Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iccFsSfGw6E3fqgOldvVxVA8PDc.cer
File: iccFsSfGw6E3fqgOldvVxVA8PDc.cer (raw, json)
Hash identifier: uV12pJ9pJnCAaEwS2eZWkHh3NXKyUK9Jge6ht2ozR4E=
Subject key identifier: 89:C7:05:B1:27:C6:C3:A1:37:7E:A8:0E:95:DB:D5:C5:50:3C:3C:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A433E67A4E2B2A397EADC9A61B0ADF4C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/256f8c-c282-4c6e-83f6-8855ea7fa9a6/1/iccFsSfGw6E3fqgOldvVxVA8PDc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/256f8c-c282-4c6e-83f6-8855ea7fa9a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 29 Aug 2023 21:41:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 216402
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:3e:67:a4:e2:b2:a3:97:ea:dc:9a:61:b0:ad:f4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 29 21:41:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89c705b127c6c3a1377ea80e95dbd5c5503c3c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:ac:61:ef:56:ad:f8:66:dc:76:6d:29:1d:
59:31:76:38:99:65:f2:76:f2:d0:57:7f:e6:30:8b:
14:66:a2:73:c1:65:ce:f2:d9:d6:f7:23:71:46:1c:
95:74:56:24:55:0d:c2:e2:00:65:d8:c7:04:26:3f:
88:d5:c2:47:fd:16:f5:12:a8:c2:01:ed:8c:79:8a:
5c:5f:6c:cb:b0:16:ff:b7:5e:d0:47:ce:99:52:93:
29:dc:c6:d5:f4:0c:6d:36:6c:de:ac:da:fe:20:ed:
71:24:00:e8:77:a1:ba:6f:02:74:90:4b:21:6d:9c:
7d:50:32:ff:17:d9:62:de:e2:d2:1d:a9:b4:f8:f3:
1e:e0:2e:7e:2d:87:ba:00:df:be:1f:bd:e6:87:9a:
a9:aa:bb:0c:a1:c2:a7:7c:39:49:8e:ee:7b:4d:f9:
00:ce:98:d3:d1:dd:85:6a:ec:ce:a1:36:37:71:02:
55:3e:26:74:12:fe:ab:3f:d7:b5:d9:07:a0:d6:5f:
32:54:de:4e:23:3c:ea:c8:aa:05:57:1c:e8:72:22:
e8:e7:c6:a3:9a:09:0d:a4:d6:aa:d8:48:8c:dc:3d:
22:56:90:c6:e9:ed:55:df:de:38:22:d6:ae:97:f1:
35:f5:36:59:f4:3a:e2:bb:40:1e:c0:88:a8:42:2a:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C7:05:B1:27:C6:C3:A1:37:7E:A8:0E:95:DB:D5:C5:50:3C:3C:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/256f8c-c282-4c6e-83f6-8855ea7fa9a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/256f8c-c282-4c6e-83f6-8855ea7fa9a6/1/iccFsSfGw6E3fqgOldvVxVA8PDc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216402
Signature Algorithm: sha256WithRSAEncryption
3a:98:4d:d3:31:bc:eb:9f:c9:a4:47:5a:58:a0:28:f7:02:69:
c5:f8:83:1a:33:34:ac:a3:ce:d3:16:84:2d:5f:3f:bc:a1:1f:
c0:76:50:e9:b8:16:03:3c:62:96:76:c4:06:7f:2c:5b:a5:c1:
06:e4:68:f4:7f:88:89:8d:1b:9c:41:ac:fc:33:01:fd:f0:74:
62:b8:f4:76:c0:c4:06:4c:41:bf:87:1b:de:12:ab:87:7d:07:
94:64:a9:3e:94:6b:66:ac:82:8e:6e:a0:61:11:c0:5a:4f:94:
39:d5:05:b2:8e:c3:91:f2:81:f2:5b:34:11:1b:a4:b6:9d:5a:
7f:ed:c9:52:89:ac:75:dc:84:af:1b:e9:cb:32:68:cc:2b:d5:
bb:98:99:33:e1:a6:67:5c:52:b2:a0:ca:a3:3b:cb:a9:18:f5:
90:19:c1:a1:02:c1:4c:4f:e8:ec:34:24:64:39:6b:ef:13:22:
f4:34:59:4f:a5:a6:2a:b7:41:6d:90:82:28:5e:5a:ef:ee:02:
6e:98:70:5d:83:43:57:f1:90:a4:e5:ea:3f:f6:88:81:b7:a5:
2f:85:a2:c8:6b:c8:92:c2:30:cb:5b:45:87:f8:a4:79:e8:ed:
8e:be:65:79:70:90:52:1f:c8:19:9a:93:eb:94:e0:7b:8d:0b:
6a:83:51:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:35:07 2025 by rpki-client