Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KLq5DsqMJXdPVS6MVeom7JYVdEA.cer
File: KLq5DsqMJXdPVS6MVeom7JYVdEA.cer (raw, json)
Hash identifier: v2wuaT8jxNMdMPaaxrDivFZhcJ2+/xZtNKfakcNhhBQ=
Subject key identifier: 28:BA:B9:0E:CA:8C:25:77:4F:55:2E:8C:55:EA:26:EC:96:15:74:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01877BD9A3AABAD52BC69A36C1C808B9348A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/66f70d-8975-4b51-a500-87fc27b6ab4b/1/KLq5DsqMJXdPVS6MVeom7JYVdEA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/66f70d-8975-4b51-a500-87fc27b6ab4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 13 Apr 2023 18:21:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 204174
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:d9:a3:aa:ba:d5:2b:c6:9a:36:c1:c8:08:b9:34:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 13 18:21:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28bab90eca8c25774f552e8c55ea26ec96157440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:0a:82:44:9d:11:98:42:76:78:6f:7a:d6:
9c:d1:84:64:f1:73:2a:a8:b2:06:d1:e9:58:c3:fd:
d6:bd:95:80:a9:81:34:29:25:f2:7b:89:ea:35:d3:
73:2b:98:1a:3b:1d:62:9a:d5:37:19:f2:00:11:de:
b6:bb:a1:2f:d5:66:fd:81:b9:00:2b:d0:62:84:e9:
3c:63:ef:a6:e4:dc:bb:a4:19:a3:0d:29:ae:36:1e:
dc:f1:90:eb:c4:5f:35:4c:97:f8:05:a3:d1:ee:1a:
a9:03:4b:28:0b:c6:ad:73:d1:52:c1:16:b8:27:23:
5b:0e:ba:a9:1a:a4:bf:c6:92:84:ec:0a:48:db:11:
81:d1:23:57:5d:f0:d1:2f:a8:32:cb:01:76:37:dc:
65:76:66:90:06:94:f3:65:13:38:d6:21:f2:65:d3:
48:8d:8a:a9:96:59:6b:34:70:7c:9a:90:42:26:aa:
29:96:a7:90:59:60:b1:33:00:74:36:f9:6b:5b:40:
0e:ef:b3:a6:5b:79:30:8c:8f:38:88:b8:b9:44:a5:
d2:18:0d:9d:68:9d:ce:92:a7:bf:c0:9d:a6:31:86:
b3:b3:cf:da:39:07:da:b4:68:2e:c0:20:75:d3:82:
48:50:c1:ce:7b:52:41:fd:4f:07:cf:ac:65:c1:84:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BA:B9:0E:CA:8C:25:77:4F:55:2E:8C:55:EA:26:EC:96:15:74:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/66f70d-8975-4b51-a500-87fc27b6ab4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/66f70d-8975-4b51-a500-87fc27b6ab4b/1/KLq5DsqMJXdPVS6MVeom7JYVdEA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204174
Signature Algorithm: sha256WithRSAEncryption
02:7f:81:ab:1d:8d:a1:22:2e:e0:86:f8:1e:b1:8b:2c:f1:dc:
fa:e3:83:70:75:a0:df:49:4b:b9:66:dc:55:a3:9a:93:54:c0:
63:8a:e7:8e:64:16:ac:c4:c2:78:c9:db:78:4f:4c:36:cd:6a:
b7:98:f9:9f:4d:63:a1:8d:0d:f7:89:91:0e:43:fd:3b:4c:65:
49:7e:a6:3a:55:39:96:5c:40:2f:9e:8c:b1:71:91:d9:a7:30:
f7:30:d4:34:83:77:e5:3e:17:51:5e:22:24:92:e7:ec:e9:68:
9e:b3:61:00:31:3e:ba:4d:24:00:67:45:56:80:77:d7:39:ac:
b3:60:ab:ea:f8:db:fc:e3:c8:82:1a:bd:39:86:ef:33:4f:1f:
e3:27:8f:c3:d9:16:d7:2a:fc:12:45:53:37:70:3a:e5:f1:f1:
50:a5:37:7a:6b:41:0f:43:6e:d3:e6:93:fd:e3:55:88:63:8f:
1a:10:fb:7f:de:52:aa:74:95:f3:35:82:7e:b8:c9:68:d9:86:
50:7a:fc:70:81:38:33:c5:4f:9f:c5:be:1d:ec:b7:73:fe:59:
f8:47:e5:3e:e8:f8:53:72:05:89:ab:e5:cb:24:1e:7a:8e:1b:
62:26:a4:04:c6:42:a8:dd:40:20:f4:fd:2a:45:e5:c7:da:69:
d8:54:85:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:10:21 2025 by rpki-client