Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Clg_JOOANBYrZSBzH1e3NK5a0Fw.cer
File: Clg_JOOANBYrZSBzH1e3NK5a0Fw.cer (raw, json)
Hash identifier: H8lotYwWtNMpjGBvmiRaU420aOMZVrLAjwuQyc+QLMY=
Subject key identifier: 0A:58:3F:24:E3:80:34:16:2B:65:20:73:1F:57:B7:34:AE:5A:D0:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0188358158E210D6819DF886116D434AC7A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.caramelfox.net/repo/CaramelFoxNetworks/1/0A583F24E38034162B6520731F57B734AE5AD05C.mft
caRepository: rsync://rpki.caramelfox.net/repo/CaramelFoxNetworks/1/
Notify URL: https://rpki.caramelfox.net/rrdp/notification.xml
Certificate not before: Fri 19 May 2023 19:34:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 211169
IP: 2001:678:f68::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:81:58:e2:10:d6:81:9d:f8:86:11:6d:43:4a:c7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 19 19:34:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a583f24e38034162b6520731f57b734ae5ad05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:53:21:63:a8:ae:e5:13:68:96:bc:aa:bb:
07:6c:9d:bd:2d:fa:4c:78:8c:1a:c5:29:9f:c1:c7:
4b:00:60:32:3e:43:61:9f:cb:b6:5c:54:db:d7:f2:
46:3a:52:37:c6:55:5d:03:0f:9f:69:26:91:c3:f9:
4e:b4:32:48:de:a4:b8:02:5a:d6:19:62:d1:98:d4:
0e:bf:bc:53:65:7f:c2:7e:3f:41:ee:24:44:87:30:
6e:12:d8:53:03:77:92:6c:de:e6:26:cd:96:07:7a:
d1:7a:64:b9:52:4d:92:f7:03:44:24:e6:ae:95:91:
5b:d8:00:96:9e:30:d5:68:a4:fd:1a:cd:72:a7:83:
00:4c:3e:f4:99:52:62:5e:1c:47:4d:e0:47:6b:19:
2c:07:49:61:74:30:b3:6c:e5:7d:4b:0a:0f:78:39:
31:db:61:6c:c8:08:8f:52:37:03:43:8f:6c:5b:1d:
24:7f:0f:5a:c2:8b:d0:1d:4c:1f:6b:b1:69:58:b9:
0b:ea:9f:a9:80:69:6a:ba:46:8a:4d:d9:be:68:48:
e8:4c:d9:ed:38:5f:8a:7f:64:d4:f2:8b:81:88:e6:
52:20:59:f3:52:b4:e6:ed:5d:ab:cc:0b:5b:4d:a2:
46:17:23:5f:b3:0a:5e:89:73:88:e5:6c:b3:c3:ee:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:3F:24:E3:80:34:16:2B:65:20:73:1F:57:B7:34:AE:5A:D0:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.caramelfox.net/repo/CaramelFoxNetworks/1/
RPKI Manifest - URI:rsync://rpki.caramelfox.net/repo/CaramelFoxNetworks/1/0A583F24E38034162B6520731F57B734AE5AD05C.mft
RPKI Notify - URI:https://rpki.caramelfox.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f68::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211169
Signature Algorithm: sha256WithRSAEncryption
54:10:cf:91:50:95:86:59:a6:a2:0a:cc:b0:f3:c6:af:de:6f:
8a:a9:35:a9:ca:db:0b:8c:24:84:a4:6c:fb:45:0a:ec:d1:6a:
db:c3:82:93:06:84:57:e6:73:af:19:3b:6b:d0:85:74:2b:d0:
af:98:c7:14:f2:b9:36:80:b0:22:2c:3b:a7:6a:3f:50:0b:b3:
75:8c:83:b2:a4:d7:82:72:c7:a7:19:05:01:5d:30:fc:e9:aa:
bd:ee:16:3a:76:1c:47:73:d3:c0:30:53:1e:64:24:bd:7c:2b:
85:3a:7b:8a:d1:66:05:93:fe:03:9a:1f:c0:51:bd:30:f3:19:
83:6e:99:20:a5:d8:78:0c:2a:bb:94:05:ec:d3:a4:d4:f9:74:
4b:8b:e6:ea:1c:88:3d:4c:65:34:6b:28:ca:1e:5e:1c:16:f5:
ef:8f:e5:5a:ed:cd:e9:fd:72:2d:a5:61:28:ed:0a:15:60:db:
37:10:66:9f:3c:8a:47:6e:c4:51:07:3c:ce:47:f4:6d:ce:71:
83:3d:15:e6:04:4a:11:b2:51:6d:1e:d5:9d:ac:7c:72:98:ce:
fb:61:ff:17:6f:e5:7f:45:c7:39:86:31:9d:21:46:ae:29:ae:
1f:bc:9f:2f:03:6d:b7:70:25:b9:8b:18:68:ff:18:fe:ab:48:
55:37:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:17:14 2025 by rpki-client