Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X3ILxvnMMHYCspItQfCM8ddYQCk.cer
File: X3ILxvnMMHYCspItQfCM8ddYQCk.cer (raw, json)
Hash identifier: RpwW5pxhpXB5vVJpQ1j7DeTbxrQOpZdCklajsEOCEVE=
Subject key identifier: 5F:72:0B:C6:F9:CC:30:76:02:B2:92:2D:41:F0:8C:F1:D7:58:40:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F40C48010CD5512F1F0C964BEDA887A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/a1ec2e-919e-4657-8d31-a5a507e0ecfa/1/X3ILxvnMMHYCspItQfCM8ddYQCk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/a1ec2e-919e-4657-8d31-a5a507e0ecfa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:33:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 204339
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:40:c4:80:10:cd:55:12:f1:f0:c9:64:be:da:88:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:33:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f720bc6f9cc307602b2922d41f08cf1d7584029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:9b:f6:48:f5:c3:10:7e:cf:65:df:ad:15:
8e:58:5f:2d:76:6e:3e:09:86:ef:f5:9d:6d:a3:f3:
61:f0:28:49:7a:e7:c1:cb:53:cd:e7:38:be:3b:b2:
21:1a:8d:5d:24:da:90:0b:75:6f:c1:45:8f:5b:79:
8f:3c:d0:1c:b1:02:78:07:50:04:e3:02:6c:1b:be:
3e:61:10:6f:ef:9e:6b:96:4f:02:25:ea:21:29:cb:
5a:68:ef:2a:db:6f:3b:48:d6:99:44:e5:f8:4a:d9:
16:7a:d4:ca:85:ce:88:30:16:4d:e1:33:10:a6:e8:
03:ed:ef:38:2f:9b:55:0e:0c:dd:ab:a2:57:a4:8f:
e3:b2:1e:70:27:63:ce:e8:3b:2a:8e:f2:bb:d7:84:
58:67:3a:f2:89:06:48:93:27:0c:99:07:d2:e4:fb:
bb:33:67:88:7d:6c:22:9d:26:c7:b2:fc:24:0b:64:
2a:89:45:78:d0:ad:7c:c0:e2:27:18:b4:51:50:07:
6c:95:a6:4c:aa:0e:df:22:00:dc:fd:6d:f7:a3:73:
94:49:ea:69:cd:eb:1f:30:b6:7e:e1:7e:f5:ff:84:
c9:7e:ba:48:e6:b2:fa:5f:45:91:12:d5:99:c1:35:
25:a0:e3:d9:23:c4:cb:76:39:8c:f6:9d:d3:73:2d:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:72:0B:C6:F9:CC:30:76:02:B2:92:2D:41:F0:8C:F1:D7:58:40:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a1ec2e-919e-4657-8d31-a5a507e0ecfa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a1ec2e-919e-4657-8d31-a5a507e0ecfa/1/X3ILxvnMMHYCspItQfCM8ddYQCk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204339
Signature Algorithm: sha256WithRSAEncryption
95:a9:0c:4a:b9:7a:ab:84:84:b6:49:6f:f3:a6:21:27:a4:98:
63:a6:ad:95:41:02:74:02:5c:d6:d6:d5:d4:11:7f:e0:09:94:
88:9d:19:d9:47:df:da:1e:d6:c8:2b:ef:4b:74:f0:aa:19:7e:
bb:8c:4b:bd:c9:4a:b5:d8:88:ac:82:c2:40:73:aa:57:e3:3e:
9d:92:0b:9b:38:34:50:c0:49:4e:d0:7d:df:bd:3a:a9:1b:64:
93:b9:f0:9c:bb:2b:3e:da:d0:98:c0:d9:07:d7:30:b6:8b:b8:
04:a9:bf:a8:89:6a:03:dc:d7:44:bd:31:02:77:2c:c1:72:22:
4d:e1:36:0c:d0:2a:d6:ab:dc:0d:39:c4:d3:bb:5f:b9:71:7f:
82:fb:32:25:a1:49:36:7c:c4:76:8a:10:ea:c9:3d:c6:fc:1a:
4b:60:cd:d5:fa:ce:9b:ed:37:70:28:12:30:4f:6e:0e:bb:05:
7d:19:a6:66:47:1f:b8:01:53:d9:0b:91:4e:7f:74:45:b6:fb:
fa:05:48:1a:1d:83:91:e5:da:57:24:17:17:e5:f9:51:ac:de:
dc:97:07:16:d3:ba:12:90:a5:49:e4:9b:63:51:bb:21:06:58:
d7:fa:73:5b:b1:41:fc:83:0d:3b:2c:26:2d:2c:d9:01:45:85:
de:dd:cc:77
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVvQMSAEM1VEvHwyWS+2oh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjEzMzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjcyMGJjNmY5Y2MzMDc2MDJiMjkyMmQ0MWYwOGNmMWQ3NTg0MDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDeb9kj1wxB+z2XfrRWOWF8tdm4+
CYbv9Z1to/Nh8ChJeufBy1PN5zi+O7IhGo1dJNqQC3VvwUWPW3mPPNAcsQJ4B1AE
4wJsG74+YRBv755rlk8CJeohKctaaO8q2287SNaZROX4StkWetTKhc6IMBZN4TMQ
pugD7e84L5tVDgzdq6JXpI/jsh5wJ2PO6DsqjvK714RYZzryiQZIkycMmQfS5Pu7
M2eIfWwinSbHsvwkC2QqiUV40K18wOInGLRRUAdslaZMqg7fIgDc/W33o3OUSepp
zesfMLZ+4X71/4TJfrpI5rL6X0WREtWZwTUloOPZI8TLdjmM9p3Tcy1HPwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFF9yC8b5zDB2ArKSLUHwjPHXWEApMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyL2ExZWMy
ZS05MTllLTQ2NTctOGQzMS1hNWE1MDdlMGVjZmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvYTFlYzJl
LTkxOWUtNDY1Ny04ZDMxLWE1YTUwN2UwZWNmYS8xL1gzSUx4dm5NTUhZQ3NwSXRR
ZkNNOGRkWVFDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMeMzANBgkqhkiG9w0BAQsFAAOCAQEAlakMSrl6q4SE
tklv86YhJ6SYY6atlUECdAJc1tbV1BF/4AmUiJ0Z2Uff2h7WyCvvS3Twqhl+u4xL
vclKtdiIrILCQHOqV+M+nZILmzg0UMBJTtB93706qRtkk7nwnLsrPtrQmMDZB9cw
tou4BKm/qIlqA9zXRL0xAncswXIiTeE2DNAq1qvcDTnE07tfuXF/gvsyJaFJNnzE
dooQ6sk9xvwaS2DN1frOm+03cCgSME9uDrsFfRmmZkcfuAFT2QuRTn90Rbb7+gVI
Gh2DkeXaVyQXF+X5Uaze3JcHFtO6EpClSeSbY1G7IQZY1/pzW7FB/IMNOywmLSzZ
AUWF3t3Mdw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:26:47 2025 by rpki-client