Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O6mD7rtG8hVD0Jo53_9J6J7pKRI.cer
File: O6mD7rtG8hVD0Jo53_9J6J7pKRI.cer (raw, json)
Hash identifier: LndIJ4NGei6azslIlOHRlTtzOnVop/97hqcUxKmEMdI=
Subject key identifier: 3B:A9:83:EE:BB:46:F2:15:43:D0:9A:39:DF:FF:49:E8:9E:E9:29:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0188456EF84FC5CEAF0F7710B8826FADA498
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/AS212252/0/3BA983EEBB46F21543D09A39DFFF49E89EE92912.mft
caRepository: rsync://rpki.co/repo/AS212252/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 22 May 2023 21:48:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 212252
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:45:6e:f8:4f:c5:ce:af:0f:77:10:b8:82:6f:ad:a4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 22 21:48:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ba983eebb46f21543d09a39dfff49e89ee92912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:c1:b3:5b:96:9b:53:c8:67:92:38:fe:50:
5d:63:81:bd:fd:c3:04:1c:70:17:5b:c8:48:21:e5:
0c:97:fa:d2:81:06:0e:c4:f6:e6:3b:7d:ae:bd:eb:
86:e2:a8:f7:54:0e:46:0d:84:d6:81:ee:4d:54:8a:
03:44:9c:e5:64:7d:d7:c2:91:6e:15:40:a0:23:82:
32:11:65:e0:4e:9b:27:79:7f:89:59:75:60:52:fa:
37:31:ee:e9:9e:f5:45:16:8b:fa:7f:62:2a:42:34:
73:0c:75:86:d9:3e:8f:c1:e8:c7:9f:af:d9:80:e7:
59:c6:7b:60:67:9a:f6:fa:35:82:c2:73:53:46:2d:
4e:8b:e0:7b:c9:f7:73:16:e0:ab:86:15:6f:11:19:
74:90:95:6c:15:4f:60:a7:10:5d:a9:90:2e:69:a3:
cc:13:1e:b0:ab:f9:aa:47:09:72:49:03:ae:ac:db:
05:95:09:d5:fd:40:2e:5c:98:4a:55:05:8b:0e:35:
66:ec:48:ab:d1:2e:3d:bc:a4:3f:ff:31:92:b5:e9:
4d:2f:13:9f:d0:a5:0e:97:f7:5c:af:68:08:ea:e8:
e5:15:c0:17:73:1b:b2:0e:ed:bd:cd:63:da:d4:69:
7c:f7:79:80:0e:e1:a9:81:84:7e:ee:c6:a9:d6:46:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A9:83:EE:BB:46:F2:15:43:D0:9A:39:DF:FF:49:E8:9E:E9:29:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS212252/0/
RPKI Manifest - URI:rsync://rpki.co/repo/AS212252/0/3BA983EEBB46F21543D09A39DFFF49E89EE92912.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212252
Signature Algorithm: sha256WithRSAEncryption
ae:1e:1a:a5:e2:df:5f:2b:25:c8:cc:41:be:50:3d:dc:83:dc:
a2:5e:65:a6:d7:60:03:55:54:80:49:ca:f4:99:c3:55:c6:40:
40:7a:85:d6:2f:e8:b8:d4:b8:69:55:07:3a:b5:62:64:02:9b:
ab:0c:f6:ee:51:80:08:11:42:ff:0d:3e:65:eb:a9:bd:89:a7:
dc:61:6a:49:e2:18:f0:76:82:5b:22:64:a7:48:4c:cf:4d:09:
00:5a:72:46:b1:46:4c:42:75:99:5f:17:a8:0c:19:e6:ae:0f:
e4:6d:2a:af:98:8a:0f:d5:1c:06:b1:02:89:0f:3c:34:42:57:
a4:a6:91:e1:61:aa:0b:a0:9f:b1:dd:7a:9e:85:ff:78:dd:e1:
aa:62:3d:aa:55:8e:17:87:c8:b2:d6:0f:49:da:17:f0:91:53:
43:65:e3:a9:69:b0:b6:20:d0:a5:d7:38:09:52:d2:70:39:af:
0d:00:20:8b:dd:d9:e5:cc:be:83:52:59:f9:dc:ce:07:a1:fe:
1c:07:91:1e:9a:78:b6:a6:5e:1d:02:bd:d4:09:36:fd:ba:8b:
d3:41:cb:22:ba:24:18:59:a8:8b:4e:ff:89:75:05:61:b1:49:
94:06:56:71:d5:b2:9b:44:9f:8e:68:5d:fe:00:d2:ed:c6:69:
43:4e:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:42:59 2025 by rpki-client