Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/coRB8Q8hjUBzH20obbTQzDTjoUU.cer
File: coRB8Q8hjUBzH20obbTQzDTjoUU.cer (raw, json)
Hash identifier: m1lLJQzOxJKJebDX7gYjyrNIbeG0eKyoH3AB8Kiz6Ec=
Subject key identifier: 72:84:41:F1:0F:21:8D:40:73:1F:6D:28:6D:B4:D0:CC:34:E3:A1:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9DD3806ED8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/4e597d-e575-4062-9e82-49abfa1dac19/1/coRB8Q8hjUBzH20obbTQzDTjoUU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/4e597d-e575-4062-9e82-49abfa1dac19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:55:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 51889
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677858275032 (0x9dd3806ed8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:55:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=728441f10f218d40731f6d286db4d0cc34e3a145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:e0:ea:86:29:48:82:67:2e:3b:7f:b5:0b:
d0:ef:04:4e:3a:41:b2:bf:8f:f6:42:c4:f8:33:10:
97:d3:f6:f4:80:a7:16:df:82:bf:55:d6:0a:fe:db:
8b:58:12:96:27:f9:4a:1d:25:e1:a6:6e:db:64:1d:
81:41:4f:6c:6b:66:e0:7c:db:09:fe:d6:93:1b:46:
4c:5b:f7:c8:6f:8f:f9:66:86:e8:90:38:f7:64:73:
86:41:82:c2:ed:0c:bb:f4:05:00:77:cb:83:2c:f3:
d4:5e:63:58:db:39:94:a7:d4:78:b2:ff:ec:b9:81:
a3:19:7c:54:36:a9:1b:e2:ec:0d:cd:4b:fa:f3:5d:
df:9c:5f:3a:00:22:69:9f:1c:8c:63:67:2d:d6:88:
92:92:ac:3c:40:11:00:dd:1a:2d:9c:cd:29:c0:16:
60:6e:05:8a:c6:6c:93:84:f1:b2:12:9a:00:d5:fd:
67:1b:58:7e:3e:2f:ae:47:c7:29:62:1d:c2:13:79:
21:8d:39:e4:e6:f5:c4:bc:fc:ae:0c:59:7d:9c:00:
46:41:30:e1:15:6e:8e:bb:e5:ae:ed:16:5b:4d:d3:
7e:e0:51:08:b0:7d:9e:b1:52:33:cf:ba:de:ef:e9:
a6:97:35:90:fc:06:fc:08:85:bd:56:f3:59:61:cb:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:84:41:F1:0F:21:8D:40:73:1F:6D:28:6D:B4:D0:CC:34:E3:A1:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4e597d-e575-4062-9e82-49abfa1dac19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4e597d-e575-4062-9e82-49abfa1dac19/1/coRB8Q8hjUBzH20obbTQzDTjoUU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51889
Signature Algorithm: sha256WithRSAEncryption
1d:c4:bb:53:c3:25:69:86:b5:78:ea:cf:a6:a1:b8:a5:f9:16:
40:58:43:94:63:56:0c:43:07:cd:cb:0d:56:64:c3:75:68:f2:
94:92:d4:e0:9b:f9:9d:d1:85:3c:b4:1f:16:a9:9b:8f:e0:c7:
3f:16:cf:53:74:6e:37:0d:12:02:18:65:f4:ee:7e:11:95:ad:
15:d0:1b:14:42:c4:da:ff:b2:15:1b:33:41:c6:43:47:ad:8e:
f9:c6:44:23:4a:bd:6b:ec:11:50:2f:fa:8e:d0:5f:c8:03:7c:
9a:53:a9:17:51:88:00:83:03:9b:51:09:a4:6c:e0:66:4b:b1:
f7:7f:d4:d4:4d:cf:6e:db:70:4f:b6:b6:79:db:72:e6:2c:91:
71:ca:61:00:ed:c3:1a:5e:ff:36:6b:81:0e:66:56:55:70:71:
3b:4a:bc:2d:e3:19:d2:71:9a:72:1c:f0:d4:03:28:e4:f0:fe:
95:98:01:24:cf:65:92:a7:62:c8:25:a0:ff:a1:b2:a4:e9:bc:
8c:48:b4:34:8a:50:dd:5a:f3:af:0e:83:83:ff:36:05:40:7d:
ee:3e:78:51:a0:d0:04:bf:bb:2a:45:0a:88:e0:85:2c:37:91:
55:16:48:f6:70:1c:6f:72:5e:cf:c2:f8:48:44:5f:7a:5b:03:
70:08:75:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:12 2025 by rpki-client