Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JiZC6w1h3JwD5HteBVhmDTlR1ZI.cer
File: JiZC6w1h3JwD5HteBVhmDTlR1ZI.cer (raw, json)
Hash identifier: TJQAZXiWWJ6ydh3bFCRea9NgHbXZ7LEVPYTaXfE6BZc=
Subject key identifier: 26:26:42:EB:0D:61:DC:9C:03:E4:7B:5E:05:58:66:0D:39:51:D5:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018995C87ADF4817D28A452079BC81F2FD18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/01d7d1-1807-4261-92f7-4341aaabfff3/1/JiZC6w1h3JwD5HteBVhmDTlR1ZI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/01d7d1-1807-4261-92f7-4341aaabfff3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 27 Jul 2023 05:18:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 197622
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:c8:7a:df:48:17:d2:8a:45:20:79:bc:81:f2:fd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 27 05:18:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=262642eb0d61dc9c03e47b5e0558660d3951d592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:7b:32:93:8b:4b:04:23:6a:c3:a0:cc:9f:
ef:89:9e:f0:3b:2e:95:99:07:b5:a5:10:3d:2a:4e:
26:7f:46:8f:49:a6:b9:47:8e:6b:ae:a0:ba:61:5d:
9e:fd:c8:1a:c2:f3:18:31:8a:ae:e8:34:a6:1b:bf:
21:a7:73:0e:50:27:d0:06:3f:b5:bf:f5:17:4f:61:
6e:dd:d3:0a:ce:fb:27:d5:2d:7d:68:b3:69:b5:85:
ad:55:f1:be:4d:26:0d:cd:18:a0:b0:bd:82:15:49:
d5:18:ed:3b:22:1d:6b:b1:47:4b:da:80:2b:f0:fe:
c0:79:e5:1b:2a:24:0b:57:20:e2:36:7f:0e:62:e0:
82:88:f6:ce:45:74:e0:f0:a6:2c:f8:85:6d:b5:e1:
d4:ba:52:8d:ca:a1:15:6f:03:5c:d2:38:05:89:4d:
fb:7d:b6:89:cb:5b:2b:cd:37:0c:2d:af:7a:c8:d6:
4e:ef:8c:de:44:ca:11:7a:ce:74:36:b3:c3:25:1a:
3a:86:44:d8:03:37:63:00:67:ed:5d:de:bd:7a:6d:
a0:5e:c0:9b:83:dc:d0:61:c5:69:dc:ca:2b:1a:c8:
8c:9f:9e:76:b7:a4:4a:96:e7:9c:00:0e:a4:67:c7:
5b:9d:fe:3d:11:3d:33:a4:ac:0d:73:b2:b2:40:a7:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:26:42:EB:0D:61:DC:9C:03:E4:7B:5E:05:58:66:0D:39:51:D5:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/01d7d1-1807-4261-92f7-4341aaabfff3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/01d7d1-1807-4261-92f7-4341aaabfff3/1/JiZC6w1h3JwD5HteBVhmDTlR1ZI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197622
Signature Algorithm: sha256WithRSAEncryption
25:19:98:71:cb:0d:eb:32:38:2a:ca:1d:03:eb:d7:9c:bc:c0:
b0:58:8a:0d:cf:fa:e4:e6:86:c0:d8:44:1a:af:94:c7:a9:bb:
f6:a7:df:83:28:28:c2:7e:f2:64:6e:1d:c5:ab:7a:94:f7:29:
09:60:21:3a:9c:17:fa:3f:a2:9b:e2:9b:b8:a8:82:a5:f9:ef:
98:e8:ee:1c:9c:a6:e2:34:7e:66:e2:9c:44:1f:d5:00:cb:d4:
5f:34:ac:ec:d9:13:5d:a6:47:ae:02:d6:ea:02:3d:37:9a:e9:
ca:4e:99:1f:c5:06:4e:46:3a:9c:55:75:f0:a1:5b:0a:1e:c9:
1e:52:38:53:6b:f6:87:55:5c:b0:5e:25:71:9a:e0:c8:98:5e:
ad:7f:a3:b7:ab:71:f9:f6:69:64:bb:83:89:24:25:ef:61:a0:
6f:2d:b0:6c:49:38:b9:18:9d:0a:32:bf:5c:92:25:11:47:9b:
47:24:78:04:2e:55:a8:c4:4a:1d:67:9b:56:d9:30:33:e6:99:
d7:ce:85:c6:8e:7f:f1:bb:5f:50:9e:8d:72:1a:da:d0:2b:90:
ef:4d:8f:65:6d:8e:a5:8d:d8:72:e5:6b:b2:4f:28:60:dc:bd:
58:0b:5f:73:75:5d:c1:26:ac:95:8d:15:86:22:ca:a7:59:4e:
a4:3d:0e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:32:58 2025 by rpki-client