Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D1i7txE6h-IRK_ENDlHFf0olNAA.cer
File: D1i7txE6h-IRK_ENDlHFf0olNAA.cer (raw, json)
Hash identifier: t+Y5FtYaReMceOXR4AkR0idG2wkBfJVFNXVcgKFTKrk=
Subject key identifier: 0F:58:BB:B7:11:3A:87:E2:11:2B:F1:0D:0E:51:C5:7F:4A:25:34:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B63538FBAFBA60F90AC96661695F669
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/c77fb5-cfb9-43a8-a95d-f48502778801/1/D1i7txE6h-IRK_ENDlHFf0olNAA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/c77fb5-cfb9-43a8-a95d-f48502778801/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 212007
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:53:8f:ba:fb:a6:0f:90:ac:96:66:16:95:f6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f58bbb7113a87e2112bf10d0e51c57f4a253400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cc:35:47:62:8c:c0:1c:26:d9:9e:3f:fb:c5:
4b:1d:a0:b4:23:1f:c9:b3:74:fa:6a:72:b4:b1:c1:
5e:23:35:fa:b3:fb:28:e3:99:5c:bb:66:85:42:b9:
a9:56:aa:7a:af:df:97:a1:25:0a:1a:41:a1:2a:7f:
cc:11:6c:5d:02:33:12:f4:fa:a6:11:b9:3c:73:31:
9b:33:1c:34:af:bf:7d:a1:39:54:0a:d8:68:72:84:
ad:60:ce:bd:16:18:02:34:d5:fc:b2:18:9a:40:24:
8b:c9:6e:c5:62:4a:e6:2a:0b:4a:11:5d:66:99:f2:
49:db:24:b0:b9:a0:4a:15:80:b0:18:a3:2d:7c:3d:
60:81:29:68:a1:8b:ab:98:75:b0:2a:d0:1a:98:4e:
a4:5f:63:89:0d:f3:4d:ae:a7:33:e6:78:15:74:cc:
eb:18:6e:64:4e:ec:92:71:e8:70:bc:f3:6f:7a:c5:
66:f7:33:e4:2b:b2:62:bc:a3:8d:6b:8a:d6:38:4b:
46:48:00:a3:b4:a6:b3:e3:7d:d7:31:02:eb:61:67:
98:6e:05:57:34:c1:13:ee:e8:0b:6c:7e:15:0b:16:
cf:05:17:ec:20:b0:cd:4c:a4:8e:c3:bb:ea:0b:aa:
9f:b1:92:c6:99:5e:08:a1:ed:77:d8:c2:0d:f8:60:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:58:BB:B7:11:3A:87:E2:11:2B:F1:0D:0E:51:C5:7F:4A:25:34:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c77fb5-cfb9-43a8-a95d-f48502778801/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c77fb5-cfb9-43a8-a95d-f48502778801/1/D1i7txE6h-IRK_ENDlHFf0olNAA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212007
Signature Algorithm: sha256WithRSAEncryption
93:0b:ab:97:d3:70:ee:ce:bc:dc:8c:42:21:4c:28:6d:6e:8c:
d2:eb:36:84:25:04:4c:43:6c:0c:1e:69:a7:6a:e2:f9:4b:fd:
7d:7c:70:74:1d:b7:e8:dd:87:36:a3:9c:0e:a4:ce:b5:fc:76:
da:e6:13:10:5b:72:36:2c:77:a0:db:61:27:8c:32:eb:35:2c:
ea:b3:29:88:0f:60:f3:44:0f:8e:87:56:2b:92:04:27:fb:55:
9a:24:72:94:50:6a:5e:49:13:59:65:3a:88:cd:e8:42:18:71:
53:56:6e:c4:81:4a:59:78:f4:3e:3a:3b:8a:a2:14:86:69:83:
9d:40:2f:84:b3:f7:8f:fc:ed:36:21:70:cc:98:78:80:3c:bf:
dd:bb:e4:c5:69:57:ab:bf:42:89:48:a6:d8:dc:25:69:1a:8b:
44:79:db:79:9f:2b:f2:96:8d:53:25:3f:2f:b3:3b:ee:63:c1:
c8:ff:3b:80:44:79:38:4c:4a:72:45:27:96:95:1e:49:21:9f:
b7:fa:f6:43:03:c5:90:a5:b7:93:33:1d:6a:7a:01:28:10:0e:
cb:8c:c6:3d:48:a8:0f:fc:d5:b2:98:6e:08:a0:d2:30:0c:f9:
e8:c4:d7:69:3e:2e:6b:7d:b9:6b:f4:93:fb:86:79:f5:a2:bb:
b3:12:69:44
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVrY1OPuvumD5CslmYWlfZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDMzMjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjU4YmJiNzExM2E4N2UyMTEyYmYxMGQwZTUxYzU3ZjRhMjUzNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisw1R2KMwBwm2Z4/+8VLHaC0Ix/J
s3T6anK0scFeIzX6s/so45lcu2aFQrmpVqp6r9+XoSUKGkGhKn/MEWxdAjMS9Pqm
Ebk8czGbMxw0r799oTlUCthocoStYM69FhgCNNX8shiaQCSLyW7FYkrmKgtKEV1m
mfJJ2ySwuaBKFYCwGKMtfD1ggSlooYurmHWwKtAamE6kX2OJDfNNrqcz5ngVdMzr
GG5kTuyScehwvPNvesVm9zPkK7JivKONa4rWOEtGSACjtKaz433XMQLrYWeYbgVX
NMET7ugLbH4VCxbPBRfsILDNTKSOw7vqC6qfsZLGmV4Ioe132MIN+GCN8wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFA9Yu7cROofiESvxDQ5RxX9KJTQAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2M3N2Zi
NS1jZmI5LTQzYTgtYTk1ZC1mNDg1MDI3Nzg4MDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvYzc3ZmI1
LWNmYjktNDNhOC1hOTVkLWY0ODUwMjc3ODgwMS8xL0QxaTd0eEU2aC1JUktfRU5E
bEhGZjBvbE5BQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM8JzANBgkqhkiG9w0BAQsFAAOCAQEAkwurl9Nw7s68
3IxCIUwobW6M0us2hCUETENsDB5pp2ri+Uv9fXxwdB236N2HNqOcDqTOtfx22uYT
EFtyNix3oNthJ4wy6zUs6rMpiA9g80QPjodWK5IEJ/tVmiRylFBqXkkTWWU6iM3o
QhhxU1ZuxIFKWXj0Pjo7iqIUhmmDnUAvhLP3j/ztNiFwzJh4gDy/3bvkxWlXq79C
iUim2NwlaRqLRHnbeZ8r8paNUyU/L7M77mPByP87gER5OExKckUnlpUeSSGft/r2
QwPFkKW3kzMdanoBKBAOy4zGPUioD/zVsphuCKDSMAz56MTXaT4ua325a/ST+4Z5
9aK7sxJpRA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:57 2025 by rpki-client