Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36OonVEuU-PF2zF148ixuAJcVUo.cer
File: 36OonVEuU-PF2zF148ixuAJcVUo.cer (raw, json)
Hash identifier: tJkV23vPfgcxwyKYYcYvNOOM6ZkDFNuJo8Ab4qQI9jM=
Subject key identifier: DF:A3:A8:9D:51:2E:53:E3:C5:DB:31:75:E3:C8:B1:B8:02:5C:55:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D7121BC3B26BA0E234B0714AE86B1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/78b0ea-d0a9-40f3-9be1-0c0f865ea96b/1/36OonVEuU-PF2zF148ixuAJcVUo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/78b0ea-d0a9-40f3-9be1-0c0f865ea96b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 205779
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:12:1b:c3:b2:6b:a0:e2:34:b0:71:4a:e8:6b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfa3a89d512e53e3c5db3175e3c8b1b8025c554a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:98:29:97:a7:3f:c0:76:06:5a:68:41:ff:
11:f8:90:a3:4d:92:30:97:53:d7:ad:0e:30:14:ec:
98:66:3f:bd:44:4e:2b:a3:09:71:48:05:38:81:7b:
fc:11:b7:ed:29:9b:ec:ad:27:1c:fa:05:1f:70:cc:
7b:41:d0:89:d0:57:b1:77:58:0a:32:be:2a:3b:e9:
7b:9d:53:92:41:fc:42:4e:6b:e8:bb:69:4c:ee:05:
e0:14:85:d8:b0:d3:1d:7d:6b:84:ed:e4:8d:9b:b9:
82:51:a1:cf:6f:ca:02:c6:0e:0b:b8:ec:07:c3:eb:
8b:ce:bb:69:26:4d:0e:bc:3d:8b:03:20:5a:d1:fe:
9a:dc:31:fe:73:44:7e:8b:b3:ef:de:e9:a8:a3:c3:
d3:1f:bc:0b:fe:cb:64:ce:35:48:fd:d9:42:30:b6:
32:88:34:6b:98:f9:b1:09:23:69:59:19:f5:d9:b6:
94:cb:cb:f7:77:2b:a4:42:1d:0f:ed:87:67:c5:a8:
8c:c2:72:aa:97:d6:29:ed:a9:20:19:0f:d1:27:9d:
50:2a:f3:3f:6f:96:7a:d9:bf:4b:1b:13:ab:4d:b1:
54:db:86:44:85:8b:0f:d9:0f:98:82:01:54:cf:3a:
b0:34:16:39:33:80:bf:ff:41:1e:07:f4:60:9c:fe:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A3:A8:9D:51:2E:53:E3:C5:DB:31:75:E3:C8:B1:B8:02:5C:55:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/78b0ea-d0a9-40f3-9be1-0c0f865ea96b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/78b0ea-d0a9-40f3-9be1-0c0f865ea96b/1/36OonVEuU-PF2zF148ixuAJcVUo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205779
Signature Algorithm: sha256WithRSAEncryption
47:49:19:db:ab:f1:7f:dc:65:75:d2:ba:30:26:4c:09:16:f7:
49:82:aa:64:fa:55:31:0f:c1:a3:ab:25:1a:1e:4c:78:bb:42:
39:b0:f1:cb:18:51:97:e7:08:83:5c:f6:b5:d5:1d:f6:c1:81:
05:c2:e3:2d:d7:71:4f:2d:4a:f6:0b:37:69:28:22:3d:dd:48:
0f:31:6e:cd:37:2b:3d:79:71:72:b5:b6:cf:14:69:25:64:87:
4e:85:03:56:20:2f:b6:40:2e:d5:81:b0:4e:d2:78:96:54:be:
25:99:91:82:1a:7f:1b:ea:c2:63:c0:85:dc:bc:38:ef:cc:a8:
4e:e8:64:de:cb:78:6c:6e:d0:cb:8d:ad:c8:30:11:bb:5f:e5:
b2:6e:f8:e9:93:b5:5b:f1:9e:fa:b8:42:c7:9b:20:f0:a6:23:
dc:a3:f8:3a:e7:2a:90:d1:f5:97:33:42:a9:f5:10:bd:e4:e2:
93:44:1e:fa:b0:b8:55:a8:ec:5f:fb:1d:c3:76:2b:80:49:8a:
fd:c9:a5:40:b9:c6:8a:a5:16:5c:a3:37:50:36:b5:e7:25:9c:
18:81:47:e9:40:31:8f:b1:c8:96:2b:50:67:52:e0:25:57:4c:
b5:81:9e:90:ea:81:84:c2:8f:eb:97:b9:ce:f8:87:c7:ed:2a:
6d:98:e0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:25:52 2025 by rpki-client