Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IEgo14wh_eI_oSOISp-cWzG5R4s.cer
File: IEgo14wh_eI_oSOISp-cWzG5R4s.cer (raw, json)
Hash identifier: XcPHkDeW/36rXtjREr1z7Z0S/HGCcAbm36JgdjnnyZI=
Subject key identifier: 20:48:28:D7:8C:21:FD:E2:3F:A1:23:88:4A:9F:9C:5B:31:B9:47:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01877B681BA9CAF38210CF662A2542235EE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/AS202400/1/204828D78C21FDE23FA123884A9F9C5B31B9478B.mft
caRepository: rsync://rpki.co/repo/AS202400/1/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Thu 13 Apr 2023 16:17:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 202996
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:68:1b:a9:ca:f3:82:10:cf:66:2a:25:42:23:5e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 13 16:17:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=204828d78c21fde23fa123884a9f9c5b31b9478b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:aa:4c:df:02:62:72:07:db:ce:3c:29:86:89:
07:b2:d5:8f:98:53:db:a6:f5:eb:09:cf:bb:17:9d:
7b:34:ea:db:f8:6b:c3:04:ce:aa:95:aa:b4:52:29:
dc:94:aa:c7:33:22:21:6b:e3:87:28:ac:15:41:5e:
35:a5:26:bf:1c:5b:52:3b:64:17:9a:22:c6:ab:fc:
50:d5:b8:bf:45:f3:dd:10:ad:88:82:3d:e5:85:d6:
f0:04:fe:17:8b:e5:4f:85:b5:07:de:0c:5f:51:f5:
22:4c:d7:43:fc:67:1e:0d:7d:bc:76:6a:6f:ff:3b:
9c:c2:d5:e9:ce:4b:39:6e:52:b5:7a:58:12:60:7a:
ef:8b:7e:4b:66:34:1e:4b:1e:eb:5e:66:dd:11:1a:
66:8e:ad:2e:45:9d:be:7d:61:c2:a9:1e:7c:bd:7c:
c8:66:df:f4:91:1b:5e:e2:41:e6:0e:3f:2a:c4:da:
d6:e3:87:10:0f:1d:95:d2:c7:1d:87:c7:ae:3d:67:
0b:b2:27:d8:77:a6:be:a9:54:a0:87:27:29:51:df:
04:87:a1:7f:de:be:ce:65:29:4b:d3:c9:5d:8d:7b:
b0:58:50:11:ac:8c:4a:49:b0:c7:d8:78:67:ec:45:
5d:4a:9c:63:0a:0c:ec:69:2d:61:ce:5a:80:42:1c:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:48:28:D7:8C:21:FD:E2:3F:A1:23:88:4A:9F:9C:5B:31:B9:47:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS202400/1
RPKI Manifest - URI:rsync://rpki.co/repo/AS202400/1/204828D78C21FDE23FA123884A9F9C5B31B9478B.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202996
Signature Algorithm: sha256WithRSAEncryption
7f:56:eb:98:78:c7:fe:6e:bf:10:49:bf:07:29:c3:c2:86:8f:
2f:24:a4:ae:5b:b8:b1:4e:f5:bd:fa:18:37:5c:c0:28:f3:3d:
06:58:d2:32:2e:07:b9:df:d4:2a:46:c5:cf:cc:f1:b0:52:d5:
be:a1:cc:ab:01:59:db:5e:bf:ec:c9:d5:3c:9d:c0:65:14:13:
7d:d9:ef:ef:48:89:83:9c:a9:42:b7:f4:a2:f5:26:0c:68:2e:
53:14:1c:29:17:4b:4a:23:32:20:fd:41:cc:79:16:cd:55:62:
e8:70:83:9a:dc:a5:22:aa:aa:02:bd:ed:8a:bf:5e:e6:37:bd:
e7:77:15:a3:bf:16:b8:c8:7d:77:51:e5:43:70:a5:9b:a8:db:
33:15:3b:d4:39:dc:0e:20:57:e5:06:5d:8f:c5:3c:07:72:63:
25:c4:56:a6:b3:b0:bd:30:36:54:67:11:7e:4d:da:16:0b:90:
82:85:6e:da:d0:00:c6:9a:20:b0:53:d5:71:b5:51:79:e0:3c:
13:53:76:11:3b:e7:0d:e1:6a:67:14:73:a3:f9:70:e5:6d:b6:
0e:f2:f5:87:fa:b6:c0:7f:ec:0b:e1:84:ed:1a:05:7c:c2:6a:
0b:1b:f0:bf:ff:b9:54:3d:23:28:b8:10:55:b9:77:74:1c:1d:
9a:e6:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:32:35 2025 by rpki-client