Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IuX-9ND8pDdYv5V3YVI_j5rg_2M.cer
File: IuX-9ND8pDdYv5V3YVI_j5rg_2M.cer (raw, json)
Hash identifier: /PJ7bSZyXTUByiktwtc/dFMYlSW6hS6fRCa5veVFL9o=
Subject key identifier: 22:E5:FE:F4:D0:FC:A4:37:58:BF:95:77:61:52:3F:8F:9A:E0:FF:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AEBCAC8700
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/e7e330-e498-49fe-8087-afb08f836dc8/1/IuX-9ND8pDdYv5V3YVI_j5rg_2M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/e7e330-e498-49fe-8087-afb08f836dc8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 16 Mar 2022 15:44:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 207556
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750489732864 (0xaebcac8700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 16 15:44:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22e5fef4d0fca43758bf957761523f8f9ae0ff63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:6b:6d:82:f4:41:8d:04:73:0e:80:56:73:
1e:6d:f5:b5:cd:d0:8b:fc:07:6d:84:b9:cf:06:cc:
d9:1f:36:61:b1:a9:d6:4a:e9:8f:74:1d:c9:50:ee:
f9:91:64:be:96:8f:b0:57:82:db:4f:e5:bb:da:75:
e4:df:0f:51:2a:73:17:3b:a2:d2:bc:da:60:27:dd:
86:e1:ea:bb:91:09:4b:00:8e:a4:b2:98:c0:31:03:
10:d3:4a:22:80:ee:92:33:a4:56:0a:65:d3:a0:c6:
0e:be:a7:2a:2d:80:0b:fc:da:99:b8:37:66:ad:e1:
3c:32:4e:59:a0:e3:47:de:3f:2a:54:66:5a:70:92:
d3:77:60:be:eb:1c:b5:9d:70:96:1a:df:a5:49:f8:
82:ba:1d:78:ae:8d:fb:0c:9a:c7:81:d3:f6:d3:be:
5c:15:9d:8d:b7:08:89:0b:a6:3a:af:f2:c7:40:7d:
69:d9:39:fa:42:b6:d5:34:08:82:da:de:65:6f:fd:
d9:2d:ed:d1:6a:89:30:78:42:0d:28:ac:a4:f2:f9:
0a:46:ce:32:6c:76:76:b2:05:a3:25:37:5b:cc:36:
29:78:0a:60:61:39:f3:6c:76:c8:da:d2:f9:71:86:
34:ba:87:5f:66:08:76:fe:c7:c3:33:da:f2:3e:65:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E5:FE:F4:D0:FC:A4:37:58:BF:95:77:61:52:3F:8F:9A:E0:FF:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e7e330-e498-49fe-8087-afb08f836dc8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e7e330-e498-49fe-8087-afb08f836dc8/1/IuX-9ND8pDdYv5V3YVI_j5rg_2M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207556
Signature Algorithm: sha256WithRSAEncryption
a9:32:b6:f2:a5:ce:bd:a0:07:2b:f0:a2:e6:e8:4a:c9:c9:55:
7e:b2:ca:84:f9:4e:04:9d:08:fa:d0:c3:27:91:8e:08:b4:3f:
b2:e9:b4:fc:94:27:d5:da:71:14:e8:1f:96:a2:36:36:73:a8:
0a:a9:ab:aa:c1:07:fd:0a:33:ea:bf:d3:e0:9d:17:ab:b6:67:
22:02:1b:9d:1b:04:4c:e7:0b:7f:36:53:39:18:61:c9:87:d5:
72:2b:51:6a:76:51:f2:98:64:c7:0b:d7:b0:ba:6a:13:0a:b8:
0e:48:a7:67:61:b3:2e:25:3a:c4:ea:ce:12:6c:79:fe:4e:87:
a1:54:52:4f:35:27:d5:17:39:50:98:5d:10:d0:66:fa:2c:96:
34:19:1b:51:71:78:e1:c7:72:d0:86:98:16:77:6d:b4:14:df:
64:05:b7:cd:c6:05:32:32:94:b5:63:d1:d1:49:8d:44:a0:38:
a9:00:e9:56:ef:2b:a4:49:c7:01:54:3c:14:f3:77:55:c2:88:
12:fa:59:3d:f1:92:48:da:41:7f:43:3f:47:5c:e8:21:63:ab:
19:f7:93:d4:91:31:b7:4b:75:86:36:90:73:7c:56:9a:92:1b:
72:e0:a8:e7:0f:c6:49:e7:ca:60:38:c1:1e:fb:9a:f1:ab:77:
a7:6a:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:36 2025 by rpki-client