Certificate
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer
File: F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer (raw, json)
Hash identifier: ScgG5ypaeO0ivdmI6SNNgf+q7FXfwDPGvrjvRMVKylQ=
Subject key identifier: F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC
Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A
Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A
Certificate serial: 5D8FFA393F3CB2BFCD7346C81A1F50C45E69495D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
Manifest: rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft
caRepository: rsync://rpki-pp.com/repo/GOOFL/3/
Notify URL: https://rpki-pp.com/rrdp/notification.xml
Certificate not before: Wed 13 May 2026 17:01:37 +0000
Certificate not after: Wed 12 May 2027 17:06:37 +0000
Subordinate resources: IP: 138.185.228.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:8f:fa:39:3f:3c:b2:bf:cd:73:46:c8:1a:1f:50:c4:5e:69:49:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A
Validity
Not Before: May 13 17:01:37 2026 GMT
Not After : May 12 17:06:37 2027 GMT
Subject: CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:d3:7c:49:d2:70:63:6c:22:7f:c2:14:b1:
c6:e9:fe:05:ea:8b:25:93:05:c0:a4:30:1c:d0:95:
0e:6c:2d:83:bf:2c:0a:84:72:d9:d8:ba:bc:3b:bc:
ec:cf:c5:59:6f:17:eb:1a:01:65:a5:fc:ef:3f:fd:
5c:ed:2e:1c:8b:2b:08:5b:d0:88:12:a0:0f:07:f1:
21:f7:9a:f7:62:42:f2:8d:47:5d:00:4f:11:a6:ea:
c7:57:a4:d7:07:74:b2:57:5a:09:1d:8e:fb:73:83:
c0:9e:67:a3:88:79:ec:1c:cc:d7:16:2b:79:be:c9:
8b:d6:ca:65:83:5a:3e:93:95:39:4e:49:26:c5:16:
66:32:a1:56:b9:0e:a8:7f:fb:78:5e:8c:f3:18:ef:
f5:a7:58:d7:88:ba:e5:aa:f1:84:86:2c:f6:43:2f:
eb:ba:99:90:44:bd:f2:90:10:4a:9f:8a:ca:3b:2a:
67:01:0f:38:49:f1:3a:27:5d:78:67:25:6c:88:b7:
e9:30:ce:81:03:6a:a0:ee:53:c1:4e:55:5c:87:bc:
aa:cd:e7:1b:ce:a0:b1:b6:9b:5a:f4:f5:c3:e5:65:
36:aa:85:9e:81:d7:50:28:cd:60:ac:a7:75:50:f4:
c9:fd:f5:37:b4:e9:16:f6:c9:eb:17:e1:a2:5d:c9:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC
X509v3 Authority Key Identifier:
keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-pp.com/repo/GOOFL/3/
RPKI Manifest - URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft
RPKI Notify - URI:https://rpki-pp.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.228.0/22
Signature Algorithm: sha256WithRSAEncryption
68:b7:05:09:3a:db:04:3d:12:5e:11:e2:a1:b9:c1:1c:af:55:
b0:81:2c:0b:4f:e6:44:96:73:86:1b:bd:d3:fb:21:26:e2:2c:
c0:e2:85:7d:2a:66:54:c2:fd:12:04:ac:c6:cc:46:81:48:7f:
9f:03:86:c9:93:19:57:1a:9f:f7:e0:5b:54:a3:41:db:41:7c:
