Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A3jiKwJRDSn4wYSm9mPrmP0daqc.cer
File: A3jiKwJRDSn4wYSm9mPrmP0daqc.cer (raw, json)
Hash identifier: w3UM6Uzem00XA/q3uzWLZ/uAO8ta6LBS/kK5D2SUv/E=
Subject key identifier: 03:78:E2:2B:02:51:0D:29:F8:C1:84:A6:F6:63:EB:98:FD:1D:6A:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857168E05AD0F57C21BCAF8E6EA919AF2F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/daff4f-42e1-4fef-a4e8-9ef964c6b569/1/A3jiKwJRDSn4wYSm9mPrmP0daqc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/daff4f-42e1-4fef-a4e8-9ef964c6b569/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 51574
IP: 185.201.254.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:e0:5a:d0:f5:7c:21:bc:af:8e:6e:a9:19:af:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0378e22b02510d29f8c184a6f663eb98fd1d6aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:51:f3:9f:ac:7e:c5:bf:fe:64:1b:88:47:
12:85:2e:c3:d0:e1:22:74:f7:05:67:83:4a:44:c5:
49:6a:dc:7d:28:5b:d7:c6:da:ea:88:0f:ee:31:03:
1b:fb:77:14:eb:24:d7:64:d1:c9:4f:06:bb:e0:a7:
a4:11:f7:d6:ac:29:92:6a:88:94:dc:01:70:af:3d:
fb:11:09:e7:45:ee:c9:e4:42:bf:93:ca:1b:cb:fe:
77:96:ae:91:71:b8:aa:dc:ee:a4:14:8a:ad:7f:b1:
12:68:3b:f0:5d:23:5e:89:eb:7b:b2:21:df:ac:90:
75:de:f4:57:c1:f4:e3:24:17:2a:ec:44:d2:43:89:
e4:09:bf:9c:f9:cf:35:81:c6:69:ef:f4:31:5b:7a:
12:4e:19:19:3f:0e:96:00:6f:ba:10:ca:aa:92:6a:
25:fd:59:e1:fe:40:0d:27:30:c6:50:04:ef:d4:8d:
a0:0b:ce:54:9d:5c:5d:65:33:0f:2e:6c:cd:f6:b3:
67:55:de:5f:82:2a:03:84:83:9f:52:1d:61:94:e0:
8b:76:f2:61:c1:e4:00:ab:04:a2:e5:b6:63:2a:45:
d1:04:07:db:8a:c3:6f:d8:80:b1:c5:06:29:e3:56:
f9:d2:45:11:6a:bb:1e:e6:c9:1c:10:9f:03:ec:a8:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:E2:2B:02:51:0D:29:F8:C1:84:A6:F6:63:EB:98:FD:1D:6A:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/daff4f-42e1-4fef-a4e8-9ef964c6b569/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/daff4f-42e1-4fef-a4e8-9ef964c6b569/1/A3jiKwJRDSn4wYSm9mPrmP0daqc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.254.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51574
Signature Algorithm: sha256WithRSAEncryption
3d:d1:e3:13:ee:b8:da:fd:d2:19:0f:b6:65:de:99:c1:1e:c5:
53:03:ed:8a:15:43:b6:08:04:7f:9e:a0:db:e3:63:0b:62:d5:
23:e2:11:4f:86:07:de:73:27:76:f1:35:41:54:71:d8:0a:de:
8a:31:d7:aa:6a:8d:d4:56:e5:0f:fe:c2:1a:b1:43:79:7b:9f:
5b:bd:ae:10:7b:e8:8f:a5:a4:ad:97:1c:ae:49:e0:58:6c:76:
70:8e:97:75:99:53:51:07:2a:53:08:32:ce:d7:97:fe:59:c9:
c8:e0:c8:29:3a:e5:ba:b3:53:21:0d:0b:e1:bd:84:a4:74:42:
ed:8e:1d:72:e1:93:18:03:b0:f1:53:2e:73:79:ab:33:9b:61:
98:ad:73:31:57:8a:ca:d1:12:e7:f8:48:7d:ab:79:95:57:0f:
5b:d6:b0:c1:2b:76:e4:95:94:d3:d0:26:d8:79:6d:93:e6:21:
87:97:c8:3e:5f:d2:d7:c9:bf:cc:c3:14:aa:12:ba:e8:43:97:
66:ed:52:a0:bb:2f:2a:00:71:5c:b9:6d:18:54:02:ed:e5:0a:
95:9a:f3:1b:25:ad:d2:d8:fb:ca:f2:ac:cb:f0:41:68:ee:74:
2f:b7:40:8d:32:5d:00:4e:0f:db:d3:80:0d:a9:61:b3:c7:e6:
47:38:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:44 2025 by rpki-client