Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VUq3nF5YaxFdh90YvpKDbKcQYew.cer
File: VUq3nF5YaxFdh90YvpKDbKcQYew.cer (raw, json)
Hash identifier: aCcE4KNCF5OHxOnGpU96myYgYBOhsS3kY230rPYh2nY=
Subject key identifier: 55:4A:B7:9C:5E:58:6B:11:5D:87:DD:18:BE:92:83:6C:A7:10:61:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E190705ECEF612886DB0E2F54F169
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/66c660-3692-42e9-b902-eecc62f78769/1/VUq3nF5YaxFdh90YvpKDbKcQYew.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/66c660-3692-42e9-b902-eecc62f78769/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 205603
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:19:07:05:ec:ef:61:28:86:db:0e:2f:54:f1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=554ab79c5e586b115d87dd18be92836ca71061ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:0c:98:77:2f:77:39:b4:0c:3f:d9:9c:4b:
6b:e0:47:42:4f:25:11:49:10:2f:9f:5f:c7:3a:7f:
ae:a7:33:43:a5:01:c6:37:8c:e1:46:2b:56:61:e6:
64:00:02:be:82:6f:04:72:56:d4:b6:af:b7:22:59:
91:db:b7:c3:72:eb:8f:db:a1:94:74:b5:ad:40:6b:
c5:68:ca:6c:4a:23:43:31:6d:9f:e1:3a:3e:23:ba:
6f:31:3e:a8:3c:1c:d9:25:0b:5e:a9:49:75:bc:25:
82:84:d7:ef:bc:cd:23:a0:38:43:d3:64:6b:43:ae:
d2:c7:cf:ef:b9:b0:97:20:d8:03:7d:44:0c:fa:cf:
59:26:e4:d8:28:fd:19:81:37:e3:9f:38:cb:e0:67:
53:c3:a5:1a:53:fc:4d:36:03:a2:6d:f1:be:93:89:
ab:8b:5c:2b:9a:84:91:7c:c2:2c:00:91:db:01:4c:
ff:40:7c:ec:ef:d2:7c:a9:95:36:51:45:b0:f4:d1:
38:da:d8:31:d2:9b:0b:7a:31:a4:45:95:bc:37:27:
40:f9:22:7a:ea:da:5f:1a:7b:ab:54:0e:9e:8b:6e:
06:4b:e3:21:11:1a:2b:66:71:b1:f7:63:c0:d4:e0:
b7:c4:4d:1c:a8:82:da:db:7c:a0:f5:85:3d:7c:e1:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4A:B7:9C:5E:58:6B:11:5D:87:DD:18:BE:92:83:6C:A7:10:61:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/66c660-3692-42e9-b902-eecc62f78769/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/66c660-3692-42e9-b902-eecc62f78769/1/VUq3nF5YaxFdh90YvpKDbKcQYew.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205603
Signature Algorithm: sha256WithRSAEncryption
70:c0:3f:17:01:42:8e:dc:83:fa:1a:9c:63:a9:26:85:85:57:
71:98:b9:af:e9:1c:80:3a:3a:6a:fa:c5:59:d9:3a:37:fa:b2:
16:95:d6:2c:19:1d:cd:6e:2b:85:0b:e3:67:75:f8:b1:9f:0b:
c9:45:75:21:23:a3:46:87:bf:e1:cb:ca:c9:76:37:76:4c:3d:
28:63:cd:67:95:fc:9e:42:19:91:a8:20:67:71:3e:6e:3b:50:
35:55:fc:0f:a4:81:a4:3e:3d:c7:ee:00:13:cf:db:60:02:24:
c8:87:e4:d5:11:89:08:56:48:cb:96:1a:94:43:57:86:ea:ea:
c2:10:12:61:84:e6:31:9c:f9:a9:c6:4e:67:bb:41:9a:2a:a0:
3a:a3:13:b0:82:5a:a3:a5:3e:4d:63:a7:a7:a3:4f:a5:73:87:
27:91:97:17:55:73:3b:c1:5f:86:89:65:ff:bd:db:cb:06:fc:
89:1f:cc:af:cd:99:14:a2:1d:3b:04:ba:42:73:69:08:37:8a:
54:5f:21:e8:16:f2:0d:63:61:90:6a:21:c0:b5:f8:ed:ec:63:
be:ba:68:fd:0c:36:d3:d8:2c:c5:7b:e9:08:4b:a5:b0:f5:c1:
04:26:66:62:45:c3:0b:e9:51:54:d6:30:86:78:2a:11:03:3b:
7e:f7:d8:a7
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVwHhkHBezvYSiG2w4vVPFpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDEzNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTRhYjc5YzVlNTg2YjExNWQ4N2RkMThiZTkyODM2Y2E3MTA2MWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL8MmHcvdzm0DD/ZnEtr4EdCTyUR
SRAvn1/HOn+upzNDpQHGN4zhRitWYeZkAAK+gm8EclbUtq+3IlmR27fDcuuP26GU
dLWtQGvFaMpsSiNDMW2f4To+I7pvMT6oPBzZJQteqUl1vCWChNfvvM0joDhD02Rr
Q67Sx8/vubCXINgDfUQM+s9ZJuTYKP0ZgTfjnzjL4GdTw6UaU/xNNgOibfG+k4mr
i1wrmoSRfMIsAJHbAUz/QHzs79J8qZU2UUWw9NE42tgx0psLejGkRZW8NydA+SJ6
6tpfGnurVA6ei24GS+MhERorZnGx92PA1OC3xE0cqILa23yg9YU9fOEWewIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFFVKt5xeWGsRXYfdGL6Sg2ynEGHsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1LzY2YzY2
MC0zNjkyLTQyZTktYjkwMi1lZWNjNjJmNzg3NjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvNjZjNjYw
LTM2OTItNDJlOS1iOTAyLWVlY2M2MmY3ODc2OS8xL1ZVcTNuRjVZYXhGZGg5MFl2
cEtEYktjUVlldy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMjIzANBgkqhkiG9w0BAQsFAAOCAQEAcMA/FwFCjtyD
+hqcY6kmhYVXcZi5r+kcgDo6avrFWdk6N/qyFpXWLBkdzW4rhQvjZ3X4sZ8LyUV1
ISOjRoe/4cvKyXY3dkw9KGPNZ5X8nkIZkaggZ3E+bjtQNVX8D6SBpD49x+4AE8/b
YAIkyIfk1RGJCFZIy5YalENXhurqwhASYYTmMZz5qcZOZ7tBmiqgOqMTsIJao6U+
TWOnp6NPpXOHJ5GXF1VzO8Ffholl/73bywb8iR/Mr82ZFKIdOwS6QnNpCDeKVF8h
6BbyDWNhkGohwLX47exjvrpo/Qw209gsxXvpCEulsPXBBCZmYkXDC+lRVNYwhngq
EQM7fvfYpw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:33 2025 by rpki-client