Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JUnSJRfAJaU25hogYIwEYSvLx48.cer
File: JUnSJRfAJaU25hogYIwEYSvLx48.cer (raw, json)
Hash identifier: NxYmOzydEU9scldE3deHRZMSH8gZ7bcXNO6cGJ2ML8M=
Subject key identifier: 25:49:D2:25:17:C0:25:A5:36:E6:1A:20:60:8C:04:61:2B:CB:C7:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A86F5DA1BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/3d0ab0-8775-42b0-b151-4c3261d03b62/1/JUnSJRfAJaU25hogYIwEYSvLx48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/3d0ab0-8775-42b0-b151-4c3261d03b62/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:59:08 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 56746
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723422912958 (0xa86f5da1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2549d22517c025a536e61a20608c04612bcbc78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:20:40:b1:8c:e4:2a:5c:e5:cd:d6:e2:77:
9a:56:c3:97:5d:54:15:c2:a3:06:f7:ab:e1:55:24:
35:db:e2:d8:3d:65:62:e3:98:58:af:2d:ef:41:8b:
3c:66:3e:bd:36:95:40:90:18:fe:55:5a:27:a4:59:
ed:b4:8b:8d:9b:4d:1c:e4:79:1e:d2:f2:6e:5b:fb:
bd:37:f5:71:34:ca:06:5f:3d:a0:97:0c:07:d9:5f:
34:77:92:d7:f0:53:d3:11:c7:d6:4b:7d:90:65:98:
c8:35:03:be:99:40:87:b1:9f:1c:5e:75:92:49:7d:
1f:16:87:06:e2:99:ee:e3:32:e4:e0:90:73:6e:8d:
7a:72:1d:27:f2:f5:ae:bd:b7:f7:9e:69:85:ea:9f:
07:67:0f:a0:64:f0:50:2b:95:fd:df:13:17:f3:d6:
2c:fa:9f:47:0e:77:48:08:dd:fe:b9:54:1f:f5:77:
35:36:5f:3b:d4:d0:a5:0e:35:4c:dc:53:9e:23:8b:
ff:15:f9:ba:e2:73:e8:e3:a6:b5:e5:00:69:da:3f:
b6:fc:ff:d9:2e:c3:2e:99:93:60:ea:c3:87:78:a3:
09:4a:ca:78:2f:c8:ca:8e:08:61:7f:31:04:5c:d6:
6a:de:07:8e:d4:a9:0d:7d:22:c3:61:df:d5:fe:4d:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:49:D2:25:17:C0:25:A5:36:E6:1A:20:60:8C:04:61:2B:CB:C7:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3d0ab0-8775-42b0-b151-4c3261d03b62/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3d0ab0-8775-42b0-b151-4c3261d03b62/1/JUnSJRfAJaU25hogYIwEYSvLx48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56746
Signature Algorithm: sha256WithRSAEncryption
9c:d3:74:7f:38:96:01:0a:8a:b5:35:fc:f2:ec:9b:f1:41:30:
2c:96:ad:cc:d3:a4:66:b7:71:86:fd:37:6f:d2:0e:6c:fa:93:
8e:15:59:3f:95:8f:70:53:b7:41:b1:4a:c8:bb:1a:3a:89:ee:
70:67:3e:31:1f:cb:4f:32:74:fd:2f:b0:0e:d6:5a:7b:4d:c2:
3a:81:7e:c0:a3:d1:f9:6c:ad:26:b5:74:3a:bb:96:47:c4:9f:
cf:b4:84:53:8b:7c:d9:c4:65:ca:97:74:61:db:dd:c6:df:da:
b5:75:9a:f0:39:0b:74:55:95:86:93:30:24:99:79:b1:dd:ed:
e9:4a:41:5d:1a:43:e2:b0:f0:fa:37:16:0b:70:c5:16:95:b2:
43:d6:b4:27:c2:8e:e7:fb:cf:fc:86:42:08:15:43:4e:ab:d3:
be:35:13:90:74:6b:4a:cb:9c:fd:da:ef:71:0a:9b:a1:32:af:
76:50:3d:0b:3f:30:6e:3d:75:49:64:3a:bd:b7:9f:f5:77:b8:
e5:3f:36:93:91:34:ba:8d:2c:e6:4c:97:37:da:78:9d:f8:a0:
f6:47:ae:c3:f4:35:73:ff:27:46:00:0e:ed:17:d5:a2:38:30:
c4:88:7b:6e:7c:06:94:98:66:54:15:b0:b7:7d:1f:29:54:75:
0c:4e:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:42:03 2025 by rpki-client