Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V9Tho1SPpbp6fNN7GP6J06rPG4A.cer
File: V9Tho1SPpbp6fNN7GP6J06rPG4A.cer (raw, json)
Hash identifier: ifxomTkwtWwI9kqTCWVoz8LVAalqQ7pDZTNRTLenyEE=
Subject key identifier: 57:D4:E1:A3:54:8F:A5:BA:7A:7C:D3:7B:18:FE:89:D3:AA:CF:1B:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5B5D7E666
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/ac76de-220d-4e4a-8471-7d4e4bc5f2b5/1/V9Tho1SPpbp6fNN7GP6J06rPG4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/ac76de-220d-4e4a-8471-7d4e4bc5f2b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:05:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211507
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711720429158 (0xa5b5d7e666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57d4e1a3548fa5ba7a7cd37b18fe89d3aacf1b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:db:4b:d7:e0:39:d7:96:8f:63:42:9c:01:
cb:3b:cf:79:8b:1d:5e:68:46:c7:cf:ac:8f:b5:00:
47:0b:1a:dc:4f:8d:45:8c:ea:c6:d1:bb:ef:fd:b8:
14:3f:c4:b7:5a:db:9b:a1:82:52:1d:17:2a:50:ee:
75:7a:f4:04:b0:e3:74:88:c1:1f:f7:c7:b4:d4:0c:
77:13:23:c0:97:f3:cc:95:15:e4:26:94:18:a0:b0:
e2:8c:d7:69:7b:7f:57:38:4b:9f:0f:7e:19:eb:ed:
e2:3f:e5:fd:ca:a9:44:9b:59:21:5f:f0:d8:fd:58:
b2:70:e4:69:66:64:2f:bd:6f:0c:7c:ed:63:8c:b9:
82:54:d7:29:07:40:cc:42:da:32:f5:2b:1b:c6:f5:
5b:4b:86:90:04:f7:f1:30:15:f7:2f:4c:af:34:2b:
1d:6b:aa:8f:dc:ea:90:a9:e0:8c:cd:9d:13:1f:69:
3a:88:5b:24:10:c0:3f:3f:8f:d8:2e:25:0b:48:93:
71:5b:cb:c5:bd:11:b1:64:bc:f3:8e:11:e9:60:b1:
80:a3:32:d2:82:ef:62:c6:ca:76:36:b6:75:39:c0:
fd:20:2c:96:76:89:1d:f1:fd:36:38:0a:10:25:2e:
64:fd:2e:a3:f5:fb:9e:2c:8d:eb:9b:bc:7c:7a:2b:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D4:E1:A3:54:8F:A5:BA:7A:7C:D3:7B:18:FE:89:D3:AA:CF:1B:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ac76de-220d-4e4a-8471-7d4e4bc5f2b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ac76de-220d-4e4a-8471-7d4e4bc5f2b5/1/V9Tho1SPpbp6fNN7GP6J06rPG4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211507
Signature Algorithm: sha256WithRSAEncryption
2d:3d:8b:2d:e1:1d:92:ec:ff:dc:2e:02:df:22:55:d6:80:1d:
ba:a8:0d:bc:c1:12:31:cd:0d:50:38:07:0f:8d:70:6e:b5:a9:
0e:9a:3f:fc:f9:31:63:87:4c:dd:53:06:a2:89:e8:54:64:8d:
29:07:e0:12:bd:bf:56:73:54:4c:b7:4a:81:98:60:b9:2e:e1:
a1:4e:a3:41:0d:69:b1:fb:84:f0:60:08:70:d5:a4:19:ef:95:
e6:e4:bb:fa:a4:77:c7:47:58:58:76:d9:73:7d:bd:38:2e:09:
f8:dd:be:b2:78:dc:ae:aa:41:f0:85:96:1f:0f:36:5d:f3:c9:
0f:85:86:8d:05:59:e0:c0:bb:9d:bb:26:af:56:b4:10:16:46:
36:d5:95:40:18:65:06:a0:fc:49:ee:ce:66:66:7a:67:17:db:
5f:07:8b:2b:c6:a3:d4:56:c3:2b:e9:d4:0e:0e:e5:e5:b6:a2:
b5:0f:d9:6c:28:c0:08:ae:34:3f:1c:f8:8b:08:15:6a:39:3a:
ab:45:3e:46:59:9a:b1:08:d9:3a:19:c7:d9:01:51:e7:9b:ab:
70:31:2b:2c:44:48:75:33:d7:48:a6:b8:65:2a:65:e7:60:99:
9e:1c:63:31:3d:3a:16:28:e4:02:37:a8:a7:2b:b2:d7:0e:2b:
43:8e:dd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 18:57:38 2025 by rpki-client