Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A2B4p2nxULgAR0zMuR1GsypsuKo.cer
File: A2B4p2nxULgAR0zMuR1GsypsuKo.cer (raw, json)
Hash identifier: 2amtATySICjb8QdGbiVhU19Kus8ogLZN6c+6hSuDG3s=
Subject key identifier: 03:60:78:A7:69:F1:50:B8:00:47:4C:CC:B9:1D:46:B3:2A:6C:B8:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01826299C42DDB63D1516CA4AB8AE995ED90
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/23e548-92c1-4fac-8e20-6b265c919ed2/1/A2B4p2nxULgAR0zMuR1GsypsuKo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/23e548-92c1-4fac-8e20-6b265c919ed2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Aug 2022 07:27:00 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 203738
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:99:c4:2d:db:63:d1:51:6c:a4:ab:8a:e9:95:ed:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 3 07:27:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=036078a769f150b800474cccb91d46b32a6cb8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:c4:fc:84:2c:56:17:d6:76:a7:d1:5a:42:
2f:53:50:86:91:f0:7c:5c:ef:9b:89:ab:ad:1c:e9:
ca:08:5a:49:6b:c9:ac:d7:1a:59:19:08:35:c7:3f:
9a:51:dc:4d:84:f3:31:5a:e6:7a:3a:ce:29:44:d1:
69:52:aa:ca:a7:9b:12:39:16:41:a7:56:10:17:bb:
9c:44:9a:86:ac:82:17:03:da:1b:4e:52:b1:7f:5b:
6c:f5:aa:6f:12:1c:21:fe:9c:75:dc:df:f2:c4:08:
99:28:15:99:2f:a3:cf:0f:65:44:0b:73:0d:74:34:
fd:b5:bd:8b:27:46:df:60:5d:b7:60:53:78:b4:d1:
19:a8:08:52:6a:36:0e:ea:56:b2:38:8b:c5:2b:06:
da:cd:61:27:68:bc:f9:7b:1e:49:51:dd:cb:39:a0:
34:35:99:d0:b5:81:7e:dc:07:2d:a3:6e:44:a7:ac:
8d:02:ac:17:ac:6b:26:16:20:50:a5:66:63:ab:81:
3c:91:70:9c:f6:bc:de:7f:b1:17:fb:71:e0:9f:e3:
38:41:8c:4c:a3:75:88:b6:dd:83:c7:53:e4:6c:c4:
71:b3:21:64:c6:6e:f0:5c:d0:62:9c:d0:f1:b0:32:
e4:d9:5d:38:ce:e3:09:d5:2c:0d:4e:31:64:89:cb:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:60:78:A7:69:F1:50:B8:00:47:4C:CC:B9:1D:46:B3:2A:6C:B8:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/23e548-92c1-4fac-8e20-6b265c919ed2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/23e548-92c1-4fac-8e20-6b265c919ed2/1/A2B4p2nxULgAR0zMuR1GsypsuKo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203738
Signature Algorithm: sha256WithRSAEncryption
a4:d1:82:c8:a4:a3:6c:c2:de:a8:48:e9:63:35:35:1a:a6:d2:
30:67:7a:84:a2:55:d6:ec:79:ef:a6:15:76:e9:82:26:49:b6:
b1:89:1a:a4:23:9e:51:01:64:2c:ef:2f:03:19:6b:84:35:08:
a4:27:f5:3d:a4:7f:e4:c8:04:49:8c:94:19:31:67:e2:10:ed:
16:a9:d4:be:36:30:8f:38:fd:90:6d:d4:6c:fb:e8:76:80:1b:
47:cf:49:c5:31:83:a3:7b:2b:4f:8d:96:92:61:8b:87:5b:ba:
0d:d1:33:3d:e6:54:1e:d2:45:a5:04:fa:06:32:f1:fe:9b:76:
db:10:15:17:9a:74:2c:20:01:30:91:04:04:50:d0:af:26:31:
09:d3:47:36:3b:54:2b:f0:49:74:e1:68:d8:40:02:1e:88:0f:
21:e5:94:aa:b5:6f:63:c3:14:4c:98:ae:bd:61:6e:24:20:a5:
e4:2c:eb:75:2e:a1:38:64:30:9d:94:b4:b7:55:32:e8:5e:dd:
e0:f8:a4:a2:28:5d:ac:15:c3:91:43:05:32:69:01:74:ae:56:
c7:9f:57:5a:e3:81:c8:54:da:92:9b:d9:ad:27:bf:97:28:65:
d1:70:32:74:2a:18:b3:15:e9:b9:17:22:a3:38:85:d9:f2:9d:
1d:bc:a2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:10 2025 by rpki-client