Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qgtJswmvg9gm5KfrvE6Yhctr8QI.cer
File: qgtJswmvg9gm5KfrvE6Yhctr8QI.cer (raw, json)
Hash identifier: JqsHA2z6prSsMj6Ao8aLrM2MY01H/LXSztTnmD+VuU8=
Subject key identifier: AA:0B:49:B3:09:AF:83:D8:26:E4:A7:EB:BC:4E:98:85:CB:6B:F1:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AF1F18A31D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/2253dd-871b-40d9-94f0-e73636c207d9/1/qgtJswmvg9gm5KfrvE6Yhctr8QI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/2253dd-871b-40d9-94f0-e73636c207d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 25 Mar 2022 10:12:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210560
IP: 2a11:f740::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752140985117 (0xaf1f18a31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 10:12:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa0b49b309af83d826e4a7ebbc4e9885cb6bf102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:12:f0:b4:c8:4b:06:69:95:f8:be:69:80:
f5:d6:ff:e9:e7:62:9b:8a:2b:1c:b3:8f:43:c8:f0:
0b:b4:31:54:61:40:15:7c:3b:08:ec:64:26:c8:de:
ed:b3:14:b5:b4:b5:32:5e:ab:42:15:47:0e:bb:cf:
e7:03:86:f0:4b:23:6e:8a:d0:8b:67:d2:d1:0c:1f:
6c:1f:77:93:8e:b9:75:89:0a:e3:16:27:74:b3:bb:
9c:ce:83:23:71:47:19:ae:6f:db:b2:2e:8b:a1:20:
7f:3e:bd:f8:d6:cc:59:c9:9c:be:fa:e0:a8:d5:36:
24:30:0e:ed:9b:1b:17:6b:9e:bc:82:b5:dd:15:b0:
2e:ee:27:8b:e2:4f:3c:38:65:b5:a9:75:6e:f0:c4:
5e:45:c3:bc:d2:45:72:78:43:b8:29:a5:51:31:97:
2d:8b:10:27:5c:12:f3:25:7f:30:bc:9f:85:03:8d:
27:c0:6e:f4:f8:b9:83:de:e3:f3:a2:43:14:aa:2c:
79:c2:3f:0c:d6:f6:eb:b7:3e:6c:ef:12:52:c1:ce:
4f:ec:72:50:55:0b:8f:28:55:c8:65:05:19:91:58:
b0:a5:51:d5:7a:93:3b:7f:2a:6c:10:85:18:55:ac:
2c:21:d8:94:4c:58:6c:ab:a6:d2:d3:26:c9:e4:3b:
ce:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0B:49:B3:09:AF:83:D8:26:E4:A7:EB:BC:4E:98:85:CB:6B:F1:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2253dd-871b-40d9-94f0-e73636c207d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2253dd-871b-40d9-94f0-e73636c207d9/1/qgtJswmvg9gm5KfrvE6Yhctr8QI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210560
Signature Algorithm: sha256WithRSAEncryption
9d:c4:45:f0:40:28:4a:21:e2:47:e3:e9:6b:5c:5c:a9:5b:fd:
7d:2f:f4:b3:1b:b0:e0:6a:87:8c:9d:fc:8d:fb:e9:46:39:1c:
19:60:ad:64:0c:d2:eb:b4:f5:ff:6e:19:ce:d4:53:4b:d6:28:
c0:9e:19:b6:54:e5:12:90:c3:11:04:b1:8c:31:d4:c6:d9:08:
c9:f4:6d:cf:44:af:fa:50:17:48:6a:99:20:02:cb:d7:93:16:
8d:a6:a1:ba:c0:55:92:fe:6d:ea:4b:e9:72:0c:e0:80:b2:83:
81:7d:a1:5f:ac:69:fe:16:ec:76:e5:e0:a2:48:c0:00:e3:8f:
5c:5d:02:1f:37:b6:27:92:e4:85:41:c5:33:46:b3:ce:b6:ab:
2d:8a:10:fe:82:f2:37:c9:58:29:90:db:13:47:b8:e5:85:5f:
f9:29:61:76:ee:6d:fd:1d:11:2b:96:fc:dd:69:31:98:2e:b5:
89:fb:2c:d4:f4:af:8d:fd:5d:e6:05:3f:54:8d:dc:37:eb:1a:
cc:90:cd:e9:d3:ec:14:77:5e:74:3f:ff:a6:d9:08:d4:08:7c:
5b:5a:f9:fa:29:14:3f:10:f1:f6:33:52:8c:c8:b8:91:a1:7d:
ae:f4:ed:f4:e2:03:84:63:90:96:f1:c7:0f:2f:95:e9:0d:af:
ab:da:cb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:57 2024 by rpki-client on console-fra.rpki-client.org