Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bEmLG_yVW8ZXtsw35AQsASh8kos.cer
File: bEmLG_yVW8ZXtsw35AQsASh8kos.cer (raw, json)
Hash identifier: vuDinRBYW44IrzYeM4skgSbPlSnHxZEf/HY6P6pb6MI=
Subject key identifier: 6C:49:8B:1B:FC:95:5B:C6:57:B6:CC:37:E4:04:2C:01:28:7C:92:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F5B0EF939B9BD40A9AA0FC438F4B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/aa551d-a023-49c5-967f-6439a8783884/1/bEmLG_yVW8ZXtsw35AQsASh8kos.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/aa551d-a023-49c5-967f-6439a8783884/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 210973
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:5b:0e:f9:39:b9:bd:40:a9:aa:0f:c4:38:f4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c498b1bfc955bc657b6cc37e4042c01287c928b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:e6:63:f2:57:0b:97:06:bf:fc:da:d7:72:
7a:36:49:d1:41:88:19:97:97:a2:6c:99:79:51:e5:
c1:b7:a3:b4:c5:6a:2f:37:66:a3:2e:ac:83:d5:21:
04:73:a1:6f:fb:53:d9:a2:c3:60:05:09:75:7c:22:
98:40:13:20:4a:95:21:f6:d4:ba:db:d0:27:16:6b:
cd:6b:2b:13:bf:92:4d:09:1b:ec:82:54:15:09:56:
d8:dc:d0:91:b8:91:69:0e:a1:28:0c:58:aa:bb:b8:
e2:74:a8:d5:34:cd:62:cc:6c:47:8a:bf:09:00:1e:
07:99:6a:03:a8:54:63:35:d9:ed:78:77:0b:a0:23:
f6:4c:0b:c6:1a:dd:48:82:1a:bb:2e:9a:81:9d:f3:
e1:3f:c4:0e:e9:ca:74:c0:3e:3d:83:d9:dc:d0:17:
8b:03:4d:97:ef:31:f6:36:20:67:06:6b:84:d6:07:
bb:23:27:9e:c0:2a:65:36:51:0c:b3:3d:1a:7e:ec:
bd:e2:44:0b:da:75:70:0e:95:4e:69:f0:65:48:6f:
78:1d:15:28:46:2c:2b:f9:97:54:ef:95:b4:d5:f6:
4f:2a:ad:18:0d:5d:f2:d3:4c:47:66:01:6e:b6:8b:
7d:9d:8a:da:2a:0a:5b:fa:38:5d:45:c2:ef:ab:e5:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:49:8B:1B:FC:95:5B:C6:57:B6:CC:37:E4:04:2C:01:28:7C:92:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aa551d-a023-49c5-967f-6439a8783884/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aa551d-a023-49c5-967f-6439a8783884/1/bEmLG_yVW8ZXtsw35AQsASh8kos.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210973
Signature Algorithm: sha256WithRSAEncryption
0e:45:06:20:6a:18:e8:7f:c6:8f:56:70:04:81:f8:86:5d:56:
3c:f3:be:ae:77:e0:d1:bd:51:67:00:c5:57:52:43:56:f2:d0:
81:97:34:41:77:59:f2:7b:75:b9:b1:78:00:92:29:f0:18:2b:
3d:e4:5f:c8:13:ac:ab:8c:42:2a:a0:77:8e:e3:90:a8:36:50:
36:62:69:75:2f:9a:91:0f:16:5b:a9:b1:51:f5:b2:a4:3a:d6:
e0:5b:73:75:4d:59:9d:65:aa:be:ff:16:bd:42:4e:05:a6:ed:
01:f6:c7:82:e4:18:43:86:be:1e:ee:a7:fa:20:75:b5:76:17:
e5:3e:1f:f9:c4:c6:70:6d:43:f8:da:78:f1:04:02:d9:a8:b4:
f1:ad:37:58:5b:70:38:06:5e:63:c2:aa:77:29:34:2e:b6:e8:
6a:45:08:92:7b:bb:62:a4:a5:65:42:ff:31:c1:b3:8e:ac:54:
3f:ac:84:29:8b:6c:36:d3:ed:c2:21:78:04:01:25:ee:bb:fd:
07:c6:54:e2:bd:df:19:22:f6:dc:24:bd:ab:38:c9:b6:6c:d8:
77:03:18:67:a4:b3:94:0e:7b:27:99:00:6a:0a:54:e0:5e:24:
87:37:ac:6d:16:b2:3d:9b:3f:42:d2:d1:c0:11:da:26:f9:77:
1b:01:9e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:31:55 2025 by rpki-client