Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BaTyDYOMb0niXaqX-kjICDMLQmY.cer
File: BaTyDYOMb0niXaqX-kjICDMLQmY.cer (raw, json)
Hash identifier: RgyNTruMNv5HWp0RfeCnEU0uGg2pAZLOlEcbTBsppjI=
Subject key identifier: 05:A4:F2:0D:83:8C:6F:49:E2:5D:AA:97:FA:48:C8:08:33:0B:42:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708B2126748A331BABAB565FA138E786
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/855115-6ba7-4a9a-b99f-f423c40d186a/1/BaTyDYOMb0niXaqX-kjICDMLQmY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/855115-6ba7-4a9a-b99f-f423c40d186a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:34:04 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 212168
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8b:21:26:74:8a:33:1b:ab:ab:56:5f:a1:38:e7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05a4f20d838c6f49e25daa97fa48c808330b4266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:30:04:eb:1c:95:66:53:df:74:4a:02:25:
20:2e:93:90:e5:e3:70:07:1e:ce:87:72:fb:70:8c:
4a:b9:4c:59:ec:67:06:83:e1:f1:bb:55:ca:43:6d:
51:57:d2:d6:89:81:63:b2:d5:14:2a:96:33:35:14:
ef:9d:f3:3c:48:71:2f:8e:01:d4:d1:4b:a3:39:cc:
5c:b4:68:cf:7e:d5:9e:75:9b:6b:e7:ad:9e:80:ed:
0a:68:6e:78:e4:50:a0:d3:2d:86:a7:82:e0:e7:d9:
e7:fb:4d:e1:ed:23:74:a3:d2:73:48:45:77:06:c6:
d5:29:23:04:e8:76:ef:0e:db:be:94:63:c2:84:79:
12:59:f5:88:e5:13:dd:8c:21:05:00:d2:9a:3c:36:
41:91:78:a8:81:4e:b5:a5:6d:e3:40:68:93:ce:76:
eb:07:84:04:1d:f4:c6:66:69:a3:3f:a9:f0:c7:0e:
f5:ad:55:f2:89:f8:10:d9:d6:98:bc:88:7a:00:28:
f0:e8:e3:d8:a1:19:6f:bd:90:04:01:fd:07:0b:67:
92:2c:84:64:9b:aa:d8:b1:e7:d1:bb:df:31:20:8a:
96:a1:82:c5:31:e3:d1:4b:5c:64:a7:71:1d:65:f0:
33:0e:a9:6a:df:8e:b9:7d:cb:4d:29:5b:34:4d:0a:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A4:F2:0D:83:8C:6F:49:E2:5D:AA:97:FA:48:C8:08:33:0B:42:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/855115-6ba7-4a9a-b99f-f423c40d186a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/855115-6ba7-4a9a-b99f-f423c40d186a/1/BaTyDYOMb0niXaqX-kjICDMLQmY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212168
Signature Algorithm: sha256WithRSAEncryption
a0:53:aa:b3:82:ec:39:88:58:39:f2:09:42:08:4f:e8:e2:f1:
83:44:40:99:3e:c8:9f:41:33:f9:7a:1e:31:7a:5b:1c:50:cc:
f6:57:95:4f:10:42:48:ea:ad:a7:d3:ed:34:e3:11:d8:0f:e5:
17:96:65:e9:25:61:4e:46:0e:c9:38:29:f1:cd:72:27:ee:8d:
8d:65:2b:3a:b2:6c:d1:48:7b:36:41:e8:6e:2f:49:94:1e:53:
4a:7b:b2:2e:60:49:29:e5:bd:93:7d:ab:bf:35:45:b4:a7:41:
0d:d1:35:89:bf:60:bd:7a:49:fb:fe:85:b3:95:8a:7b:5c:fc:
3b:fc:5a:f4:b5:73:81:7e:11:5b:d4:5c:bb:1c:61:17:01:51:
4b:b4:49:3b:d7:93:9a:58:ce:61:f4:8e:99:da:d8:ab:9f:cb:
57:1b:b4:44:31:64:e1:1a:48:67:79:db:a4:df:5e:c8:27:b3:
7d:ee:c0:42:b0:84:41:de:20:f9:af:a2:4d:d0:01:63:4a:3a:
2e:7b:86:0b:cf:66:3d:34:fe:db:2d:25:59:c8:1d:c7:4b:23:
77:90:bb:f2:e9:37:1c:6f:16:b1:4c:5d:ac:f4:03:52:0f:10:
d8:e0:91:92:80:19:53:01:fb:5d:a2:ef:42:f7:2a:b5:53:b1:
ae:78:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:50:55 2025 by rpki-client