Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8LfiHQbWIS4HnAY6shJpKLpPj9Y.cer
File: 8LfiHQbWIS4HnAY6shJpKLpPj9Y.cer (raw, json)
Hash identifier: NcGjFG7dQmwvfSbS3mSdiOiVMassAf4aWFOXmCb2f+0=
Subject key identifier: F0:B7:E2:1D:06:D6:21:2E:07:9C:06:3A:B2:12:69:28:BA:4F:8F:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD1158DF3129D87EFD93B18478C3DA8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/8LfiHQbWIS4HnAY6shJpKLpPj9Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 210880
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:15:8d:f3:12:9d:87:ef:d9:3b:18:47:8c:3d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0b7e21d06d6212e079c063ab2126928ba4f8fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:c5:86:48:5a:36:23:d4:52:49:0d:a9:90:
71:42:02:bd:71:78:6b:4c:6d:04:8e:72:91:29:e4:
62:95:81:37:d1:d3:02:23:b0:a0:64:4e:cf:d4:b8:
a1:5a:03:a9:2c:6b:8d:49:d8:5f:80:7e:a7:c4:ea:
3d:81:d4:ec:18:21:32:8a:48:f2:78:bc:da:7d:94:
4b:05:5b:b5:45:12:61:2c:7c:3c:b9:a6:d8:d7:d0:
ec:c9:2e:cc:72:9e:48:96:57:86:de:85:15:3d:a2:
cb:cb:d5:70:15:8e:c1:d6:f5:fc:6d:2c:fa:2d:d5:
88:54:b2:a4:e7:7f:fd:9a:10:8e:b2:e7:8d:0e:d1:
e5:d7:7b:18:5d:1d:55:3c:fc:ed:b9:d4:55:c9:50:
b2:90:52:3c:24:1e:55:d0:9d:33:98:80:f1:9e:49:
74:8e:40:16:cb:f3:1d:3f:7a:f4:bf:cf:77:d6:ff:
00:a1:9c:e0:0f:8c:25:2a:ea:f3:38:c7:8d:e4:36:
20:a8:ad:e7:ea:c2:64:cf:84:04:89:57:aa:02:85:
8e:70:c2:c2:a6:ad:08:ce:a2:fb:63:4e:b5:72:e3:
fb:e6:43:71:79:25:2e:50:d4:a2:45:2b:db:49:49:
00:bb:b3:1c:e4:29:d3:83:a6:ce:63:4a:70:7b:af:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B7:E2:1D:06:D6:21:2E:07:9C:06:3A:B2:12:69:28:BA:4F:8F:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/8LfiHQbWIS4HnAY6shJpKLpPj9Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210880
Signature Algorithm: sha256WithRSAEncryption
30:02:06:ba:57:c6:dc:4b:9c:32:eb:6d:61:2e:39:d8:d2:fb:
3b:79:d6:a0:71:e3:79:c0:9d:fc:a2:94:db:49:6a:68:25:01:
bb:42:b8:c7:7a:37:f8:e5:30:0b:78:75:84:67:be:97:45:1d:
57:86:fc:75:a1:ae:8c:44:de:fc:87:21:ab:29:d7:32:3d:50:
b3:9e:69:7b:99:1f:5a:d9:81:12:d6:cd:68:a4:d2:39:3e:f2:
f8:4d:88:9a:42:40:e6:07:73:97:c5:da:7c:9e:64:19:5d:79:
4d:e4:7a:da:a5:43:89:7a:ef:19:3b:b8:d4:9f:53:d9:2f:f9:
73:23:76:e8:8a:5d:4d:ba:71:32:67:b5:a1:51:8e:42:9d:a6:
e3:cd:c1:b2:cf:54:8c:70:16:5d:d3:ed:10:a1:19:d4:c9:7a:
a2:20:ec:9b:20:ee:b0:47:94:8f:a6:5e:a6:e4:e7:00:73:83:
26:79:d1:8e:94:1a:6c:92:88:12:09:ab:0a:e0:28:e2:15:1a:
79:e8:14:fc:59:96:b6:ea:6a:6a:41:33:6d:f5:d1:89:48:00:
be:ed:dc:71:1b:45:88:65:a2:72:7d:e0:99:5a:cf:c7:36:99:
aa:a3:10:9e:d8:fc:a9:a6:12:ad:98:73:52:8d:0c:96:20:32:
af:35:f6:fe
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVr0RWN8xKdh+/ZOxhHjD2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGI3ZTIxZDA2ZDYyMTJlMDc5YzA2M2FiMjEyNjkyOGJhNGY4ZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxODFhkhaNiPUUkkNqZBxQgK9cXhr
TG0EjnKRKeRilYE30dMCI7CgZE7P1LihWgOpLGuNSdhfgH6nxOo9gdTsGCEyikjy
eLzafZRLBVu1RRJhLHw8uabY19DsyS7Mcp5IlleG3oUVPaLLy9VwFY7B1vX8bSz6
LdWIVLKk53/9mhCOsueNDtHl13sYXR1VPPztudRVyVCykFI8JB5V0J0zmIDxnkl0
jkAWy/MdP3r0v8931v8AoZzgD4wlKurzOMeN5DYgqK3n6sJkz4QEiVeqAoWOcMLC
pq0IzqL7Y061cuP75kNxeSUuUNSiRSvbSUkAu7Mc5CnTg6bOY0pwe6/hAwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFPC34h0G1iEuB5wGOrISaSi6T4/WMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzQwZDYy
Ny1hYzQ1LTQ2NmMtYTlmZC0wY2I2NWRmYTFjN2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvNDBkNjI3
LWFjNDUtNDY2Yy1hOWZkLTBjYjY1ZGZhMWM3Yy8xLzhMZmlIUWJXSVM0SG5BWTZz
aEpwS0xwUGo5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM3wDANBgkqhkiG9w0BAQsFAAOCAQEAMAIGulfG3Euc
MuttYS452NL7O3nWoHHjecCd/KKU20lqaCUBu0K4x3o3+OUwC3h1hGe+l0UdV4b8
daGujETe/IchqynXMj1Qs55pe5kfWtmBEtbNaKTSOT7y+E2ImkJA5gdzl8XafJ5k
GV15TeR62qVDiXrvGTu41J9T2S/5cyN26IpdTbpxMme1oVGOQp2m483Bss9UjHAW
XdPtEKEZ1Ml6oiDsmyDusEeUj6ZepuTnAHODJnnRjpQabJKIEgmrCuAo4hUaeegU
/FmWtupqakEzbfXRiUgAvu3ccRtFiGWicn3gmVrPxzaZqqMQntj8qaYSrZhzUo0M
liAyrzX2/g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:27:30 2025 by rpki-client