Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qtdbGLTFgKB52wvMKpyBhvqf5qE.cer
File: qtdbGLTFgKB52wvMKpyBhvqf5qE.cer (raw, json)
Hash identifier: /bbYhEJBHjEf/9Novq1Kgz2T+2e0UKaMBLAqYl6UQQw=
Subject key identifier: AA:D7:5B:18:B4:C5:80:A0:79:DB:0B:CC:2A:9C:81:86:FA:9F:E6:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AE1E73FCA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/f1e405-fa46-4be9-b1db-167b7b55ee14/1/qtdbGLTFgKB52wvMKpyBhvqf5qE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/f1e405-fa46-4be9-b1db-167b7b55ee14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Mar 2022 15:02:50 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34986
IP: 193.104.166.0/24
IP: 193.188.253.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747835227296 (0xae1e73fca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 3 15:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aad75b18b4c580a079db0bcc2a9c8186fa9fe6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:bc:aa:2f:9b:d5:1f:a8:dc:2a:dd:8a:91:
9f:a7:b1:53:80:fa:6b:f5:8d:2a:43:87:93:0e:11:
d6:88:0c:9e:04:78:2e:dd:3f:a1:93:84:a3:77:d9:
de:b5:a7:f5:c5:31:e0:1f:54:36:d3:17:8c:1c:40:
1f:1c:70:8e:53:65:f7:f6:4b:45:4d:62:c6:ea:fa:
83:8f:77:63:20:ed:6f:05:7d:fa:95:c7:ba:82:ae:
63:97:c7:bd:62:25:1d:db:24:39:88:24:45:29:25:
ca:c5:5b:4b:82:a8:c5:5e:52:22:7b:8c:8a:60:f0:
ac:40:75:e4:d2:f2:ef:15:9f:ea:09:3a:53:f1:7b:
f1:79:01:08:12:24:bd:5e:bc:c8:b9:ab:13:71:93:
ff:d6:aa:c9:a9:3b:ae:31:71:e3:29:b0:a8:3a:f0:
ee:d4:f3:21:c2:ed:58:e0:e1:3d:fc:cc:da:e5:36:
f3:6b:8c:ad:03:c4:fe:64:cb:0f:c5:e7:86:9f:35:
3c:b3:60:55:a6:ea:63:94:22:e8:37:19:71:ec:1f:
08:cb:f5:7f:12:20:5f:b8:db:43:7e:1b:91:6a:70:
22:bc:e4:85:9b:8d:53:d5:82:58:2a:92:ef:28:b8:
f6:5e:f8:28:d6:9d:92:8a:d1:ff:e7:97:29:af:d4:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D7:5B:18:B4:C5:80:A0:79:DB:0B:CC:2A:9C:81:86:FA:9F:E6:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1e405-fa46-4be9-b1db-167b7b55ee14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1e405-fa46-4be9-b1db-167b7b55ee14/1/qtdbGLTFgKB52wvMKpyBhvqf5qE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.166.0/24
193.188.253.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34986
Signature Algorithm: sha256WithRSAEncryption
75:3b:99:40:bb:67:70:7d:d2:d4:bb:d3:26:e6:87:dd:a8:e3:
24:be:ce:77:c7:04:11:d3:d5:1b:b8:c5:75:b9:0b:e4:b0:f1:
5e:a4:d0:38:57:6e:34:be:11:fe:ab:d0:9c:0f:fe:0a:a5:fb:
07:b5:9a:da:66:62:d6:ed:97:e7:11:15:ab:1c:b2:c6:c5:6e:
e6:ae:2f:75:61:f6:2b:40:ab:c1:cb:61:32:2a:cc:b7:10:b4:
63:e2:91:5f:f2:ec:84:b6:ce:7a:00:dc:5b:c0:92:85:8c:8a:
78:c6:fa:97:3e:69:a8:84:39:c0:35:9a:95:02:78:20:53:1a:
68:7c:64:01:9f:29:f2:c3:30:c8:f0:20:06:5b:ef:c5:11:1c:
a9:f9:dc:84:1f:41:5d:af:9d:9b:25:a2:61:9f:eb:dc:eb:0a:
7e:9a:10:a8:83:4d:da:34:7f:c2:8f:33:18:e8:88:2a:8d:2f:
3a:20:a5:56:f7:54:f8:93:86:33:59:17:75:79:19:55:a7:79:
7d:5c:84:8f:33:c1:54:a5:14:36:6c:fc:fb:34:4e:32:3a:96:
b6:ce:0a:6a:41:4b:18:09:46:4c:c1:35:7d:54:1f:2f:b1:e7:
e0:6b:85:e1:27:87:7b:2a:b5:52:7f:9f:7a:7b:c0:ac:57:d9:
2d:4c:0e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:32:51 2025 by rpki-client