Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R6G0vORKLHvJ74WjOkK6rRBOV7Q.cer
File: R6G0vORKLHvJ74WjOkK6rRBOV7Q.cer (raw, json)
Hash identifier: /LfGVmetqKX2iwqNR+jq7TtLblprHlKuLwt3epGczxg=
Subject key identifier: 47:A1:B4:BC:E4:4A:2C:7B:C9:EF:85:A3:3A:42:BA:AD:10:4E:57:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B340E4D2FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/385214-80ca-479e-98b9-0eb03b6ac701/1/R6G0vORKLHvJ74WjOkK6rRBOV7Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/385214-80ca-479e-98b9-0eb03b6ac701/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Jun 2022 11:17:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 208121
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769887884029 (0xb340e4d2fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 16 11:17:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47a1b4bce44a2c7bc9ef85a33a42baad104e57b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:3d:82:b0:85:8a:06:9c:bc:f2:ac:a5:dc:
70:18:44:57:4f:fe:03:e4:86:92:e5:7c:a5:6e:e3:
2b:cf:a2:75:29:60:93:20:46:d3:fb:f3:dd:ac:c5:
9f:22:5b:1a:7b:3b:e9:20:64:42:6d:94:b4:62:bc:
9a:08:b6:d6:48:a0:8f:ef:f8:bd:d2:d0:ce:61:a4:
00:2f:dd:4c:42:72:b0:af:66:73:5e:2f:59:d7:a9:
9a:dc:24:bb:32:01:75:f6:b8:2c:0c:64:07:29:ce:
b1:4d:d3:fa:7e:42:77:cb:9e:97:1b:90:1f:9d:89:
49:28:14:33:29:04:83:68:8f:35:da:ac:4b:93:d9:
49:8e:13:4a:17:60:8f:9f:5d:ca:f2:52:18:d7:1c:
4b:66:9f:1b:6f:fd:ff:2c:dd:66:1d:09:24:37:4e:
c5:b3:d3:d6:45:d7:8a:31:bc:57:22:87:18:aa:c1:
79:ed:c2:dd:69:73:22:ea:4a:1b:19:0c:32:06:48:
fc:dc:8e:a6:33:58:80:1f:4b:33:b9:f6:c3:f8:30:
f4:43:ad:a3:8f:c3:e7:87:b6:b2:3e:d8:56:0f:ab:
48:d3:08:43:a3:32:43:a1:8a:a3:15:07:ea:8d:6c:
54:f1:a6:cd:cb:00:b7:3e:2c:d4:2b:2e:f0:99:3f:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A1:B4:BC:E4:4A:2C:7B:C9:EF:85:A3:3A:42:BA:AD:10:4E:57:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/385214-80ca-479e-98b9-0eb03b6ac701/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/385214-80ca-479e-98b9-0eb03b6ac701/1/R6G0vORKLHvJ74WjOkK6rRBOV7Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208121
Signature Algorithm: sha256WithRSAEncryption
25:6b:ca:2e:fd:00:ee:fd:04:c9:8b:86:bd:33:48:6c:92:e2:
1c:77:51:a5:89:67:db:41:19:67:4d:d6:45:36:c6:d2:31:12:
b0:fa:15:73:ca:96:24:d6:2b:42:84:dd:e5:f1:0d:e3:d7:8d:
4f:8c:64:70:63:5b:12:d5:f9:e8:00:3a:06:18:b4:d6:db:af:
eb:e9:5d:99:40:bb:18:82:89:f7:77:15:96:4d:c4:ff:74:1e:
38:ff:5c:fd:b2:8f:86:80:a6:2f:78:0c:d5:d0:82:89:ef:05:
8f:76:29:e9:75:9a:aa:86:f9:d4:4e:68:b2:58:02:b7:d0:4f:
1b:3e:ac:a6:6a:b7:ae:44:11:f5:d1:67:80:e3:ce:7a:65:f1:
65:f6:a3:91:fc:1d:c7:2a:61:b3:a0:05:64:14:36:00:e5:6d:
69:92:34:85:68:cd:64:ff:c6:79:c0:c2:42:5b:88:34:d8:1b:
d1:d3:c5:7b:69:0b:1b:4d:36:20:2e:5e:03:6b:39:0e:03:06:
b6:0f:a8:45:9a:16:f7:f2:fc:b4:dd:fc:af:06:0c:61:74:0b:
00:e2:4a:10:12:15:06:15:ca:fb:ab:90:5c:07:9a:83:cb:46:
04:ea:de:60:cb:67:27:3b:48:92:01:1d:c6:a8:b2:9c:a2:c0:
43:5c:dc:fd
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGALNA5NL9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NjE2MTExNzMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0N2ExYjRiY2U0
NGEyYzdiYzllZjg1YTMzYTQyYmFhZDEwNGU1N2I0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAvtg9grCFigacvPKspdxwGERXT/4D5IaS5XylbuMrz6J1
KWCTIEbT+/PdrMWfIlsaezvpIGRCbZS0YryaCLbWSKCP7/i90tDOYaQAL91MQnKw
r2ZzXi9Z16ma3CS7MgF19rgsDGQHKc6xTdP6fkJ3y56XG5AfnYlJKBQzKQSDaI81
2qxLk9lJjhNKF2CPn13K8lIY1xxLZp8bb/3/LN1mHQkkN07Fs9PWRdeKMbxXIocY
qsF57cLdaXMi6kobGQwyBkj83I6mM1iAH0szufbD+DD0Q62jj8Pnh7ayPthWD6tI
0whDozJDoYqjFQfqjWxU8abNywC3PizUKy7wmT/eWQIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFEehtLzkSix7ye+FozpCuq0QTle0MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzM4NTIxNC04MGNhLTQ3OWUt
OThiOS0wZWIwM2I2YWM3MDEvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvMzg1MjE0LTgwY2EtNDc5ZS05
OGI5LTBlYjAzYjZhYzcwMS8xL1I2RzB2T1JLTEh2Sjc0V2pPa0s2clJCT1Y3US5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMs+TANBgkqhkiG9w0BAQsFAAOCAQEAJWvKLv0A7v0EyYuGvTNIbJLiHHdR
pYln20EZZ03WRTbG0jESsPoVc8qWJNYrQoTd5fEN49eNT4xkcGNbEtX56AA6Bhi0
1tuv6+ldmUC7GIKJ93cVlk3E/3QeOP9c/bKPhoCmL3gM1dCCie8Fj3Yp6XWaqob5
1E5oslgCt9BPGz6spmq3rkQR9dFngOPOemXxZfajkfwdxyphs6AFZBQ2AOVtaZI0
hWjNZP/GecDCQluINNgb0dPFe2kLG002IC5eA2s5DgMGtg+oRZoW9/L8tN38rwYM
YXQLAOJKEBIVBhXK+6uQXAeag8tGBOreYMtnJztIkgEdxqiynKLAQ1zc/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:24 2024 by rpki-client on console-ams.rpki-client.org