Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.cer
File: Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.cer (raw, json)
Hash identifier: ybcLPJom+vpywfSFVzLYwVnPQFWQhd3QlmT+on9TmX0=
Subject key identifier: 02:0E:19:56:85:D6:23:12:B8:60:3C:CC:74:86:4C:FE:8C:D3:64:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3E9982F34A223E8A27B1CF804CF1AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/ff3a3f-ce58-423c-b835-c77ba520791b/1/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/ff3a3f-ce58-423c-b835-c77ba520791b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 210614
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3e:99:82:f3:4a:22:3e:8a:27:b1:cf:80:4c:f1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=020e195685d62312b8603ccc74864cfe8cd3648e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:97:0d:f0:9e:c5:44:7f:d5:67:57:d8:53:
41:db:43:f5:36:26:1c:35:63:07:b1:76:16:e4:ba:
10:23:e1:a3:49:f4:99:6e:57:bf:cd:43:c9:37:13:
66:b7:c9:af:ec:04:f3:fd:50:2f:fb:4c:c2:45:f8:
89:18:4d:c4:cc:35:96:d9:81:b9:c9:83:d4:0e:f3:
58:6e:10:b9:f4:3d:5d:7c:cf:ec:e4:94:f6:01:f2:
08:ad:13:93:2f:cd:5f:87:f1:c0:a4:63:92:6b:44:
31:cb:0e:02:67:92:71:b0:b4:64:ab:4a:47:0e:e1:
de:d4:5f:f2:58:23:82:a3:2e:b3:b1:ec:7f:90:91:
37:0d:1c:73:70:2d:9a:cb:15:e1:e1:b8:f7:18:fc:
72:2d:17:5f:ba:6d:bd:6a:35:20:2f:3f:4f:93:83:
1c:1c:76:99:87:ff:1b:3a:f4:fe:99:20:35:3f:8a:
18:16:2f:2c:48:11:78:5f:ca:13:2a:ed:cb:20:bb:
cf:0e:f2:5a:a8:0b:12:7f:3d:78:17:c9:8a:10:a6:
4c:8c:71:ca:4d:a2:fe:52:d8:21:a4:cd:c8:0a:61:
53:2c:37:e0:d8:6b:d7:12:7e:3b:99:21:3e:45:dd:
63:a0:8e:52:36:98:80:e6:80:26:8d:35:7d:3d:88:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:19:56:85:D6:23:12:B8:60:3C:CC:74:86:4C:FE:8C:D3:64:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ff3a3f-ce58-423c-b835-c77ba520791b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ff3a3f-ce58-423c-b835-c77ba520791b/1/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210614
Signature Algorithm: sha256WithRSAEncryption
49:f1:1b:6c:dd:11:14:29:fd:f6:e0:a2:fd:db:b4:48:2d:f6:
79:7b:2b:53:39:b6:1b:89:d9:11:ee:7f:29:c7:e3:7c:b9:56:
b5:25:51:08:10:4a:10:2c:75:89:74:51:ef:4a:cd:d9:ff:6b:
f2:55:fb:39:e8:78:aa:6e:e0:ee:d2:4c:bc:1c:0a:8e:b9:55:
88:d3:d2:bc:9f:fb:c5:01:f5:90:8e:58:23:bf:78:58:18:a5:
69:03:16:8d:cd:ea:5f:4d:b3:07:c7:24:43:18:f3:a4:7a:db:
d3:76:67:6c:34:c1:0f:59:4f:52:ee:88:71:8e:58:80:60:ea:
93:8d:12:e0:35:26:6a:05:c9:05:27:97:12:8d:c4:49:8e:2f:
74:57:7d:c4:0d:bd:7c:dd:e9:57:f0:e5:02:5b:89:47:17:cc:
60:ae:f3:6c:d5:14:20:58:f9:49:ac:42:84:96:16:2d:0d:27:
25:2d:b3:b6:9c:43:22:28:89:c7:72:0a:11:6b:f5:ec:ff:1d:
31:e1:ba:4a:b0:52:2b:75:e4:aa:5b:69:46:b2:56:1a:e3:ee:
eb:b6:3a:6e:60:ed:32:df:9e:88:51:f9:a9:b2:e2:82:60:15:
7e:81:5c:5f:87:4f:42:6e:0f:11:0b:50:a5:e6:54:60:1d:8e:
a9:fe:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:44:46 2025 by rpki-client