Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aQ3JRHUlbpOd45K9xy9Hev_LJO8.cer
File: aQ3JRHUlbpOd45K9xy9Hev_LJO8.cer (raw, json)
Hash identifier: 5mILN0Gjid35cPsXqD6tAoa9+QWY5p0NLjAMaNaZMnU=
Subject key identifier: 69:0D:C9:44:75:25:6E:93:9D:E3:92:BD:C7:2F:47:7A:FF:CB:24:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01836034DC9F9675B5FC676554B2F5AF27DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/2e4b47-680a-4455-9b69-9febec645b6d/1/aQ3JRHUlbpOd45K9xy9Hev_LJO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/2e4b47-680a-4455-9b69-9febec645b6d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 21 Sep 2022 13:20:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 202848
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:34:dc:9f:96:75:b5:fc:67:65:54:b2:f5:af:27:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 21 13:20:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=690dc94475256e939de392bdc72f477affcb24ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:a7:c0:40:ff:5c:ec:18:d2:e6:fd:c2:7f:
f9:0a:c1:79:d5:ff:17:3b:33:eb:a2:6b:cd:13:96:
21:20:7c:ff:3b:33:47:32:68:56:b3:0e:0d:df:4c:
0f:1f:25:0e:c6:08:f7:91:ef:99:39:44:d0:a8:62:
92:95:70:3f:05:ca:c9:53:8f:23:cf:af:c7:44:c1:
88:c6:89:27:92:20:71:db:23:9e:f0:bf:90:26:54:
b4:c9:ab:76:e2:73:aa:b9:09:0f:c7:6e:38:fb:4d:
f1:aa:33:f9:f6:6a:9a:cc:26:f6:1d:d2:f8:37:48:
6d:13:73:a6:08:27:76:2e:72:fa:7a:ef:40:b3:99:
29:68:81:c5:74:ca:66:0b:cd:9b:de:9f:cf:d5:66:
57:cb:58:4e:1d:7a:8a:97:6d:8a:c6:e3:06:b5:7c:
6d:bd:9f:eb:b9:0e:5c:b9:e9:b6:df:bf:65:a5:32:
41:5c:10:1a:ce:cb:aa:79:81:17:d0:d3:b4:ab:80:
f9:89:3a:c0:41:a8:58:30:d4:29:d0:22:b3:2b:0c:
c0:62:e9:fb:17:7d:d3:cd:9a:b2:fa:b5:e4:6b:47:
e6:07:7e:df:b6:69:26:60:00:59:d1:3c:74:72:f7:
90:73:25:99:b8:15:b5:3e:95:d1:28:03:e2:be:d9:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0D:C9:44:75:25:6E:93:9D:E3:92:BD:C7:2F:47:7A:FF:CB:24:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2e4b47-680a-4455-9b69-9febec645b6d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2e4b47-680a-4455-9b69-9febec645b6d/1/aQ3JRHUlbpOd45K9xy9Hev_LJO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202848
Signature Algorithm: sha256WithRSAEncryption
21:d4:64:bf:b7:74:47:bf:64:7f:ee:2e:f1:f2:58:90:1c:6f:
70:61:5b:97:5c:f1:f1:2f:5a:a0:0c:58:21:2d:c7:52:f8:c8:
9b:93:61:2b:f7:c1:57:bb:0b:3a:dc:70:f4:3d:f0:0c:19:61:
94:a1:c1:26:20:6a:99:11:ad:f8:86:91:e3:68:81:cb:28:aa:
76:3c:60:ad:58:14:d0:81:a1:6f:2b:6f:72:d6:20:9d:c7:b8:
87:0a:79:47:5e:87:3d:00:3e:2f:bf:fa:a4:4b:22:c7:5a:f7:
31:ad:c9:a7:e9:ec:ea:ab:b8:a6:54:6a:28:53:f0:d5:e4:af:
ef:9f:ba:0b:37:4f:f2:e1:f8:32:8b:98:7b:73:36:d7:b8:0c:
9f:35:1b:5a:95:85:ed:64:5f:62:40:fd:47:4f:f8:3c:8f:e3:
8b:2e:36:f4:f3:d7:66:2b:ee:fc:19:fb:75:95:de:2c:a8:97:
c3:55:60:80:24:57:51:87:c6:c4:92:04:b3:df:3c:35:37:80:
e9:45:43:8a:5b:2d:76:d0:eb:4e:97:c5:0d:b9:26:8d:0e:f6:
02:24:dd:1e:a2:ab:b4:22:58:fb:6b:62:56:b2:e3:28:00:25:
45:24:0f:97:1b:49:71:02:2f:d6:ac:f1:16:01:a7:55:fb:94:
08:0d:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:17 2025 by rpki-client