Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0beBcY2eNwU9FxfwoE9ieZs95EA.cer
File: 0beBcY2eNwU9FxfwoE9ieZs95EA.cer (raw, json)
Hash identifier: Bs3K4Gq38QG/Voy0nZbi71spyPD/oHwbZyFJVFqPQhU=
Subject key identifier: D1:B7:81:71:8D:9E:37:05:3D:17:17:F0:A0:4F:62:79:9B:3D:E4:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018AEE3BA58C6B47737D8EEF449B8A974CE4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/6e1330-7faf-43b1-93ce-590f202caab4/1/0beBcY2eNwU9FxfwoE9ieZs95EA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/6e1330-7faf-43b1-93ce-590f202caab4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Oct 2023 02:33:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 216266
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ee:3b:a5:8c:6b:47:73:7d:8e:ef:44:9b:8a:97:4c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 2 02:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1b781718d9e37053d1717f0a04f62799b3de440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:15:57:91:d9:8e:6b:f1:f5:52:39:83:c5:77:
b8:df:15:bc:de:c9:59:3d:32:d9:3f:16:60:8f:0c:
20:58:9f:08:89:ef:a1:4b:a0:53:c3:85:6b:d3:97:
df:67:fb:b7:aa:56:85:65:5c:ff:1a:74:c1:56:68:
22:ba:9c:cc:a1:d9:81:04:b3:93:a0:70:08:07:ae:
d0:3c:6c:59:fb:fd:39:02:ca:f1:6b:8a:1a:21:74:
7c:83:d3:65:01:b8:23:de:4d:11:70:50:4a:9c:f3:
30:ab:8d:f6:34:b1:00:16:fb:d3:63:58:b0:17:81:
c0:ba:7f:df:04:54:0d:3a:80:21:26:66:3b:72:78:
e1:7b:f7:4d:5c:ad:15:9b:18:cb:c2:95:0a:84:12:
de:48:72:76:5d:0c:c6:87:1a:68:1e:a6:9f:aa:6e:
54:2e:4c:af:bd:cc:3e:6f:fd:60:06:39:1f:af:63:
71:8d:68:76:93:53:52:bb:ad:0b:62:6f:40:47:ec:
45:f4:fe:2a:54:80:7f:49:d1:c2:63:3b:86:75:d7:
a5:85:ad:b3:f3:9a:7e:8e:fa:4a:6d:2e:97:89:6b:
3c:52:49:61:a2:92:f8:5a:10:d6:5c:9a:5e:e1:a8:
da:43:e2:21:72:4b:f5:fc:13:2b:36:9a:36:96:dd:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B7:81:71:8D:9E:37:05:3D:17:17:F0:A0:4F:62:79:9B:3D:E4:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6e1330-7faf-43b1-93ce-590f202caab4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6e1330-7faf-43b1-93ce-590f202caab4/1/0beBcY2eNwU9FxfwoE9ieZs95EA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216266
Signature Algorithm: sha256WithRSAEncryption
3e:2f:49:8b:22:0f:7b:ef:5a:4d:25:fe:22:4f:d8:52:d2:6a:
08:ad:36:1e:5f:bc:52:65:5d:6f:68:0b:d7:9b:fb:ee:bf:c0:
2b:63:12:8c:50:7e:09:1d:a7:d8:e3:38:e9:d3:46:92:e5:55:
b3:d7:d1:2e:0a:92:83:c0:0d:07:d0:a2:90:39:8b:5f:9d:65:
25:2d:37:20:9c:78:0a:bb:fc:3e:7c:42:44:ab:47:b1:f0:f2:
45:70:3e:34:ac:09:7f:77:9f:e2:f4:15:97:75:1d:02:c1:f5:
81:82:35:91:67:cb:57:f6:f1:6b:fe:58:dc:97:a4:e6:c3:96:
cc:b4:92:28:bd:de:77:c5:83:e6:b8:a6:9d:fb:c7:58:da:5d:
9c:70:0d:aa:73:60:e0:69:5f:15:f3:1c:d2:f3:22:f4:65:74:
97:62:0a:ff:7d:4d:03:74:75:e2:21:eb:4b:21:c0:87:e1:06:
cf:ac:9e:fa:4d:60:63:c6:62:52:d5:7d:cf:00:4c:8c:f2:e2:
23:2b:39:9b:37:cd:f1:05:2f:df:ec:8e:7d:ab:b8:a6:9d:5f:
01:6a:37:e3:0d:f1:ef:7c:fd:e3:7a:23:fb:9a:22:9b:59:7a:
74:cb:f9:1d:78:68:5f:ab:e5:52:73:64:86:a0:2c:17:03:98:
db:c3:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:51:36 2025 by rpki-client