Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R_SsYKIhQq7aw6gXqLVrS_n8LjQ.cer
File: R_SsYKIhQq7aw6gXqLVrS_n8LjQ.cer (raw, json)
Hash identifier: vW4tuTTZV/Vap+4ycb4FF7yNtrPhKOe5+q+tRUGlTrs=
Subject key identifier: 47:F4:AC:60:A2:21:42:AE:DA:C3:A8:17:A8:B5:6B:4B:F9:FC:2E:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98B3710E9E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123981/4/47F4AC60A22142AEDAC3A817A8B56B4BF9FC2E34.mft
caRepository: rsync://nostromo.heficed.net/repo/1123981/4/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:00:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 61317
AS: 210277
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655845559966 (0x98b3710e9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47f4ac60a22142aedac3a817a8b56b4bf9fc2e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:45:da:95:22:78:1e:65:b6:d1:b1:a2:0a:
26:92:cb:7c:d2:07:f5:58:46:7d:c2:da:ef:ca:41:
d0:69:99:a7:52:4b:24:53:77:4b:35:c4:3e:5f:30:
53:16:42:34:c4:83:af:33:fa:72:1b:ae:b3:00:df:
bd:61:6f:b9:ab:18:8d:11:a4:b1:54:c4:3e:18:9c:
55:4a:23:e5:22:3b:0f:77:60:1f:ed:80:7b:89:52:
4c:5d:55:aa:9f:4a:ce:f7:3f:8e:18:27:93:da:13:
84:a0:2f:13:9d:2d:5a:f1:e0:e4:6a:2a:10:a6:7a:
71:1d:0f:9b:4d:5d:f3:bb:82:10:0d:eb:2f:fa:2d:
e8:36:c9:f0:be:06:f1:24:91:6d:a7:23:1a:84:9d:
3e:49:f5:2d:82:7e:84:0c:36:09:4a:84:bd:4a:60:
87:08:71:62:68:90:a1:60:b4:00:55:2f:a5:98:e8:
ab:c6:a1:22:28:30:cc:44:a8:ae:60:7b:15:60:ec:
a8:da:dd:ea:e8:73:42:4f:22:a1:35:c1:3e:66:b3:
10:a8:f5:d7:5a:aa:3d:cb:9f:29:4d:3a:72:30:a6:
c1:2c:bb:90:af:bd:cf:e5:34:6d:f9:36:43:c4:d4:
a2:d4:00:d1:a1:54:7f:3d:08:f0:5f:3a:97:d4:20:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F4:AC:60:A2:21:42:AE:DA:C3:A8:17:A8:B5:6B:4B:F9:FC:2E:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123981/4/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123981/4/47F4AC60A22142AEDAC3A817A8B56B4BF9FC2E34.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61317
210277
Signature Algorithm: sha256WithRSAEncryption
8f:25:f7:42:96:22:95:2b:a7:4c:0e:80:53:7a:03:71:57:e5:
0b:63:8b:a0:72:b9:59:6b:8d:2b:d6:d8:d7:70:5c:54:ee:4e:
9a:5a:7c:13:1a:02:56:d3:b0:2e:93:83:5e:43:c2:8c:78:06:
5b:30:20:ad:85:36:7f:f5:00:83:9b:b1:ce:1d:da:c6:6f:33:
7c:82:33:8f:78:61:b8:b8:9a:85:08:c7:15:bd:e7:e6:24:17:
19:11:9b:d4:15:63:63:4b:30:56:df:52:51:52:97:76:97:1f:
d5:2b:36:31:b6:76:33:5d:a7:68:a6:7e:e6:e9:57:e2:13:87:
f5:34:86:01:ef:d4:66:d7:08:1f:a6:38:62:40:a5:c1:55:0e:
f2:d2:16:16:b3:a8:1c:cf:fb:98:50:73:2b:d7:7d:05:07:03:
3a:c0:5d:12:7d:e4:92:4f:c3:e0:62:c5:f7:8f:49:e1:a7:27:
72:ee:53:b2:6b:f7:fd:ad:72:74:6f:3c:3c:1f:93:6e:2c:f2:
a0:36:1b:3d:37:d5:17:c9:e5:83:8a:c8:c1:02:ac:f1:0c:6e:
b9:db:88:2c:78:bb:15:55:e6:4a:7e:b7:32:b9:28:8f:28:39:
de:2a:69:be:d9:4d:1d:e5:00:cc:56:18:57:7f:37:3a:7f:9b:
29:e7:2f:54
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIGAJizcQ6eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDAwMDQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0N2Y0YWM2MGEy
MjE0MmFlZGFjM2E4MTdhOGI1NmI0YmY5ZmMyZTM0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAs2RF2pUieB5lttGxogomkst80gf1WEZ9wtrvykHQaZmn
UkskU3dLNcQ+XzBTFkI0xIOvM/pyG66zAN+9YW+5qxiNEaSxVMQ+GJxVSiPlIjsP
d2Af7YB7iVJMXVWqn0rO9z+OGCeT2hOEoC8TnS1a8eDkaioQpnpxHQ+bTV3zu4IQ
Desv+i3oNsnwvgbxJJFtpyMahJ0+SfUtgn6EDDYJSoS9SmCHCHFiaJChYLQAVS+l
mOirxqEiKDDMRKiuYHsVYOyo2t3q6HNCTyKhNcE+ZrMQqPXXWqo9y58pTTpyMKbB
LLuQr73P5TRt+TZDxNSi1ADRoVR/PQjwXzqX1CC+GwIDAQABo4ICUDCCAkwwHQYD
VR0OBBYEFEf0rGCiIUKu2sOoF6i1a0v5/C40MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
gfAGCCsGAQUFBwELBIHjMIHgMDgGCCsGAQUFBzAFhixyc3luYzovL25vc3Ryb21v
LmhlZmljZWQubmV0L3JlcG8vMTEyMzk4MS80LzBkBggrBgEFBQcwCoZYcnN5bmM6
Ly9ub3N0cm9tby5oZWZpY2VkLm5ldC9yZXBvLzExMjM5ODEvNC80N0Y0QUM2MEEy
MjE0MkFFREFDM0E4MTdBOEI1NkI0QkY5RkMyRTM0Lm1mdDA+BggrBgEFBQcwDYYy
aHR0cHM6Ly9ub3N0cm9tby5oZWZpY2VkLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54
bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID
AO+FAgMDNWUwDQYJKoZIhvcNAQELBQADggEBAI8l90KWIpUrp0wOgFN6A3FX5Qtj
i6ByuVlrjSvW2NdwXFTuTppafBMaAlbTsC6Tg15Dwox4BlswIK2FNn/1AIObsc4d
2sZvM3yCM494Ybi4moUIxxW95+YkFxkRm9QVY2NLMFbfUlFSl3aXH9UrNjG2djNd
p2imfubpV+ITh/U0hgHv1GbXCB+mOGJApcFVDvLSFhazqBzP+5hQcyvXfQUHAzrA
XRJ95JJPw+BixfePSeGnJ3LuU7Jr9/2tcnRvPDwfk24s8qA2Gz031RfJ5YOKyMEC
rPEMbrnbiCx4uxVV5kp+tzK5KI8oOd4qab7ZTR3lAMxWGFd/Nzp/mynnL1Q=
-----END CERTIFICATE-----
Generated at Thu Jul 3 15:41:38 2025 by rpki-client