0d:e3:2e:ee:59:7f:2f:5d:61:0a:e3:a3:36:2a:ad:cf:0c:90:
c7:74:89:a6:40:d0:87:bd:c4:6d:a2:7f:7c:38:4f:37:b8:15:
8d:02:10:5e:ab:a7:b4:a4:3f:f9:77:ec:8c:40:5b:cb:e0:c8:
17:c5:f4:5e:58:2c:e8:c5:c5:89:71:1a:d2:cd:f9:52:8d:2c:
f2:16:86:e5:f2:de:f7:ed:24:bd:70:20:b1:00:0c:c4:35:e1:
8f:a0:9d:a0:f6:a5:fe:f2:5d:79:54:c8:00:8f:43:20:ec:0e:
7d:d9:53:e5:a9:6d:7a:bf:d5:b6:64:70:43:a6:39:0f:d2:f8:
2b:ea:67:79:79:ca:7d:bb:cb:85:52:cf:e2:2f:6d:1c:60:76:
66:43:1c:00:c3:68:21:88:64:4a:55:88:c1:34:dd:70:33:f2:
ed:40:ed:16:33:09:2f:21:ca:e6:b4:1f:c8:b8:be:1d:0a:92:
31:60:36:9c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXY/6OT88sr/Nc0bIGh9QxF5pSV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw
MDMyNjgxQTAeFw0yNjA1MTMxNzAxMzdaFw0yNzA1MTIxNzA2MzdaMDMxMTAvBgNV
BAMTKEYwQUFEOTI1RTUzNEJENzJFNkIzRTk4NjkyMDFEMDQ2Qzc5MTZBRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybtN8SdJwY2wif8IUscbp/gXq
iyWTBcCkMBzQlQ5sLYO/LAqEctnYurw7vOzPxVlvF+saAWWl/O8//VztLhyLKwhb
0IgSoA8H8SH3mvdiQvKNR10ATxGm6sdXpNcHdLJXWgkdjvtzg8CeZ6OIeewczNcW
K3m+yYvWymWDWj6TlTlOSSbFFmYyoVa5Dqh/+3hejPMY7/WnWNeIuuWq8YSGLPZD
L+u6mZBEvfKQEEqfiso7KmcBDzhJ8TonXXhnJWyIt+kwzoEDaqDuU8FOVVyHvKrN
5xvOoLG2m1r09cPlZTaqhZ6B11AozWCsp3VQ9Mn99Te06Rb2yesX4aJdyfV7AgMB
AAGjggJqMIICZjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTwqtkl5TS9cuaz
6YaSAdBGx5Fq/DAfBgNVHSMEGDAWgBQ/jrzAQo3WCPOdhYvokbhbADJoGjAOBgNV
HQ8BAf8EBAMCAQYwegYDVR0fBHMwcTBvoG2ga4ZpcnN5bmM6Ly9rcmlsbC5wZWVy
aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8wLzNGOEVC
Q0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY3JsMHgGCCsGAQUF
BwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcmVwby9uaWNicl9yZXBvLzEvM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5
MUI4NUIwMDMyNjgxQS5jZXIwgdEGCCsGAQUFBwELBIHEMIHBMC0GCCsGAQUFBzAF
hiFyc3luYzovL3Jwa2ktcHAuY29tL3JlcG8vR09PRkwvMy8wWQYIKwYBBQUHMAqG
TXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC8zL0YwQUFEOTI1RTUzNEJE
NzJFNkIzRTk4NjkyMDFEMDQ2Qzc5MTZBRkMubWZ0MDUGCCsGAQUFBzANhilodHRw
czovL3Jwa2ktcHAuY29tL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCirnk
MA0GCSqGSIb3DQEBCwUAA4IBAQBotwUJOtsEPRJeEeKhucEcr1WwgSwLT+ZElnOG
G73T+yEm4izA4oV9KmZUwv0SBKzGzEaBSH+fA4bJkxlXGp/34FtUo0HbQXwN4y7u
WX8vXWEK46M2Kq3PDJDHdImmQNCHvcRton98OE83uBWNAhBeq6e0pD/5d+yMQFvL
4MgXxfReWCzoxcWJcRrSzflSjSzyFobl8t737SS9cCCxAAzENeGPoJ2g9qX+8l15
VMgAj0Mg7A592VPlqW16v9W2ZHBDpjkP0vgr6md5ecp9u8uFUs/iL20cYHZmQxwA
w2ghiGRKVYjBNN1wM/LtQO0WMwkvIcrmtB/IuL4dCpIxYDac
-----END CERTIFICATE-----
Generated at Sun May 24 14:43:43 2026 by rpki-client