![](/console.gif)
Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F27941BF58751CDB1302EAF661DCF88D1CF5D49F.cer
File: F27941BF58751CDB1302EAF661DCF88D1CF5D49F.cer (raw, json)
Hash identifier: oNr8n/hGYt+YcfsWmZa0mCRAy8nVTlySTPJwphh3YeE=
Subject key identifier: F2:79:41:BF:58:75:1C:DB:13:02:EA:F6:61:DC:F8:8D:1C:F5:D4:9F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 54C4CD7C1E81E9963F98C40FF8645F9E2C19B907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/F27941BF58751CDB1302EAF661DCF88D1CF5D49F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 19 Jan 2024 17:34:46 +0000
Certificate not after: Fri 17 Jan 2025 17:39:46 +0000
Subordinate resources: IP: 2a05:dfc2::/31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c4:cd:7c:1e:81:e9:96:3f:98:c4:0f:f8:64:5f:9e:2c:19:b9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 19 17:34:46 2024 GMT
Not After : Jan 17 17:39:46 2025 GMT
Subject: CN=F27941BF58751CDB1302EAF661DCF88D1CF5D49F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:d9:84:a1:9d:0b:2e:28:ba:ed:d3:f0:12:
b0:76:c5:97:a3:41:6c:3f:d4:77:1e:ae:7e:7e:63:
3f:05:d6:62:aa:94:44:88:63:20:ce:19:98:97:c9:
e7:e9:2a:92:a4:cc:ee:25:b5:4b:4b:a2:67:ec:a0:
65:38:5a:95:38:36:fe:62:18:e8:d7:2c:48:6a:48:
0b:98:94:57:e9:c6:7e:0a:7f:a8:7c:e6:fb:70:0b:
df:02:68:80:4b:b7:7a:b7:af:ec:39:cf:7d:80:1b:
0e:d3:bb:a1:d5:a5:89:70:fc:b2:e0:50:70:92:26:
88:97:14:9f:0a:93:2c:2f:70:02:ec:15:b9:4a:0f:
be:2a:92:4b:24:40:8a:e4:ac:c9:3c:80:52:eb:38:
77:81:0f:57:fc:a4:b4:c2:09:dd:68:c4:f1:2a:ba:
41:21:29:e8:37:b6:0c:d6:28:f3:6c:e1:f1:d9:9a:
70:cb:50:34:dd:95:f4:63:59:36:45:60:bb:00:d5:
12:a5:4e:20:d4:74:df:02:ab:a0:72:e2:5a:ca:27:
ae:ce:d9:91:8d:7b:63:47:6e:f3:57:0a:ea:12:3b:
2c:10:df:ca:6b:70:ab:99:3d:b9:2d:86:f2:59:76:
b9:13:9a:0a:ac:1f:b2:da:0c:f3:da:44:99:71:95:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F2:79:41:BF:58:75:1C:DB:13:02:EA:F6:61:DC:F8:8D:1C:F5:D4:9F
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/F27941BF58751CDB1302EAF661DCF88D1CF5D49F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2::/31
Signature Algorithm: sha256WithRSAEncryption
79:7d:71:ee:ad:e4:dc:50:dc:23:e6:98:f0:05:7f:df:47:9c:
e0:02:68:1f:9e:26:da:5e:ad:ef:e5:4b:ee:36:26:86:17:34:
ec:6c:d0:cd:76:53:60:9e:6a:4f:7e:2f:9b:b3:20:09:f9:1e:
fc:ee:8e:d9:35:b3:5c:ab:62:18:3c:c7:3e:41:8c:1d:fc:3b:
18:46:6a:81:9a:51:f1:e7:bf:1d:66:03:4b:79:0b:d0:a4:02:
a8:28:f8:93:9d:d1:1c:fa:66:52:74:36:a8:91:bd:2a:68:bb:
07:bd:7f:12:b1:18:6a:ff:4a:29:24:1c:dd:46:77:90:28:3c:
0a:af:08:0e:2a:2c:15:f6:6d:38:b1:d8:7d:f0:e6:99:51:85:
56:10:83:ec:4f:08:9c:e6:1d:2c:e7:ec:c7:d7:fa:4a:ec:58:
89:10:0d:d8:57:16:32:6d:f5:59:e6:ef:29:00:bd:7a:4f:40:
51:8b:d1:56:e7:98:34:b6:e7:ad:90:6d:b2:8c:81:8f:30:5e:
e4:76:32:e0:6d:d6:1f:e7:d2:c8:87:b2:ca:75:b0:df:3f:ff:
fc:e4:57:09:08:0c:ea:3a:a3:96:6b:51:3b:4b:07:f1:15:ce:
fc:cc:01:e3:a3:59:a7:19:58:18:08:37:78:e8:d1:d7:8a:7f:
71:54:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:42 2025 by rpki-client