Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qttNo1JG9uh3y2HfywUNUBIH9_c.cer
File: qttNo1JG9uh3y2HfywUNUBIH9_c.cer (raw, json)
Hash identifier: NXhxqUiQWsakkj5HIPKhhRPqKMiM9nNOkK59Uo6mR40=
Subject key identifier: AA:DB:4D:A3:52:46:F6:E8:77:CB:61:DF:CB:05:0D:50:12:07:F7:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AC0E83A3AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/5e9c56-3fb3-4294-993c-5752298b117d/1/qttNo1JG9uh3y2HfywUNUBIH9_c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/5e9c56-3fb3-4294-993c-5752298b117d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 19 Jan 2022 11:39:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 207320
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738977883053 (0xac0e83a3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 19 11:39:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aadb4da35246f6e877cb61dfcb050d501207f7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:37:c7:61:61:c6:88:91:1f:22:2e:96:20:
69:41:d9:d4:b0:62:6b:bf:45:9e:96:bb:bb:be:1e:
60:ad:59:0f:96:35:48:13:23:c5:49:78:81:ea:01:
6e:15:d5:07:53:33:8a:2a:9b:f8:1d:f1:d8:f5:0f:
3f:ef:44:b1:2c:4f:af:98:c5:71:78:18:89:54:95:
b1:60:53:7e:2f:3b:96:3e:41:ac:41:a2:86:64:00:
ed:fa:cc:24:2e:4d:3a:e9:ad:d2:a6:42:d7:bb:1d:
40:a7:20:41:69:f3:51:82:a8:88:e8:ca:e3:fe:9b:
69:6e:10:a2:d8:73:ca:a7:a8:25:7e:14:92:3b:8c:
8b:60:99:12:86:20:c6:c6:a4:66:2b:2c:ea:32:ae:
7e:d6:50:81:2a:a3:63:71:8d:4c:fa:ba:33:01:20:
d7:49:3b:a2:ab:f0:ea:8a:c1:06:12:71:1b:c2:45:
73:59:8f:a7:b9:b4:c3:9f:09:83:81:2a:3f:a3:d1:
e9:3a:df:0f:9e:b6:33:aa:e7:a1:1f:38:3a:b4:b0:
e8:be:5c:dc:53:2b:a3:2f:5f:8e:4d:56:65:83:69:
9e:5b:cf:71:2f:36:78:d0:d8:9d:ea:fe:42:4b:86:
b2:7e:21:c5:a8:5d:58:34:37:a2:b5:92:6d:35:79:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DB:4D:A3:52:46:F6:E8:77:CB:61:DF:CB:05:0D:50:12:07:F7:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5e9c56-3fb3-4294-993c-5752298b117d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5e9c56-3fb3-4294-993c-5752298b117d/1/qttNo1JG9uh3y2HfywUNUBIH9_c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207320
Signature Algorithm: sha256WithRSAEncryption
1a:4f:b4:98:f1:c6:48:6b:e0:b1:82:23:f2:b2:1e:56:56:24:
e7:fb:7f:ea:13:02:85:95:d9:f4:47:f9:d3:f7:15:1c:f5:49:
04:43:17:64:a8:96:2a:9d:ff:4a:ca:88:d9:7e:02:f6:e7:58:
3d:3f:d5:07:dd:3d:29:16:55:1e:d7:a8:86:ad:da:16:62:c8:
99:29:e2:4e:f0:a6:bf:30:60:47:07:65:91:b6:7a:97:b4:4e:
a1:25:40:d3:9e:41:20:16:cd:78:8f:31:3e:99:d2:67:95:b7:
2d:9d:74:db:78:e6:c7:bf:28:93:ee:14:8a:49:a8:ff:c8:04:
25:b1:31:69:2c:31:97:16:b4:07:f5:eb:2f:5b:70:f0:62:76:
f1:09:83:33:d4:5d:a1:1c:06:11:91:64:cd:f0:12:f9:6c:6b:
b5:2b:f1:36:d0:41:84:26:d2:4e:52:72:dc:09:ec:13:14:c2:
18:ad:05:29:d3:6a:f5:b7:ad:cf:8e:91:79:10:a1:0a:7d:cc:
d7:f6:1a:2a:a0:90:3f:79:f6:f6:56:ce:73:66:ee:23:6e:9b:
27:ad:98:d1:13:ee:c0:1c:02:bd:3d:cd:ab:c7:55:29:22:23:
a3:17:6b:4b:92:4a:9b:83:76:0c:03:48:70:4b:09:c4:f0:0b:
d9:72:82:e4
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAKwOg6OtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTE5MTEzOTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhYWRiNGRhMzUy
NDZmNmU4NzdjYjYxZGZjYjA1MGQ1MDEyMDdmN2Y3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAzkE3x2FhxoiRHyIuliBpQdnUsGJrv0Welru7vh5grVkP
ljVIEyPFSXiB6gFuFdUHUzOKKpv4HfHY9Q8/70SxLE+vmMVxeBiJVJWxYFN+LzuW
PkGsQaKGZADt+swkLk066a3SpkLXux1ApyBBafNRgqiI6Mrj/ptpbhCi2HPKp6gl
fhSSO4yLYJkShiDGxqRmKyzqMq5+1lCBKqNjcY1M+rozASDXSTuiq/DqisEGEnEb
wkVzWY+nubTDnwmDgSo/o9HpOt8PnrYzquehHzg6tLDovlzcUyujL1+OTVZlg2me
W89xLzZ40Nid6v5CS4ayfiHFqF1YNDeitZJtNXn29QIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFKrbTaNSRvbod8th38sFDVASB/f3MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzVlOWM1Ni0zZmIzLTQyOTQt
OTkzYy01NzUyMjk4YjExN2QvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvNWU5YzU2LTNmYjMtNDI5NC05
OTNjLTU3NTIyOThiMTE3ZC8xL3F0dE5vMUpHOXVoM3kySGZ5d1VOVUJJSDlfYy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMp2DANBgkqhkiG9w0BAQsFAAOCAQEAGk+0mPHGSGvgsYIj8rIeVlYk5/t/
6hMChZXZ9Ef50/cVHPVJBEMXZKiWKp3/SsqI2X4C9udYPT/VB909KRZVHteohq3a
FmLImSniTvCmvzBgRwdlkbZ6l7ROoSVA055BIBbNeI8xPpnSZ5W3LZ1023jmx78o
k+4Uikmo/8gEJbExaSwxlxa0B/XrL1tw8GJ28QmDM9RdoRwGEZFkzfAS+WxrtSvx
NtBBhCbSTlJy3AnsExTCGK0FKdNq9betz46ReRChCn3M1/YaKqCQP3n29lbOc2bu
I26bJ62Y0RPuwBwCvT3Nq8dVKSIjoxdrS5JKm4N2DANIcEsJxPAL2XKC5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:31 2024 by rpki-client on console-ams.rpki-client.org