Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QJnkrGPEwSohYkgZy_eGOLhtQvM.cer
File: QJnkrGPEwSohYkgZy_eGOLhtQvM.cer (raw, json)
Hash identifier: SndrK97iAY2XJTJ3F1ppkLrsUy8AJfToqefuWMPY298=
Subject key identifier: 40:99:E4:AC:63:C4:C1:2A:21:62:48:19:CB:F7:86:38:B8:6D:42:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B3D08E3B3335B2C7A5035B8B31C9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/ca687e-5ff3-41ee-8cfc-7dac5fa0f07d/1/QJnkrGPEwSohYkgZy_eGOLhtQvM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/ca687e-5ff3-41ee-8cfc-7dac5fa0f07d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:59 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.196.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:3d:08:e3:b3:33:5b:2c:7a:50:35:b8:b3:1c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4099e4ac63c4c12a21624819cbf78638b86d42f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:8e:cd:71:72:ed:5a:96:db:d0:4e:3f:b1:
ce:dd:8b:48:04:80:ad:de:ee:5a:4a:4b:a3:7e:68:
68:d9:ab:25:ec:5b:f0:6f:f2:e8:1f:53:32:53:83:
14:a8:d4:16:d4:d7:ac:41:6f:70:53:00:71:db:00:
4d:52:e7:49:95:8d:fe:da:07:7d:3e:3f:50:4d:eb:
b3:8a:b6:00:81:ab:41:fe:74:4f:22:9f:db:bf:0e:
9f:e1:6e:8b:63:2e:ae:f8:75:ff:1a:2d:79:b4:3c:
4a:e1:33:4f:34:25:31:c2:df:f1:d9:e8:ad:b2:29:
36:82:e4:92:c5:64:6d:cc:80:96:0b:28:b7:8a:b7:
8c:b7:09:8f:88:18:c5:eb:32:0d:c2:f0:6d:87:c7:
64:3f:40:35:e7:2a:18:ff:87:18:91:a2:ef:05:01:
ee:63:3d:13:46:8d:49:11:76:4d:86:fb:c2:42:2f:
70:d7:fb:62:07:3b:14:db:7a:60:08:ce:44:5c:7f:
0c:ac:3e:4e:cf:48:ac:8d:d9:eb:28:d2:4c:b4:1e:
3b:be:49:cf:43:83:c4:85:ca:c6:36:22:d4:04:42:
35:5e:16:29:e1:4c:0e:b8:91:84:04:4e:94:c6:01:
bb:07:d5:cb:78:dd:34:92:c0:27:1f:a4:ba:61:46:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:99:E4:AC:63:C4:C1:2A:21:62:48:19:CB:F7:86:38:B8:6D:42:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ca687e-5ff3-41ee-8cfc-7dac5fa0f07d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ca687e-5ff3-41ee-8cfc-7dac5fa0f07d/1/QJnkrGPEwSohYkgZy_eGOLhtQvM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.196.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b3:e7:72:19:ac:16:59:87:9a:2c:ce:e8:db:18:b3:c0:e6:
e8:48:d2:e9:62:35:bc:74:63:0c:f9:70:c7:db:00:ba:9d:57:
2f:2e:e3:cb:79:6e:11:72:31:97:19:36:13:9e:31:d1:6d:aa:
57:e0:d5:31:9c:90:ae:4d:0a:4f:ee:d7:97:fa:fa:15:af:55:
a0:20:db:3b:14:42:ae:6d:ae:fc:d1:3c:7c:5c:ea:5a:d0:f2:
90:af:c5:9b:77:74:9a:6a:b0:d4:b1:96:e9:25:9d:f1:a0:bc:
bf:f8:6b:8c:0d:52:15:9b:a2:b5:b3:9d:14:1f:74:3b:92:a6:
59:6b:c3:c6:41:fd:d1:2f:89:ef:b8:0c:ab:a3:73:30:16:c2:
63:be:64:51:83:d3:69:97:73:db:55:ae:6a:86:99:48:12:6c:
b7:b7:fa:46:1d:d7:c0:0c:4c:72:c4:53:be:66:f3:e0:cb:14:
42:ab:d7:9b:e7:eb:78:08:a3:a5:06:cf:41:a6:a2:b0:f9:8d:
ae:d9:92:fa:74:72:1c:2e:e0:e9:3e:10:6b:2b:1f:45:62:7f:
bb:5e:c2:d6:73:97:e4:08:13:ce:ba:ca:81:9e:b3:01:87:5f:
e4:a9:80:17:10:26:be:aa:a3:d1:7b:1c:9f:87:fe:4f:ca:46:
8b:5f:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:37:54 2025 by rpki-client