Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I2nfoq3MfGYPzTh2F_aG7_GRxww.cer
File: I2nfoq3MfGYPzTh2F_aG7_GRxww.cer (raw, json)
Hash identifier: xmmbeQIdMQE2YB6lf58YnRhCeU79waSWAP6t2DYPATE=
Subject key identifier: 23:69:DF:A2:AD:CC:7C:66:0F:CD:38:76:17:F6:86:EF:F1:91:C7:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AD55061FEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/af734c-ea87-411d-b625-e4f2221ca0be/1/I2nfoq3MfGYPzTh2F_aG7_GRxww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/af734c-ea87-411d-b625-e4f2221ca0be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 13 Feb 2022 22:17:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 208529
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744455806955 (0xad55061feb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 22:17:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2369dfa2adcc7c660fcd387617f686eff191c70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:bc:11:94:58:a9:29:75:2a:5a:34:20:49:
0b:e4:59:50:74:7a:17:26:ae:ab:4f:e2:e7:57:64:
01:06:c8:24:9b:96:d9:63:79:7b:c2:13:27:86:e7:
6f:df:30:8c:df:cd:ca:5d:8f:8d:b1:d6:20:c8:fb:
4e:5e:e4:9b:ba:4a:17:b4:2a:ac:74:d0:19:7a:d6:
3e:f6:bb:00:ff:c3:08:36:36:b4:31:80:f9:65:d1:
c3:01:71:b8:a8:cb:1b:97:62:bc:50:92:f7:26:33:
ba:17:ae:c6:0e:44:71:e2:88:80:20:e3:0b:96:5a:
04:34:ca:a3:63:b1:99:53:0f:d4:b2:36:b7:07:be:
05:17:ab:22:2e:63:3c:f9:d6:f7:cf:df:43:8f:29:
a3:e7:eb:4c:c6:ba:94:3f:9f:3a:4f:c8:66:c9:d6:
4f:36:5a:f2:5b:f6:93:cb:a7:ed:a3:08:62:a4:1d:
1d:19:d5:c5:a7:1a:6b:ba:11:b9:ed:19:48:21:a7:
03:7b:d5:d0:49:ae:68:28:d8:18:d9:ff:d1:55:5c:
a9:5c:bc:3d:ed:25:38:df:4c:3c:04:f2:bc:ee:d3:
28:5c:e6:2e:a9:d8:93:b2:75:3c:90:94:e5:35:b4:
b8:cc:ae:cb:67:0a:a5:ef:b1:10:7b:d4:73:8c:e1:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:DF:A2:AD:CC:7C:66:0F:CD:38:76:17:F6:86:EF:F1:91:C7:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/af734c-ea87-411d-b625-e4f2221ca0be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/af734c-ea87-411d-b625-e4f2221ca0be/1/I2nfoq3MfGYPzTh2F_aG7_GRxww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208529
Signature Algorithm: sha256WithRSAEncryption
46:4e:2c:ed:80:b7:82:31:44:cd:13:ea:dd:31:9d:f4:a3:9a:
90:43:52:93:35:b1:a7:f8:f7:3f:a0:a9:ff:10:23:12:17:e0:
0e:ee:c9:cf:13:b3:ad:dd:2e:a4:64:4e:72:5b:8f:3f:90:d1:
48:89:ec:dc:2b:8a:12:3e:95:e4:f9:45:1e:7f:b4:bb:51:5d:
7e:16:64:3f:a1:f7:65:48:f4:03:5c:3b:54:2e:bf:50:e7:7f:
01:9a:84:41:ce:58:6f:8c:66:ca:50:2a:21:9f:d9:e7:0d:93:
dd:59:ed:f4:f7:70:e4:b8:b7:22:22:56:ff:1b:b4:50:f5:73:
2e:ae:c9:14:52:f4:48:fc:b0:69:04:c0:44:88:9a:f5:69:7e:
01:85:be:ef:d1:63:34:ac:cb:b4:03:af:4c:e8:b9:84:b7:92:
a9:36:ea:e8:86:d3:de:a2:e0:d4:44:97:54:f6:ae:02:e2:2a:
b8:14:d8:6c:c5:3f:fb:d0:19:d5:ec:c8:a9:94:d0:df:6d:47:
6a:60:b1:e4:0e:f0:a0:49:b1:5a:83:f4:60:a8:03:d3:f8:5a:
f2:d9:ee:10:90:5f:e0:8b:86:b5:66:40:09:72:c5:63:02:d1:
0e:df:9c:ae:48:93:d7:36:a9:66:2a:6c:13:d0:bb:84:0a:d9:
2a:04:07:de
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAK1VBh/rMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MjEzMjIxNzU5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyMzY5ZGZhMmFk
Y2M3YzY2MGZjZDM4NzYxN2Y2ODZlZmYxOTFjNzBjMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAysO8EZRYqSl1Klo0IEkL5FlQdHoXJq6rT+LnV2QBBsgk
m5bZY3l7whMnhudv3zCM383KXY+NsdYgyPtOXuSbukoXtCqsdNAZetY+9rsA/8MI
Nja0MYD5ZdHDAXG4qMsbl2K8UJL3JjO6F67GDkRx4oiAIOMLlloENMqjY7GZUw/U
sja3B74FF6siLmM8+db3z99Djymj5+tMxrqUP586T8hmydZPNlryW/aTy6ftowhi
pB0dGdXFpxpruhG57RlIIacDe9XQSa5oKNgY2f/RVVypXLw97SU430w8BPK87tMo
XOYuqdiTsnU8kJTlNbS4zK7LZwql77EQe9RzjOHitwIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFCNp36KtzHxmD804dhf2hu/xkccMMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2FmNzM0Yy1lYTg3LTQxMWQt
YjYyNS1lNGYyMjIxY2EwYmUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYWY3MzRjLWVhODctNDExZC1i
NjI1LWU0ZjIyMjFjYTBiZS8xL0kybmZvcTNNZkdZUHpUaDJGX2FHN19HUnh3dy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMukTANBgkqhkiG9w0BAQsFAAOCAQEARk4s7YC3gjFEzRPq3TGd9KOakENS
kzWxp/j3P6Cp/xAjEhfgDu7JzxOzrd0upGROcluPP5DRSIns3CuKEj6V5PlFHn+0
u1FdfhZkP6H3ZUj0A1w7VC6/UOd/AZqEQc5Yb4xmylAqIZ/Z5w2T3Vnt9Pdw5Li3
IiJW/xu0UPVzLq7JFFL0SPywaQTARIia9Wl+AYW+79FjNKzLtAOvTOi5hLeSqTbq
6IbT3qLg1ESXVPauAuIquBTYbMU/+9AZ1ezIqZTQ321HamCx5A7woEmxWoP0YKgD
0/ha8tnuEJBf4IuGtWZACXLFYwLRDt+crkiT1zapZipsE9C7hArZKgQH3g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:27 2025 by rpki-client