Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1267hBIQBsq6mCasY77U5mJmC_U.cer
File: 1267hBIQBsq6mCasY77U5mJmC_U.cer (raw, json)
Hash identifier: goMQ83VwgH/1KefwdMmuayT9V4QGDpIKPP6RGkbfQog=
Subject key identifier: D7:6E:BB:84:12:10:06:CA:BA:98:26:AC:63:BE:D4:E6:62:66:0B:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185716909340257746507322C6EBFF4CAF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/3810bd-d1c3-4afc-ad01-4f7399cfd885/1/1267hBIQBsq6mCasY77U5mJmC_U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/3810bd-d1c3-4afc-ad01-4f7399cfd885/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 200454
AS: 203619
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:09:34:02:57:74:65:07:32:2c:6e:bf:f4:ca:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d76ebb84121006caba9826ac63bed4e662660bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:f4:c0:cc:19:d4:f6:e0:3a:08:d3:b2:83:
35:2a:54:8b:f8:7c:f4:94:93:97:b1:d5:db:38:a9:
61:d5:05:c6:84:1f:05:ba:3d:6c:b9:89:33:77:b4:
35:57:7e:2c:85:fd:92:80:a9:50:30:d2:ff:f1:fc:
6c:16:6a:28:e5:c8:09:c9:0a:b0:52:2a:69:54:ec:
50:fe:7b:c7:52:a0:87:cc:55:71:5c:1c:ca:e3:cb:
67:f1:34:ee:3d:73:87:ff:9e:f0:5c:4a:c7:84:15:
8b:2b:c6:d4:dd:17:95:c3:21:b3:fe:7c:32:d7:ba:
76:7b:68:61:c5:2a:e9:e0:6e:05:82:7d:06:18:96:
cf:5a:ca:4b:86:d2:66:f0:e0:15:cd:49:6a:da:e0:
f0:6c:ee:ca:06:35:38:d7:79:15:2c:3b:60:94:09:
97:04:1f:dc:82:6b:a2:a6:a2:95:22:bb:33:01:de:
1f:08:1c:06:d7:bd:a8:f5:10:44:15:2d:c2:4e:9b:
a9:d0:d1:f4:3c:19:df:07:ae:3a:a5:09:1e:d6:2a:
8e:e6:75:5b:4f:e1:70:0c:43:b4:dc:96:9f:bd:5b:
7e:f3:ca:ba:40:a9:b5:de:79:55:ea:d9:d8:df:76:
2e:27:91:bd:f5:45:fe:e5:80:67:ea:58:9f:0e:16:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:BB:84:12:10:06:CA:BA:98:26:AC:63:BE:D4:E6:62:66:0B:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/3810bd-d1c3-4afc-ad01-4f7399cfd885/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/3810bd-d1c3-4afc-ad01-4f7399cfd885/1/1267hBIQBsq6mCasY77U5mJmC_U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200454
203619
Signature Algorithm: sha256WithRSAEncryption
52:f4:8c:e9:2b:90:b9:ac:95:68:d0:23:cc:a6:77:a1:dd:46:
74:57:0a:df:f5:f3:36:a7:b3:5c:7f:7f:56:d4:54:56:b2:c6:
36:64:35:7c:e3:37:b1:5f:7a:65:37:46:43:d0:f4:f4:82:4c:
28:6e:5b:6e:d5:e3:11:98:51:3e:32:33:5e:40:25:19:df:d8:
29:de:ef:80:88:16:b4:49:96:59:0e:74:5a:60:1b:5b:a8:4d:
8e:e0:ed:45:98:25:04:5a:1c:d6:9a:14:56:2e:b8:f6:b1:8f:
27:4e:4c:da:13:34:ef:17:e4:89:70:b8:59:7d:24:74:cd:b2:
4f:78:f9:0e:59:3a:d2:21:44:ea:2e:aa:71:6b:41:40:8c:dd:
a6:87:58:a7:d0:0c:60:63:de:7e:92:3e:eb:b2:bc:01:7b:c1:
f0:6e:b3:e0:54:75:dc:b6:9a:c1:2e:c2:dd:17:e2:1b:16:9a:
e7:c0:3e:96:d1:2d:22:6d:62:19:d7:f0:26:3b:6c:b8:68:4a:
cd:aa:83:d1:96:99:d9:44:a8:f0:e6:58:42:29:83:c8:0b:c5:
84:1d:c8:b9:65:c9:ca:f8:16:fa:f0:d7:15:69:eb:21:15:7b:
d8:ae:f4:84:4e:65:68:87:94:70:0b:9b:f9:e1:4c:31:84:a6:
a6:1d:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:11:46 2025 by rpki-client