Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qc_dIPHaWIYTEkyxvDZUO2S1DIc.cer
File: qc_dIPHaWIYTEkyxvDZUO2S1DIc.cer (raw, json)
Hash identifier: illcF7j5tEetILNSwuZK5RHRz+Lzi8TcHZgfaQsDOCA=
Subject key identifier: A9:CF:DD:20:F1:DA:58:86:13:12:4C:B1:BC:36:54:3B:64:B5:0C:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E9DA571D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/32d817-3b8d-4c48-b579-02ff2690c5f8/1/qc_dIPHaWIYTEkyxvDZUO2S1DIc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/32d817-3b8d-4c48-b579-02ff2690c5f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:05:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 209506
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681249698256 (0x9e9da571d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:05:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9cfdd20f1da588613124cb1bc36543b64b50c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:40:a3:94:6b:4b:dd:2f:0c:5d:8e:0e:50:
13:16:33:b5:9a:e7:fe:c3:9a:88:c2:d6:ab:16:c7:
e5:82:0f:81:f7:ef:2e:d7:c4:16:de:4d:23:f1:d3:
85:8c:dd:b4:b9:c5:d8:a4:97:4f:4f:39:15:58:b8:
88:c1:1a:6f:7d:92:be:2e:37:61:f0:cc:a2:71:66:
bd:b8:39:6c:5f:84:4b:18:76:d8:0e:dc:6e:f6:68:
65:17:26:7b:e1:9e:04:49:d5:ea:fd:97:83:32:9a:
60:23:86:dd:88:e7:3a:85:d2:dc:e4:b2:0c:9a:a1:
a5:47:69:38:be:d1:f6:db:f4:28:ba:be:70:44:58:
2e:e7:f2:34:b9:d2:1f:f8:21:e0:0e:42:c6:20:76:
d6:63:6a:2e:15:2b:e9:39:3e:1b:b7:3a:39:76:ec:
c3:45:e9:0a:18:e3:52:0a:6f:41:91:7d:48:f5:33:
a7:26:6b:23:d4:d2:df:bc:1b:ce:70:08:ea:c5:f7:
f6:ad:22:42:0d:f5:19:1e:01:33:0b:90:64:d6:c8:
24:ca:4e:f8:09:97:8a:1d:47:be:24:c8:de:37:e4:
b9:85:65:a7:bc:7f:82:8d:81:a0:fe:f2:18:70:80:
74:d4:60:b3:13:ca:58:3b:15:7c:1f:d7:a8:31:d2:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:DD:20:F1:DA:58:86:13:12:4C:B1:BC:36:54:3B:64:B5:0C:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/32d817-3b8d-4c48-b579-02ff2690c5f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/32d817-3b8d-4c48-b579-02ff2690c5f8/1/qc_dIPHaWIYTEkyxvDZUO2S1DIc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209506
Signature Algorithm: sha256WithRSAEncryption
34:cd:f1:bf:37:02:76:6b:ef:4e:01:94:d0:35:45:41:ca:55:
73:27:7a:b2:58:fb:d0:33:90:69:f6:25:f1:e2:39:45:81:f9:
80:31:51:33:3d:be:4c:b1:15:b0:c9:3f:17:84:43:76:b7:3f:
4b:a2:02:bf:f6:18:16:73:65:00:30:42:d5:6a:9c:2e:3d:40:
5e:f0:ea:d6:dd:e6:25:9f:c6:d1:b4:08:48:7a:b0:de:bf:4b:
a2:c5:a5:88:f7:42:fe:88:8d:7a:f9:1f:21:c3:b9:df:9b:fc:
74:0c:f0:5f:b6:28:f9:aa:8c:15:8d:8d:d2:1b:b5:b8:aa:18:
d2:01:de:e4:6c:c2:b1:37:fa:9e:5e:eb:40:69:09:b9:bc:42:
20:73:8e:c5:aa:a7:18:8d:67:c8:f5:a4:5f:2d:c6:38:f5:40:
b4:95:bf:69:c0:1c:97:6f:be:33:5a:5a:93:bf:db:85:d9:fd:
80:8f:ac:6b:70:09:78:af:a4:ed:da:8e:b1:97:05:f7:85:ca:
5a:a0:d6:94:fe:4f:02:22:58:25:c9:4b:4f:ab:9b:a0:72:1a:
cf:96:c2:78:eb:73:90:0b:d6:9d:db:3c:29:a5:1f:37:c3:05:
1b:22:1c:36:65:41:6f:7d:05:3b:03:f6:9f:8b:0a:fc:72:e4:
66:e9:d8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:28 2025 by rpki-client