5:ae:e6:2c:35:c7:1b:42:f4:
88:7c:f1:27:87:23:6e:4c:a9:5a:3f:ed:a1:ea:0e:
14:fd:98:e2:be:f8:14:4a:6a:db:71:c8:41:26:67:
86:df:6b:7b:f2:20:8e:bc:c9:51:f0:49:7c:b9:e1:
27:67:c0:1c:0f:c8:4e:d6:65:af:7f:4c:c0:9f:44:
b0:5d:ee:60:c3:27:5c:af:23:d4:a2:fd:f9:f7:e5:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4C:21:A1:25:25:74:AD:27:3C:D7:80:35:52:CF:1E:B4:62:39:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a5e527-2cc8-4644-ae72-80f3147b8715/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a5e527-2cc8-4644-ae72-80f3147b8715/1/qUwhoSUldK0nPNeANVLPHrRiOVg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.56.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:76:68:d8:5f:1a:a9:f1:72:80:21:6e:8d:74:1f:53:e7:78:
ca:dc:4e:a1:f0:9d:5e:c0:d1:99:e1:9c:72:62:67:7a:b8:65:
e6:82:82:da:93:96:d1:a9:31:4a:0c:66:58:4e:d8:ae:ea:54:
a1:85:00:72:cc:53:1a:7c:2f:99:05:89:7a:b4:fa:f3:f3:33:
1e:14:55:6e:dd:28:fc:80:4c:47:5d:e0:4b:79:e5:98:46:92:
fd:7b:08:1b:6f:eb:48:07:c9:ae:40:99:dc:1f:61:ea:7c:61:
d2:fd:8f:c2:1e:23:fd:cf:c6:f0:32:f7:f1:fa:c4:48:31:a0:
80:0f:04:2c:dd:7f:c3:05:a1:28:99:2b:e7:c6:05:c9:e1:7b:
9f:0f:aa:c4:2f:b8:52:09:e0:9d:57:70:c9:4c:fe:27:e8:af:
a1:f3:71:c9:6c:ef:33:5b:b6:67:62:24:1d:5c:7f:ae:f8:95:
14:b3:43:26:48:c6:c1:29:36:6f:b0:67:b2:cc:d3:9a:fb:6e:
38:dd:80:58:fb:10:67:3a:95:2a:3c:4a:1f:8e:73:7d:a7:ad:
c6:b3:7d:78:dc:78:59:29:86:ff:73:6a:66:fd:ad:7a:36:e0:
ce:8b:95:39:d0:f2:12:57:54:ae:10:5f:86:d0:08:cc:8a:a7:
5c:02:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:55 2024 by rpki-client on console-fra.rpki-client.org