Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZAWQE-7dPY_rfrnNRxgYOyMj9gc.cer
File: ZAWQE-7dPY_rfrnNRxgYOyMj9gc.cer (raw, json)
Hash identifier: sze9wbhRuUkMKIoP3tOYtFm78z8AFIxvuWltEExK7mU=
Subject key identifier: 64:05:90:13:EE:DD:3D:8F:EB:7E:B9:CD:47:18:18:3B:23:23:F6:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0189888D8D83FAB0E4414832C439454F2609
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/9f43dc-5159-4b44-b9db-1e8fdbae642c/1/ZAWQE-7dPY_rfrnNRxgYOyMj9gc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/9f43dc-5159-4b44-b9db-1e8fdbae642c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Jul 2023 15:38:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 197622
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:8d:8d:83:fa:b0:e4:41:48:32:c4:39:45:4f:26:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 24 15:38:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64059013eedd3d8feb7eb9cd4718183b2323f607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:2f:58:67:1a:0a:52:a5:86:b3:8f:18:96:
15:32:f6:e4:35:bf:8e:09:2b:91:31:fd:6c:e9:b7:
24:83:e8:e5:9d:d9:8e:4f:59:3d:0b:c5:3c:19:e8:
17:ce:49:2e:bc:56:7f:37:0b:70:33:96:2a:78:63:
04:78:f1:67:74:95:e2:34:fb:d1:45:52:f4:6b:15:
4f:f4:a9:4d:11:3a:d4:0e:9e:73:c3:cf:f6:3c:e0:
ec:7b:2d:6d:24:7e:5f:ce:95:d1:4e:aa:3c:5e:8d:
ef:c3:68:f2:6b:1a:a3:0e:b5:d5:e9:bc:f9:7e:4b:
c2:9e:f2:44:12:b5:a5:d3:f7:21:2e:7e:a4:6c:66:
94:46:dd:dd:e0:00:29:a5:95:b1:7c:ee:82:5e:8f:
53:b6:95:f3:20:4e:30:c8:10:fc:d2:a0:cb:85:ec:
98:c1:d4:16:d5:bb:6d:05:73:09:2e:58:8a:4d:d1:
e4:48:78:34:01:48:cf:c3:11:70:84:5c:25:20:8f:
bd:94:5c:f1:7b:70:59:80:5e:c8:f4:35:52:d5:57:
a5:a8:ce:53:da:19:30:ea:15:a5:ec:80:bf:bb:c2:
c0:4e:c4:a6:e7:bb:5e:b8:77:a5:f1:44:70:1e:c0:
06:91:07:1b:5d:ac:ca:f0:e2:2b:8c:e7:ab:34:82:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:05:90:13:EE:DD:3D:8F:EB:7E:B9:CD:47:18:18:3B:23:23:F6:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9f43dc-5159-4b44-b9db-1e8fdbae642c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9f43dc-5159-4b44-b9db-1e8fdbae642c/1/ZAWQE-7dPY_rfrnNRxgYOyMj9gc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197622
Signature Algorithm: sha256WithRSAEncryption
53:32:86:b0:5e:b0:b3:f5:a1:da:c3:86:9a:5c:a4:73:9d:60:
0b:fc:21:5a:d2:47:a4:67:88:01:66:92:61:bc:f0:7f:5b:58:
74:9a:d0:23:8e:8b:85:92:40:30:bd:9a:6e:8a:2e:dd:4e:9e:
d6:02:51:bd:59:80:2d:df:b2:d8:2a:f8:ec:aa:26:3e:6c:a6:
44:64:e2:6d:bd:9a:3c:b2:0a:b6:f6:75:17:68:94:b5:d7:a1:
51:48:09:2e:3e:4a:59:41:b8:4e:45:a7:f4:a7:fe:6d:62:3c:
85:02:b6:c3:fc:83:51:01:83:b6:ab:5a:63:52:de:3e:58:7d:
cd:ed:fd:8f:98:82:04:06:4a:e0:9d:1b:95:8d:c5:36:16:24:
fe:4d:b3:17:e0:2e:6e:e0:f9:a1:a5:43:a0:01:74:30:fc:77:
eb:27:dc:ba:33:da:a3:2e:bf:1b:67:f1:00:06:46:57:d3:d8:
a8:84:0f:f0:cc:0c:1e:6f:a6:4f:24:25:37:74:30:57:70:ca:
1f:5a:e7:6d:dd:08:8d:8d:3c:19:26:65:ec:38:cd:25:46:3c:
3c:67:89:a0:5f:54:09:2f:29:47:a5:b2:f4:f0:cb:b0:5c:30:
33:61:8c:b4:91:2f:49:e0:73:f5:bd:cb:86:ad:6f:9a:26:d1:
3e:d1:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:37:47 2025 by rpki-client