Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QwJGJ7FunPhTf1cwhdtFTPjO5v4.cer
File: QwJGJ7FunPhTf1cwhdtFTPjO5v4.cer (raw, json)
Hash identifier: z1qDCc7EENHbV49qrDcE6GOGPPNTDd4A5T0wZLXr8tc=
Subject key identifier: 43:02:46:27:B1:6E:9C:F8:53:7F:57:30:85:DB:45:4C:F8:CE:E6:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A6F651B8A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/57b216-ee54-4306-9d16-4ff3b79579b4/1/QwJGJ7FunPhTf1cwhdtFTPjO5v4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/57b216-ee54-4306-9d16-4ff3b79579b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:54:37 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 48164
IP: 91.193.75.0/24
IP: 193.104.68.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717097121959 (0xa6f651b8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:54:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43024627b16e9cf8537f573085db454cf8cee6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:ac:2a:14:a0:51:cd:f4:d9:0a:9a:e9:df:
97:e5:4a:b1:60:2a:79:85:d3:5e:f0:9d:72:e1:af:
53:96:ef:85:87:e6:cf:87:7e:04:08:80:62:a3:19:
c5:cf:40:ea:cc:31:35:8e:13:d6:96:5e:ba:d4:c2:
62:fd:6b:04:31:d6:c7:9c:db:32:4f:7e:60:1f:c2:
b7:e0:a0:41:a7:85:d2:93:9c:b9:45:68:30:31:2c:
08:2c:0e:5b:02:c0:4b:1f:d4:cb:5a:58:d9:b4:f3:
c5:d5:b8:db:f2:4c:40:b7:9a:0d:f7:8b:c0:a0:79:
84:e8:f7:47:9b:2d:f4:de:ed:20:aa:86:e6:4d:2c:
86:c3:a6:85:d8:9f:90:66:4c:02:7a:5a:45:9e:4c:
0a:09:f0:9c:aa:29:00:1b:5c:2f:85:85:f4:19:f9:
23:c0:89:c9:0e:2c:55:e1:03:f7:fd:06:1c:03:de:
c0:d2:2c:8d:04:c6:06:98:45:c0:e5:b9:a3:2c:c1:
cd:96:d9:f8:1b:49:ad:39:e5:75:bc:78:46:3c:b3:
57:7b:53:fd:f7:78:f2:2c:b6:3e:ac:39:c3:d4:d9:
10:ab:e0:c0:dc:90:48:12:0c:33:02:ce:fb:17:8a:
f6:a9:48:35:f1:89:fc:61:a7:62:af:33:b5:92:06:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:46:27:B1:6E:9C:F8:53:7F:57:30:85:DB:45:4C:F8:CE:E6:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/57b216-ee54-4306-9d16-4ff3b79579b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/57b216-ee54-4306-9d16-4ff3b79579b4/1/QwJGJ7FunPhTf1cwhdtFTPjO5v4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.75.0/24
193.104.68.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48164
Signature Algorithm: sha256WithRSAEncryption
2f:02:ac:c5:48:a1:c3:14:d9:16:a4:98:91:36:2a:cc:b5:55:
06:88:e2:87:1d:c1:c5:44:60:ce:ad:46:18:fe:54:5f:d6:95:
ab:46:6c:7f:65:30:90:04:c7:ae:d6:8d:9c:e3:c8:72:80:c6:
1d:86:23:2e:eb:73:45:27:3c:8e:6a:e6:5e:13:94:90:a9:12:
18:ff:f0:e3:e3:6f:bf:56:84:a8:a8:61:f3:65:ca:25:7e:36:
35:40:cd:d9:45:79:b9:cf:ea:7c:4a:14:bf:09:66:ce:59:2c:
a8:c4:d6:c2:4d:07:d8:0d:ce:1c:1f:9a:a8:3e:25:fb:34:b4:
36:35:6c:cc:a8:21:72:a5:1a:90:1a:de:e5:db:eb:9a:fc:03:
12:6d:34:dd:11:d7:cc:c7:a6:0f:91:0c:35:87:70:36:02:ed:
8a:68:c6:fa:24:5c:29:54:cf:de:ad:53:45:d5:dc:56:c3:c5:
89:a8:94:4b:67:37:c4:5f:f7:76:37:4b:50:e2:9e:de:74:e0:
b7:f9:77:2c:d2:33:76:ae:9f:37:e2:57:36:d8:eb:2b:2a:f3:
43:8d:d0:b4:18:cf:ef:e6:2a:24:dc:81:7e:2e:40:9a:24:b0:
e0:da:2b:b4:37:3d:ef:c4:03:c9:ed:83:38:57:eb:fc:79:bf:
3b:18:c8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:27 2023 by rpki-client on console.sobornost.net