Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aTzdgTHon97ap2sFSt2LjQuzvY4.cer
File: aTzdgTHon97ap2sFSt2LjQuzvY4.cer (raw, json)
Hash identifier: gTRdAP4ueoGPNN8MvQPs7Bu+fT6oB/WaZK/KnQ6ucZw=
Subject key identifier: 69:3C:DD:81:31:E8:9F:DE:DA:A7:6B:05:4A:DD:8B:8D:0B:B3:BD:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0186FF0BE3693249B4D1C415A2EB8D79B6F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/f6c39b-94b1-4855-b094-c939f9bdd5eb/1/aTzdgTHon97ap2sFSt2LjQuzvY4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/f6c39b-94b1-4855-b094-c939f9bdd5eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Mar 2023 12:43:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 202151
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:0b:e3:69:32:49:b4:d1:c4:15:a2:eb:8d:79:b6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 12:43:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=693cdd8131e89fdedaa76b054add8b8d0bb3bd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:89:c6:ab:b3:55:60:1f:b1:43:d2:2e:68:
e4:29:20:28:1d:bd:af:41:9f:19:9f:37:91:24:c3:
33:6b:a3:52:03:8f:18:fc:ca:9b:f8:f4:ea:4f:3d:
92:02:55:8a:4d:20:28:b1:69:fd:14:81:72:1b:bc:
f1:10:31:58:70:0d:42:53:77:a3:7b:d4:8d:e5:a8:
7f:7c:97:92:5a:c1:22:5e:4a:66:0b:41:4e:82:1c:
d6:25:43:26:a1:00:fe:39:f2:cb:57:c1:0f:c8:5b:
b6:b6:d5:14:69:af:5a:79:e3:cf:0d:ce:14:2c:d4:
41:e3:ff:c7:fb:de:c4:c3:d0:bb:74:0b:ed:db:d4:
a0:c2:82:50:72:ad:5b:02:64:a5:4d:33:54:35:1e:
55:ab:63:d3:d1:c0:7e:e7:3a:3d:d8:d6:43:ac:d9:
e1:85:63:f1:15:94:a3:87:9a:39:e1:80:e9:e0:66:
bc:d3:4c:49:9a:b1:5c:aa:77:71:61:4e:fd:44:06:
64:7e:9b:56:ff:c2:15:2f:60:a8:61:fe:ca:64:69:
33:e6:fc:32:65:8b:37:71:7a:5e:ed:c5:a6:e4:71:
a1:14:cf:67:fd:e0:af:d3:32:57:9b:2e:02:25:27:
ac:dc:94:27:6c:f5:65:49:4a:a6:bd:64:8d:f1:9d:
9e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3C:DD:81:31:E8:9F:DE:DA:A7:6B:05:4A:DD:8B:8D:0B:B3:BD:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6c39b-94b1-4855-b094-c939f9bdd5eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6c39b-94b1-4855-b094-c939f9bdd5eb/1/aTzdgTHon97ap2sFSt2LjQuzvY4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202151
Signature Algorithm: sha256WithRSAEncryption
49:b0:d6:df:74:18:80:75:83:72:e0:dd:0e:8b:11:a1:d6:68:
e0:69:9b:5e:79:d1:2c:fa:61:cf:b7:43:d9:18:3b:09:14:e5:
e2:58:43:67:ad:11:c6:2e:94:2d:90:f5:11:17:a7:7a:17:16:
d4:4e:64:d7:ab:20:5f:d1:65:aa:01:2b:e0:ad:31:86:ad:33:
04:ec:65:b0:de:4f:9a:95:83:29:e9:6c:da:44:34:95:fb:87:
00:00:ed:48:e6:d5:a3:6e:cf:02:c5:89:9a:38:aa:0a:f4:56:
dd:45:1f:a7:a9:31:79:ed:39:fa:79:e3:15:95:9f:46:b3:52:
ad:be:38:d5:9e:8c:1e:31:b0:c9:fc:36:85:b1:9f:a0:fc:43:
4a:32:09:47:36:26:ac:58:2c:87:38:a6:37:7f:7c:8d:44:2e:
f7:aa:b1:27:60:2a:16:50:57:9a:fa:0d:d8:1b:2d:5f:5a:64:
2e:11:58:b4:01:bb:a3:5a:aa:bf:5d:6b:d4:85:8c:21:9c:52:
76:d6:8c:40:a0:e3:6d:98:a6:50:b3:8b:8d:1f:04:b2:92:22:
13:52:db:87:98:68:d5:6c:e1:d9:08:32:f8:19:73:f7:bb:e0:
60:d2:99:35:3d:0a:d9:bb:3c:b2:1d:1f:24:26:03:a2:fd:c5:
8d:5d:7d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:51 2025 by rpki-client