Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0WltJzHhTVxCuzV0l7ddo6rOIIU.cer
File: 0WltJzHhTVxCuzV0l7ddo6rOIIU.cer (raw, json)
Hash identifier: pv5TJroeOQ8H+lwNlPhdd/pf/qeQ1MqVZ3NHMaN7r1U=
Subject key identifier: D1:69:6D:27:31:E1:4D:5C:42:BB:35:74:97:B7:5D:A3:AA:CE:20:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185DEE17F0BE01B0E67DAD2920B1F0C229D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/bd2b75-566c-4f14-90d5-a3a944cb14c8/1/0WltJzHhTVxCuzV0l7ddo6rOIIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/bd2b75-566c-4f14-90d5-a3a944cb14c8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Jan 2023 13:46:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 200179
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:e1:7f:0b:e0:1b:0e:67:da:d2:92:0b:1f:0c:22:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 23 13:46:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1696d2731e14d5c42bb357497b75da3aace2085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a9:80:74:53:09:6b:6d:f9:5d:9d:50:16:af:
5d:ba:14:f5:33:1c:f8:e6:d2:44:87:2e:59:b3:7f:
96:7f:39:4e:46:b7:84:7f:91:fa:a3:3f:d4:62:fc:
8b:6a:f2:92:05:09:29:51:b7:15:31:4e:34:f6:cf:
94:ea:ea:5d:2a:c6:a3:2e:10:a9:ce:e0:9a:c0:ca:
79:db:8e:62:60:39:de:65:a7:83:cb:57:50:7c:74:
5e:0d:b2:96:71:27:a7:82:a9:0d:d0:c6:0d:e2:f1:
50:5e:fe:50:bc:20:de:94:1c:25:68:ef:1d:28:7f:
f1:b3:97:df:82:76:44:cf:09:cc:f7:42:41:17:4a:
68:a6:77:ff:07:f0:76:f0:e7:64:f3:43:19:a6:fe:
92:fa:fa:6c:6b:ab:db:78:5a:99:1a:8e:07:d1:43:
16:a3:bc:75:c7:a6:1e:6d:e7:6f:06:8e:54:05:4d:
b2:22:d7:1c:6b:ee:23:0b:cc:dd:1b:f0:19:99:c2:
44:41:95:2b:41:16:67:fa:52:d3:38:c1:f0:5c:dc:
c8:21:2d:06:8b:85:e5:1b:f1:e2:dd:23:7a:ec:66:
93:fc:1f:ba:36:9d:59:2e:f2:ab:8a:8e:26:8e:ed:
c0:e7:c4:d4:75:00:d2:14:8d:fe:fb:39:ab:4f:9e:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:69:6D:27:31:E1:4D:5C:42:BB:35:74:97:B7:5D:A3:AA:CE:20:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/bd2b75-566c-4f14-90d5-a3a944cb14c8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/bd2b75-566c-4f14-90d5-a3a944cb14c8/1/0WltJzHhTVxCuzV0l7ddo6rOIIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200179
Signature Algorithm: sha256WithRSAEncryption
85:bc:dc:14:26:96:81:25:52:b5:4a:3e:e1:54:42:bb:52:3c:
39:d6:e3:83:6d:24:8b:0d:77:a9:da:72:1c:cb:52:e6:66:5b:
a5:09:60:51:5e:76:9f:f0:9d:3b:25:15:b4:9a:9d:cd:56:26:
c6:d4:77:17:20:98:d4:e0:ae:0d:36:40:2b:dd:e6:80:11:82:
16:b9:f7:9b:ea:1d:7a:b4:43:02:0e:d6:ae:48:6b:2c:5c:a4:
0d:7b:8a:db:5e:5c:2f:84:ff:c3:ab:ef:af:b7:7b:13:6e:76:
87:1e:bb:90:07:ff:d2:57:3a:4c:26:11:36:bb:d9:32:19:8e:
3f:42:3f:da:32:d2:34:b0:53:b7:a0:5d:d4:2b:39:b4:22:20:
a2:65:96:cb:11:d9:4b:3c:68:3e:fb:11:1e:f2:ee:d2:e6:1a:
0f:04:35:ec:b3:6e:fd:e5:6f:77:68:fe:54:36:45:ed:5f:db:
9e:a4:1d:a5:54:ea:51:c9:75:0c:1b:13:21:2b:77:c3:11:3e:
89:b7:38:a6:89:94:b0:f8:03:ff:55:93:98:f9:d8:35:d4:3e:
31:7b:bf:52:30:e0:4f:2a:8d:df:68:f8:e6:5d:95:ba:ef:ea:
5a:88:a9:9d:5c:cc:16:12:59:7c:06:2c:13:26:26:ef:0d:36:
af:46:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:48:11 2025 by rpki-client