Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X1qzX2t4uN4Vz18IKsnDN5zwhPM.cer
File: X1qzX2t4uN4Vz18IKsnDN5zwhPM.cer (raw, json)
Hash identifier: Q6mtwOaXDFzBE1mLVTUO5uROfxJGP8L9G6CfFSr37Ds=
Subject key identifier: 5F:5A:B3:5F:6B:78:B8:DE:15:CF:5F:08:2A:C9:C3:37:9C:F0:84:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E6555E3AAD109E887666C5FCB596C62
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/795c5d-4883-493b-9ca2-3d3ff2b0a40a/1/X1qzX2t4uN4Vz18IKsnDN5zwhPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/795c5d-4883-493b-9ca2-3d3ff2b0a40a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 213001
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:55:e3:aa:d1:09:e8:87:66:6c:5f:cb:59:6c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f5ab35f6b78b8de15cf5f082ac9c3379cf084f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:f7:ba:1d:78:a7:d4:f3:50:ff:69:be:81:
c3:f7:dd:7e:8b:c0:0c:b7:35:96:6d:47:8c:02:2f:
83:de:23:a9:90:a2:9d:b0:6c:d4:60:67:9f:30:6c:
74:fd:45:3c:95:84:58:c1:77:54:9b:3d:0b:8a:d9:
ff:f6:c6:18:80:a8:43:cb:8b:1a:6c:62:3c:6f:ff:
ac:fd:a6:e1:c6:df:f0:68:b7:f2:33:ec:eb:8f:db:
df:38:d8:a0:e8:a4:6b:13:6d:54:6f:35:66:11:51:
be:c4:73:24:99:5b:57:43:3a:55:a1:3f:18:7f:13:
6d:59:13:9a:6d:2d:a6:88:8f:2f:69:02:55:45:8d:
42:4e:f1:3d:4b:96:ff:bd:56:ea:94:4b:69:bd:da:
3f:17:dc:05:3c:90:01:72:0b:68:6c:b9:96:05:37:
76:5f:fa:b0:a3:4d:a7:da:80:60:d9:4f:1b:74:2f:
d2:58:54:c7:3f:e5:12:8c:46:7c:bc:5a:28:1f:b6:
5c:48:49:79:d7:56:a0:06:b9:7f:fa:e0:07:5d:76:
f3:02:f4:05:b9:a4:43:bc:d1:56:09:94:da:9a:91:
33:68:92:ab:5d:94:42:50:97:f2:81:9a:ff:26:fd:
06:19:d3:50:e7:d1:12:83:ca:60:fb:34:0c:06:e3:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5A:B3:5F:6B:78:B8:DE:15:CF:5F:08:2A:C9:C3:37:9C:F0:84:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/795c5d-4883-493b-9ca2-3d3ff2b0a40a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/795c5d-4883-493b-9ca2-3d3ff2b0a40a/1/X1qzX2t4uN4Vz18IKsnDN5zwhPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213001
Signature Algorithm: sha256WithRSAEncryption
7d:7a:21:14:82:f7:6b:87:bf:08:7d:3f:95:99:0a:85:96:58:
85:03:47:99:f7:d9:04:78:a9:4f:d7:8d:43:a5:aa:54:ec:6d:
ad:e8:22:28:fb:b0:d6:8d:31:43:a7:1f:d4:a1:27:bb:06:1e:
29:c8:a0:8d:d4:74:a8:d1:a4:20:df:a3:47:29:6f:36:84:78:
89:93:ef:d1:86:f9:db:91:39:b6:71:ec:17:72:0e:a6:ff:4f:
76:4f:04:ab:15:5b:4c:a5:5f:b8:31:b8:bb:13:e4:20:23:84:
4d:15:19:9f:74:08:6a:10:32:dd:df:6c:ad:83:5f:ef:94:7e:
a4:a7:08:d2:14:0e:94:da:d1:0d:f2:cb:b8:d2:46:be:c8:48:
81:5d:f6:41:8b:75:9a:81:7f:a7:d6:ba:49:95:df:0a:d9:e4:
fb:c3:1c:93:e6:c7:97:f9:8f:2a:f5:7a:eb:ca:8d:5e:88:f2:
f1:8b:81:03:46:3a:2c:c4:b3:27:db:2d:13:82:87:3c:8a:a9:
4b:f0:64:d6:18:40:46:4e:e4:ed:68:cb:79:ae:d3:d6:51:50:
d5:1e:66:df:b7:59:d8:92:a3:8a:03:d5:43:a5:16:c3:c8:e0:
e0:57:7e:dd:2d:a3:12:a2:f7:f6:69:bb:57:a1:91:e7:2e:08:
31:65:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:13 2025 by rpki-client