Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LV2M6w8lbbccupX0Gu7XCZmh3HY.cer
File: LV2M6w8lbbccupX0Gu7XCZmh3HY.cer (raw, json)
Hash identifier: vzywaMLCCHOSLMG8DcAfduNl6teCO0OD3L4PokXkIoQ=
Subject key identifier: 2D:5D:8C:EB:0F:25:6D:B7:1C:BA:95:F4:1A:EE:D7:09:99:A1:DC:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01875230118464DF3F712C38B9BC94ED6FC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/20386d-7724-4a27-98f8-75cb0555ec35/1/LV2M6w8lbbccupX0Gu7XCZmh3HY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/20386d-7724-4a27-98f8-75cb0555ec35/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Apr 2023 16:11:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 209658
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:30:11:84:64:df:3f:71:2c:38:b9:bc:94:ed:6f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 5 16:11:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d5d8ceb0f256db71cba95f41aeed70999a1dc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:ac:d0:f1:46:8a:7b:62:e9:f2:fd:16:0c:
95:89:10:6e:d2:d9:1d:61:05:17:e4:62:ef:ff:87:
95:0b:09:0d:23:c0:43:76:28:47:f2:9f:e6:c7:b4:
86:4a:54:20:a0:72:32:8e:d1:96:88:c2:b3:d4:3a:
9e:1e:cf:a6:28:89:84:03:59:53:de:f9:20:2d:64:
e1:aa:99:bd:b8:5c:86:6b:24:3f:ea:74:6d:42:70:
5a:67:1b:12:b9:16:77:89:73:2e:ee:f1:d2:44:3e:
de:9f:68:e4:82:e0:85:ac:f4:6e:e0:0a:37:93:e0:
ff:c3:fa:47:4d:7f:72:ba:ad:42:96:6c:e0:0d:43:
d8:a4:10:e2:ee:21:7b:be:fe:1b:0c:2e:7c:49:a8:
6c:d7:09:27:15:8d:84:b7:f3:65:02:63:61:35:49:
7f:c2:94:12:8b:59:4d:a8:1f:11:28:b2:3d:ec:39:
d0:93:85:68:5d:ca:8d:a5:f0:d8:89:95:7b:ce:9b:
70:8a:4c:73:e0:b0:00:bc:b5:69:7f:d0:c6:3d:50:
2f:e6:10:57:30:f0:b7:6c:67:21:8e:9f:9d:05:59:
1b:d3:69:98:c8:1c:e0:91:5b:b8:83:96:ef:fd:1e:
3b:bb:a2:a9:1d:fb:cb:28:3f:14:22:71:56:e1:e5:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5D:8C:EB:0F:25:6D:B7:1C:BA:95:F4:1A:EE:D7:09:99:A1:DC:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/20386d-7724-4a27-98f8-75cb0555ec35/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/20386d-7724-4a27-98f8-75cb0555ec35/1/LV2M6w8lbbccupX0Gu7XCZmh3HY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209658
Signature Algorithm: sha256WithRSAEncryption
71:87:c7:68:b2:a5:b9:7a:f0:97:43:ed:d5:f0:13:3a:75:22:
40:ff:2c:b5:d4:17:0e:eb:7c:1e:70:38:82:80:ad:84:f5:b9:
bb:24:c3:83:e0:95:ec:5e:65:c4:27:9a:1c:ad:2e:a0:b5:e3:
82:34:8c:47:e8:ce:0f:f0:e7:b5:9e:f4:5c:e4:58:98:54:62:
6e:9e:81:6b:cf:74:75:9a:e0:8c:a5:bc:ca:15:eb:07:39:da:
c0:9f:82:c0:50:ca:0f:02:77:8a:35:e4:59:d6:af:2a:c5:0e:
2f:4f:46:04:7a:f9:26:1a:a2:1a:2a:ce:24:dc:db:83:97:bd:
03:2b:cc:d3:b1:e1:cb:f4:63:3a:02:b3:a4:45:86:4b:2c:6d:
70:ec:d2:95:4a:d1:e2:7c:2a:22:88:b1:37:04:71:6d:77:ea:
55:27:b8:86:35:6d:0a:ea:01:40:ad:f9:2d:16:f6:10:21:be:
ef:c6:dd:74:ea:2a:dc:80:bd:6c:c7:b8:78:62:c4:80:1a:75:
9f:dd:ed:c4:4c:d4:d4:35:88:b3:18:80:1e:99:dc:a6:6a:cc:
70:d3:e3:29:9c:9e:10:8f:a0:80:3e:aa:3f:39:ce:35:74:30:
6e:0d:de:96:68:7d:39:3a:b7:13:b9:09:68:a1:38:4b:87:0e:
96:2d:eb:50
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYdSMBGEZN8/cSw4ubyU7W/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNDA1MTYxMTM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDVkOGNlYjBmMjU2ZGI3MWNiYTk1ZjQxYWVlZDcwOTk5YTFkYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yms0PFGinti6fL9FgyViRBu0tkd
YQUX5GLv/4eVCwkNI8BDdihH8p/mx7SGSlQgoHIyjtGWiMKz1DqeHs+mKImEA1lT
3vkgLWThqpm9uFyGayQ/6nRtQnBaZxsSuRZ3iXMu7vHSRD7en2jkguCFrPRu4Ao3
k+D/w/pHTX9yuq1ClmzgDUPYpBDi7iF7vv4bDC58Sahs1wknFY2Et/NlAmNhNUl/
wpQSi1lNqB8RKLI97DnQk4VoXcqNpfDYiZV7zptwikxz4LAAvLVpf9DGPVAv5hBX
MPC3bGchjp+dBVkb02mYyBzgkVu4g5bv/R47u6KpHfvLKD8UInFW4eWQxQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFC1djOsPJW23HLqV9Bru1wmZodx2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzIwMzg2
ZC03NzI0LTRhMjctOThmOC03NWNiMDU1NWVjMzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvMjAzODZk
LTc3MjQtNGEyNy05OGY4LTc1Y2IwNTU1ZWMzNS8xL0xWMk02dzhsYmJjY3VwWDBH
dTdYQ1ptaDNIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMy+jANBgkqhkiG9w0BAQsFAAOCAQEAcYfHaLKluXrw
l0Pt1fATOnUiQP8stdQXDut8HnA4goCthPW5uyTDg+CV7F5lxCeaHK0uoLXjgjSM
R+jOD/DntZ70XORYmFRibp6Ba890dZrgjKW8yhXrBznawJ+CwFDKDwJ3ijXkWdav
KsUOL09GBHr5JhqiGirOJNzbg5e9AyvM07Hhy/RjOgKzpEWGSyxtcOzSlUrR4nwq
IoixNwRxbXfqVSe4hjVtCuoBQK35LRb2ECG+78bddOoq3IC9bMe4eGLEgBp1n93t
xEzU1DWIsxiAHpncpmrMcNPjKZyeEI+ggD6qPznONXQwbg3elmh9OTq3E7kJaKE4
S4cOli3rUA==
-----END CERTIFICATE-----
Generated at Tue Apr 15 00:03:59 2025 by rpki-client