Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Em89BDP7ypDYJwXnsThjhVAEqDk.cer
File: Em89BDP7ypDYJwXnsThjhVAEqDk.cer (raw, json)
Hash identifier: OTM8hZ9RakdRxdsqKxaKHCxFxKB3kne95mRgaKodzDA=
Subject key identifier: 12:6F:3D:04:33:FB:CA:90:D8:27:05:E7:B1:38:63:85:50:04:A8:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A05E15951392D757B01B9DB0DDD1FB410
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/b6c31b-9e6a-40fa-8a79-0b8a42d4f219/1/Em89BDP7ypDYJwXnsThjhVAEqDk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/b6c31b-9e6a-40fa-8a79-0b8a42d4f219/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Aug 2023 23:42:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 216455
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:05:e1:59:51:39:2d:75:7b:01:b9:db:0d:dd:1f:b4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 17 23:42:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=126f3d0433fbca90d82705e7b13863855004a839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:11:b0:1c:38:7c:f4:ae:fe:18:71:67:3e:
01:69:fa:dc:bb:35:84:a8:f5:f2:72:b7:d8:f3:e2:
60:6a:e6:68:84:ab:17:02:bb:bc:ab:58:80:2c:81:
f4:c2:3f:ec:95:5b:82:05:8a:d7:e6:2d:d5:69:fe:
a4:88:f3:41:00:90:50:09:42:b1:05:6e:a9:25:6f:
66:f0:5f:bb:3a:58:27:be:3c:93:02:08:60:06:ed:
ec:59:cd:64:2e:45:68:f7:0a:95:ab:86:2a:9a:3b:
5a:88:97:ae:de:42:9f:6f:96:56:63:62:76:95:3c:
6f:6f:6b:57:7f:be:a0:f5:5f:40:18:ea:8e:2e:f5:
b4:9e:6e:a4:90:96:dd:72:e7:97:ff:b6:da:20:ef:
52:2b:c2:9f:ee:4c:df:27:12:1d:00:d9:a8:19:14:
ed:f8:7f:78:6f:76:dc:39:80:aa:d9:a8:91:75:fb:
ab:a0:91:e6:0d:3c:21:09:74:bd:47:75:c9:c2:d4:
e9:a3:46:04:4b:96:25:98:b2:81:2f:03:3f:d6:fe:
00:58:ae:d8:a2:61:41:c8:a8:61:37:f5:9c:c8:ec:
a2:18:c6:bc:35:10:48:61:aa:7b:29:7d:df:2e:77:
d6:04:c1:dd:04:4f:2b:e2:10:63:4d:1d:56:dc:27:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6F:3D:04:33:FB:CA:90:D8:27:05:E7:B1:38:63:85:50:04:A8:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b6c31b-9e6a-40fa-8a79-0b8a42d4f219/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b6c31b-9e6a-40fa-8a79-0b8a42d4f219/1/Em89BDP7ypDYJwXnsThjhVAEqDk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216455
Signature Algorithm: sha256WithRSAEncryption
1d:2f:55:d2:08:61:88:57:0a:1f:40:a5:4f:83:6a:4e:c4:af:
40:95:c1:0e:af:b7:40:03:ba:2e:46:8e:c7:55:90:f1:83:8f:
66:eb:76:26:97:38:bc:7f:dd:0a:a2:78:f6:9e:03:8e:01:cd:
3b:f8:8b:3e:e0:02:7b:ab:2c:3a:e1:a3:80:4d:b3:84:42:97:
4d:fa:a9:87:d7:4b:ad:1b:c5:9d:b9:98:e2:7a:18:7c:6b:9a:
1f:79:2e:6f:d4:c3:bd:c8:eb:68:10:1a:8d:e3:c3:b4:44:9e:
d3:54:55:b0:9f:0b:a3:44:e2:e2:16:a5:d4:14:ed:8e:2f:61:
7a:d8:9e:98:8e:96:01:48:f3:4c:e4:9d:ad:a4:11:2f:bb:71:
91:ec:59:bf:62:ef:ce:e2:d4:d9:ad:0d:7b:bb:00:68:ef:05:
60:0e:20:43:2d:2d:11:0d:ad:fb:83:a9:73:e3:e7:87:91:6c:
9a:89:c2:4c:52:aa:ce:80:15:67:d3:f3:2b:78:4b:b3:ff:2f:
c1:16:96:2f:2e:23:ad:2d:9a:dd:3f:9f:4e:aa:03:98:2d:32:
9d:8a:14:9d:4d:72:c7:c5:df:d0:09:9f:10:52:d9:5a:d4:08:
bf:8f:f1:a5:e1:81:fc:87:30:d0:5f:d9:ec:4e:b4:bd:18:eb:
6f:f8:fa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:19 2025 by rpki-client