Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5xJp5LGXEjomip6spbrx5vno4cs.cer
File: 5xJp5LGXEjomip6spbrx5vno4cs.cer (raw, json)
Hash identifier: DUm+qDKjVJLRSCb+k0KjmhCQrx2pz1BuMuletxpz3qU=
Subject key identifier: E7:12:69:E4:B1:97:12:3A:26:8A:9E:AC:A5:BA:F1:E6:F9:E8:E1:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01831279CAB2C34BABE57355A8ED4B810E59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/15/E71269E4B197123A268A9EACA5BAF1E6F9E8E1CB.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/15/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 06 Sep 2022 11:05:15 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 203024
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:79:ca:b2:c3:4b:ab:e5:73:55:a8:ed:4b:81:0e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 6 11:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e71269e4b197123a268a9eaca5baf1e6f9e8e1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:f6:7a:51:ec:5d:38:1c:4b:1d:ac:97:b3:
c7:de:f7:30:cf:de:da:80:bc:76:13:4a:d6:a0:36:
dd:d2:a8:3e:78:d2:56:ff:5c:fc:eb:4a:2d:41:ec:
eb:be:71:44:a6:a3:5a:6f:2d:95:0f:4b:77:ac:c4:
43:f7:df:02:c3:e5:79:bc:b0:28:88:32:66:f8:35:
09:89:40:78:62:c6:b5:06:6b:b1:87:92:0c:00:c3:
d9:eb:cb:c1:cb:ce:f4:ea:d0:de:31:cd:13:8d:c7:
4c:6a:1f:7f:40:43:8a:b7:93:e5:c1:9a:a8:60:bc:
a5:e0:1f:95:05:fa:29:f8:9d:da:11:de:b2:e6:81:
72:7f:f6:cb:f5:f6:00:2f:01:b7:5e:87:b2:e4:17:
53:84:c5:3b:b2:7a:ba:87:81:06:66:aa:cd:20:80:
8e:7c:dd:da:5f:b4:9c:24:72:3b:ee:41:c0:eb:86:
72:0a:5f:f3:4a:bc:09:66:d6:81:fb:ae:9b:a0:93:
61:06:bc:e7:56:2f:4d:47:bc:45:65:77:25:ae:e3:
5d:9e:ec:e3:b2:ee:95:15:b5:ca:ed:c7:b7:06:0a:
e3:eb:61:8d:b5:83:e1:7b:a1:2d:03:bb:c6:fa:7d:
46:c2:5e:ec:bf:4f:ac:e0:f7:52:cb:f6:f9:f8:da:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:12:69:E4:B1:97:12:3A:26:8A:9E:AC:A5:BA:F1:E6:F9:E8:E1:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/15
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/15/E71269E4B197123A268A9EACA5BAF1E6F9E8E1CB.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203024
Signature Algorithm: sha256WithRSAEncryption
28:b3:6a:c0:aa:15:39:30:96:a3:ee:44:54:67:42:25:1c:3c:
2e:92:90:0e:7c:73:04:bb:e1:27:de:af:5e:2e:2f:81:11:3e:
0f:87:18:4c:8a:ca:0e:04:59:23:3f:53:76:99:c6:d7:a0:a7:
8e:f1:5b:57:48:62:2c:6c:bb:a0:cb:2f:2d:cd:8e:fc:c7:16:
a9:dc:ef:e3:9a:1f:87:f3:c0:16:60:c5:06:7c:ec:75:aa:14:
04:28:70:16:9f:2f:7e:2b:ee:77:ae:eb:ce:9c:9a:47:9d:e9:
2e:a7:3d:7d:3a:90:0d:d5:76:f8:39:a6:76:7a:cb:91:d0:f1:
a9:18:9b:ea:15:4e:48:6d:76:7e:1c:ed:d8:82:58:c6:39:50:
9d:53:21:78:08:53:e5:9c:1a:f2:f8:1d:52:36:15:f0:5c:13:
3a:15:ec:b1:55:83:f8:98:97:c4:eb:f3:9e:53:31:14:d1:27:
2d:d5:53:29:2e:78:13:ec:c0:84:06:9d:03:8d:fe:64:21:cf:
90:71:b8:ff:9b:dd:50:de:f6:b7:89:4b:65:27:a9:6f:b1:90:
10:f7:69:ab:d7:ce:a2:a3:c2:e8:0e:62:9d:1a:b2:6b:d4:5a:
4a:0f:5b:c1:46:82:71:b5:2d:c1:6e:db:05:03:32:e0:f2:df:
a9:27:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:16:21 2025 by rpki-client