Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ocjx-p6K1V-FbCT1_cgmRGJGIWA.cer
File: Ocjx-p6K1V-FbCT1_cgmRGJGIWA.cer (raw, json)
Hash identifier: vzlAJAoa+YCqahcB8Rzjie27qMbE3wHPAgLUMFQAmSA=
Subject key identifier: 39:C8:F1:FA:9E:8A:D5:5F:85:6C:24:F5:FD:C8:26:44:62:46:21:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DD815ABA9F7A0A0BD74281B4C6C78C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.august.tw/repo/MT/3/39C8F1FA9E8AD55F856C24F5FDC8264462462160.mft
caRepository: rsync://rpki.august.tw/repo/MT/3/
Notify URL: https://rpki.august.tw/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 14:59:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 202881
IP: 2001:67c:2be8::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d8:15:ab:a9:f7:a0:a0:bd:74:28:1b:4c:6c:78:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:59:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39c8f1fa9e8ad55f856c24f5fdc8264462462160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:0f:39:1f:c6:54:91:8c:f5:d6:cc:2e:ab:
50:1e:8b:10:96:fe:33:f9:b8:55:7e:1f:4b:58:de:
5c:5c:7a:e8:ea:e1:ee:a9:88:63:58:81:47:83:a7:
67:4c:b2:c1:db:17:5d:37:cc:8e:89:27:26:ca:d9:
74:4a:54:63:b6:e1:74:65:60:16:49:88:41:3e:cf:
83:46:b6:c1:95:19:7e:16:9d:c9:2f:0b:17:be:c3:
bf:b6:44:0b:64:f8:a8:c6:1d:4f:3c:a1:f2:20:5d:
20:1a:40:e0:55:72:65:46:69:ce:9b:b9:e0:2f:08:
3b:10:52:40:f9:03:08:4f:6b:51:dd:d4:66:6c:50:
88:32:78:30:7f:56:ea:5d:26:0f:73:fb:fb:0d:46:
33:9a:d5:59:5f:47:d5:c7:10:36:78:6b:78:84:62:
23:bb:34:84:7a:b1:b4:09:4f:e0:27:dc:8b:6d:f3:
80:a5:a9:d7:40:4d:a2:8e:af:71:d1:a0:f3:6d:0a:
27:75:1a:bc:81:16:61:d1:10:5d:12:a0:53:d2:16:
a4:4a:e6:47:6d:e3:20:48:7b:c2:8d:da:04:55:e6:
2c:b6:7b:69:ac:53:ff:81:68:dd:60:15:f7:05:90:
35:02:27:ba:1a:07:49:7f:ad:f5:46:4f:b6:28:2d:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C8:F1:FA:9E:8A:D5:5F:85:6C:24:F5:FD:C8:26:44:62:46:21:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.august.tw/repo/MT/3
RPKI Manifest - URI:rsync://rpki.august.tw/repo/MT/3/39C8F1FA9E8AD55F856C24F5FDC8264462462160.mft
RPKI Notify - URI:https://rpki.august.tw/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2be8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202881
Signature Algorithm: sha256WithRSAEncryption
4d:b2:f6:2c:f4:00:4c:20:b2:c0:f0:6c:52:e3:cd:9a:dd:65:
52:f6:fe:fe:5a:e8:28:1b:b8:21:f4:cd:c6:04:e6:d4:63:7f:
f1:60:5c:16:d1:ff:17:94:1d:c3:2b:40:e4:4d:3a:cb:95:43:
0d:76:61:3e:4b:bb:3d:30:1e:5f:29:9d:39:27:c4:1a:4a:b8:
56:9f:d4:5d:bb:fd:b9:2c:96:5f:88:0a:01:6f:0e:ec:9c:f7:
9c:d1:a3:89:23:1a:5a:4d:cb:eb:4d:1d:bc:ae:64:39:9a:86:
b8:80:bc:bf:10:7a:35:87:61:45:a6:01:2c:b2:83:83:ef:0e:
58:7e:c9:ad:c5:69:ab:c5:1e:75:78:c7:a5:fe:ce:21:d7:78:
27:69:0a:28:79:1f:ab:50:20:85:76:a3:5f:56:6c:00:74:09:
32:f6:d4:ad:5d:65:fe:2f:ca:53:aa:89:56:40:12:c4:d7:bb:
85:3a:ca:e3:d5:f2:fd:c6:84:05:20:4e:3a:66:47:64:18:40:
18:07:fb:c5:89:c6:82:a9:51:4f:be:fc:fb:b6:20:dd:eb:dc:
64:01:9e:ca:0a:80:f6:7e:79:67:b0:1b:12:90:ed:80:0a:7f:
c9:b3:5e:3a:31:ba:a4:00:9e:d5:5d:c3:1e:03:52:0e:6f:3c:
37:0f:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:51:43 2025 by rpki-client