Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3QmtgBBlvGtmNuJx-OeVzXGqjrw.cer
File: 3QmtgBBlvGtmNuJx-OeVzXGqjrw.cer (raw, json)
Hash identifier: uiEHG5uPWwMcv+8IrMBciswlQoDqVSE+GnCMZyKW3iA=
Subject key identifier: DD:09:AD:80:10:65:BC:6B:66:36:E2:71:F8:E7:95:CD:71:AA:8E:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0A69332FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/9c9692-da1f-4fb1-a5fc-2789790c2ecf/1/3QmtgBBlvGtmNuJx-OeVzXGqjrw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/9c9692-da1f-4fb1-a5fc-2789790c2ecf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:59:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 209186
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689989432062 (0xa0a69332fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd09ad801065bc6b6636e271f8e795cd71aa8ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:7a:86:5a:30:ef:1e:65:97:3e:67:2a:45:
6a:4a:b3:50:93:00:d6:de:da:be:a2:e2:fc:b4:6c:
6e:0f:6b:fe:fd:6f:ac:74:63:8e:bc:54:3f:dd:63:
9c:0b:ff:a8:3f:6c:42:d8:a8:db:ee:38:b3:9b:88:
d3:1d:04:bc:38:73:64:a9:44:9c:90:a6:12:74:59:
14:7d:a5:53:b5:dc:65:d6:92:8d:d9:dc:9a:b3:08:
05:77:5c:ed:9c:d0:88:9e:46:78:28:98:7b:57:bc:
65:c6:a7:81:ef:a4:32:ad:63:f0:4e:8e:24:29:f4:
57:29:20:3c:f7:3b:b6:19:0a:7b:09:f2:74:73:10:
25:fa:d9:fa:3e:ff:b7:a8:01:6e:03:52:46:ba:f0:
86:86:ea:07:d7:cf:b3:e4:38:f5:ce:97:6c:56:68:
f4:94:13:26:81:ff:3b:ea:94:43:ea:42:3f:20:95:
60:90:f1:ef:c0:c7:04:68:9c:ff:f8:03:52:57:3e:
15:d7:93:88:88:cc:ba:1d:ce:4a:33:22:47:91:d9:
a8:05:8b:4b:68:11:f5:74:dd:17:30:37:b0:4b:bb:
5e:39:85:34:7a:84:aa:3f:85:40:e5:67:e4:e2:87:
7e:9d:2e:a6:d8:6f:d1:d3:5e:cf:92:5b:6f:dd:b4:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:09:AD:80:10:65:BC:6B:66:36:E2:71:F8:E7:95:CD:71:AA:8E:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9c9692-da1f-4fb1-a5fc-2789790c2ecf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9c9692-da1f-4fb1-a5fc-2789790c2ecf/1/3QmtgBBlvGtmNuJx-OeVzXGqjrw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209186
Signature Algorithm: sha256WithRSAEncryption
67:89:eb:8a:ff:4e:cf:d4:53:85:e7:59:e8:61:61:8e:59:5a:
7d:44:cd:09:23:75:d2:f7:e2:a3:e1:fb:8a:8b:be:1c:fb:c9:
99:57:82:58:15:bc:6b:47:af:21:02:f9:2f:c0:98:f3:6b:52:
85:ac:b5:87:8c:75:70:d5:d7:06:94:38:0e:1c:99:8d:81:f7:
57:ab:45:57:dd:03:75:2d:11:66:b9:76:48:eb:98:52:54:ef:
77:5c:bb:7e:18:ee:5c:ad:ec:c3:b8:20:f3:33:b3:54:bf:ba:
db:3f:99:df:b8:b2:c2:27:6e:0d:27:96:fa:df:df:18:9f:78:
a6:db:48:2e:05:ee:30:14:ed:55:b3:dd:a4:2a:ef:c1:0c:09:
3a:0a:ab:6b:c0:8d:71:0a:d5:0a:8f:39:6c:53:ea:cd:90:37:
21:ec:8b:0b:c7:cf:8a:df:51:b5:8c:57:27:50:4e:22:db:4b:
0d:fc:3f:37:47:df:03:66:94:21:f3:48:ee:e3:b4:36:d8:50:
f7:a2:e7:b0:70:b6:57:07:57:96:39:70:ef:d2:80:fb:d8:d5:
b0:6e:5b:8f:55:20:23:53:6e:2b:0a:37:b2:f5:40:94:7e:81:
ca:78:96:98:8d:82:09:df:6f:99:48:a9:8b:8c:05:7d:83:f8:
d2:ab:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:24 2025 by rpki-client