Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5UCtS92DBkuE4U1JF5PXldXJYJM.cer
File: 5UCtS92DBkuE4U1JF5PXldXJYJM.cer (raw, json)
Hash identifier: 1O+aQQD/ruHcYr7tdO542eSwIbFbEoj3NxfG+We4Ow4=
Subject key identifier: E5:40:AD:4B:DD:83:06:4B:84:E1:4D:49:17:93:D7:95:D5:C9:60:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01870F93B899CD06421B1B7B2B659B897377
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/ead29f-cb08-44b2-a76f-5aaa18345730/1/5UCtS92DBkuE4U1JF5PXldXJYJM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/ead29f-cb08-44b2-a76f-5aaa18345730/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Mar 2023 17:45:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 199914
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:93:b8:99:cd:06:42:1b:1b:7b:2b:65:9b:89:73:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 23 17:45:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e540ad4bdd83064b84e14d491793d795d5c96093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:a6:38:57:a7:95:7f:84:64:5d:ff:65:22:
f2:52:5e:14:1f:1a:70:0f:ab:c6:9f:fa:27:1b:64:
57:05:f1:4c:7c:b4:d3:d7:dc:81:cb:0e:28:df:41:
00:d4:33:4f:b8:4c:a8:65:70:54:89:5c:e3:69:26:
45:1b:43:17:c6:f7:a2:db:10:59:47:47:e9:08:ab:
97:51:41:7c:b4:9e:cf:ed:b6:8a:7a:f7:37:bd:a4:
f7:eb:ce:e3:e8:98:31:7c:a1:55:45:1c:e1:5d:b0:
c5:a8:34:5c:3d:24:79:7b:c7:46:96:2d:cb:a3:2f:
b9:08:5d:65:1b:6b:af:c9:3a:2c:02:d9:3d:13:50:
d6:9e:ad:45:ee:a3:d1:e7:53:b2:2b:e2:c4:c8:05:
07:2f:cd:06:b5:78:0e:13:84:5f:68:f9:11:b6:dc:
e3:e8:33:f6:c1:c2:fc:42:3b:b5:29:c1:ae:df:b8:
f3:00:f4:de:94:52:b4:98:f6:d0:ba:2e:54:21:8e:
fe:23:93:69:4a:ca:7b:41:cd:c0:34:5b:31:de:05:
54:bc:aa:16:74:99:f8:05:5c:41:49:82:29:73:a4:
d6:a3:49:79:01:0a:c0:01:12:62:21:70:87:13:36:
dc:c0:1a:77:7b:ce:85:c6:98:64:ea:8b:d9:8e:e4:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:AD:4B:DD:83:06:4B:84:E1:4D:49:17:93:D7:95:D5:C9:60:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ead29f-cb08-44b2-a76f-5aaa18345730/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ead29f-cb08-44b2-a76f-5aaa18345730/1/5UCtS92DBkuE4U1JF5PXldXJYJM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199914
Signature Algorithm: sha256WithRSAEncryption
1e:dd:1f:ea:1d:d3:7c:47:a5:ca:fd:f1:68:1d:dd:64:b2:bb:
0e:f6:8e:87:92:2a:98:d4:4d:c0:23:cc:7a:c7:b3:4e:64:cd:
b9:eb:ce:f1:81:8c:d7:ab:9c:97:bf:88:f6:8f:26:da:07:d8:
df:db:d4:33:cc:71:ac:0b:9a:74:51:20:69:f2:e3:eb:42:26:
90:95:f1:91:e8:45:34:f2:11:d4:45:c5:3e:16:02:7c:b9:07:
9e:84:1a:cb:ed:5a:6d:1f:9e:4f:dc:98:8d:e6:ef:60:02:19:
fd:b4:2b:48:89:6c:8c:e0:ea:75:44:63:58:a7:d5:ec:ab:1d:
a0:0b:ea:6d:1c:c1:df:35:e3:ea:58:6d:32:6a:0f:c6:91:94:
04:c1:3d:cc:39:bc:02:0d:47:c4:a1:ce:db:a6:dc:cf:19:f5:
16:50:bd:26:9d:1c:fe:13:7e:82:47:da:89:17:fb:e8:c2:6c:
53:48:e0:9d:0c:74:08:1a:97:46:d5:86:f1:26:03:a9:29:5d:
41:72:08:3a:cd:48:44:dc:33:ff:ca:ac:b3:9e:85:fd:8f:ec:
3f:76:9c:da:f3:35:05:78:02:46:e3:b2:7f:ac:16:77:9b:b0:
ce:8e:53:dd:2e:c3:f9:de:12:07:3e:ca:b6:27:cb:8a:fc:dd:
b8:9e:38:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:48 2025 by rpki-client