Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dauS63iL-FVXQ3S1G4eRzdGJbgw.cer
File: dauS63iL-FVXQ3S1G4eRzdGJbgw.cer (raw, json)
Hash identifier: PNhJ8Oi8uD2VTDSo0e/6Cbh/XsUVKSwLztK73EGVGSc=
Subject key identifier: 75:AB:92:EB:78:8B:F8:55:57:43:74:B5:1B:87:91:CD:D1:89:6E:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01831279D847B5710ABE66EDB6BF5B04CB82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/13/75AB92EB788BF855574374B51B8791CDD1896E0C.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/13/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 06 Sep 2022 11:05:18 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 203105
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:79:d8:47:b5:71:0a:be:66:ed:b6:bf:5b:04:cb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 6 11:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75ab92eb788bf855574374b51b8791cdd1896e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:51:13:c7:0a:ff:a3:d0:d0:26:e9:76:7c:
38:5c:74:92:16:b8:10:2a:19:cf:ad:f4:46:7b:85:
43:eb:8e:9c:e6:38:6a:2d:d3:71:1b:bc:f8:60:d5:
15:fa:cb:c4:b7:db:4e:40:35:22:90:4d:fd:3c:10:
60:77:79:06:6f:6d:d1:48:dc:89:4e:b7:02:7a:81:
f7:77:79:92:07:61:6e:1e:63:ab:5d:21:bf:a6:2b:
dc:b5:89:47:ad:53:fc:de:a5:62:6d:37:1b:8d:4e:
cc:a9:da:69:eb:77:7c:d3:8b:a4:56:01:bf:39:bd:
86:29:dc:27:4e:de:d2:b1:51:26:3d:24:85:d6:2e:
32:31:55:95:62:26:3d:9c:1d:3f:94:73:d0:47:e9:
c8:29:68:f7:ca:3f:df:58:fb:e9:3a:f1:64:3e:c7:
ff:48:2c:43:5a:43:03:62:93:4f:47:f7:75:58:1b:
8a:55:cd:a3:e3:52:da:1b:5a:c5:fc:3e:31:70:b1:
da:95:ca:89:ba:bf:8c:77:41:25:4f:bf:ba:01:e8:
ca:bb:4a:68:c2:15:e4:54:59:ef:18:7a:8e:ae:27:
7e:b6:f6:cd:b4:c2:89:fb:69:09:68:4d:61:73:d9:
e4:20:73:7a:6e:75:75:39:db:1d:22:ce:c0:0e:dd:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AB:92:EB:78:8B:F8:55:57:43:74:B5:1B:87:91:CD:D1:89:6E:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/13
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/13/75AB92EB788BF855574374B51B8791CDD1896E0C.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203105
Signature Algorithm: sha256WithRSAEncryption
3b:84:dc:56:0c:65:fd:2e:b6:24:20:d6:a3:ab:99:1f:a2:73:
c8:d6:a0:5d:b5:e6:90:19:bd:5f:36:48:65:93:79:d8:c4:1b:
ff:60:97:bf:39:48:01:18:f4:81:f7:a4:08:48:e0:9b:51:a4:
6d:cf:32:39:6e:15:0f:fd:d9:7a:d1:00:0f:f8:78:09:dd:ab:
c7:74:91:71:70:2a:56:b7:a1:99:2a:03:3d:cb:34:c9:9e:ee:
72:97:ae:e7:c7:b7:4e:87:32:0d:54:35:4f:07:2d:10:46:00:
e5:93:20:b1:c3:90:12:ea:d2:c7:be:ce:61:9a:32:70:d9:5b:
57:3f:19:3c:08:48:e3:4f:b4:f5:86:18:0c:a6:d4:63:ec:d7:
62:03:e2:d4:5a:96:a9:88:eb:5e:b2:ff:f8:0c:37:f0:8d:b5:
77:73:fb:1b:4e:00:7b:c0:d6:ce:0b:09:89:62:92:a8:c4:86:
b2:bd:03:8b:d7:ae:3b:73:86:90:d4:90:9e:ca:89:ee:7f:04:
b7:30:08:1d:2a:a1:e9:89:ce:b6:11:8c:9c:00:db:11:82:b9:
eb:e9:c9:12:b0:20:5f:fb:b7:d8:53:f5:c1:e7:af:93:0c:95:
c1:c4:a3:b3:0d:35:10:ff:88:77:0b:7e:f1:e5:66:45:18:e9:
dd:92:ad:ba
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAYMSedhHtXEKvmbttr9bBMuCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIwOTA2MTEwNTE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWFiOTJlYjc4OGJmODU1NTc0Mzc0YjUxYjg3OTFjZGQxODk2ZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW1RE8cK/6PQ0Cbpdnw4XHSSFrgQ
KhnPrfRGe4VD646c5jhqLdNxG7z4YNUV+svEt9tOQDUikE39PBBgd3kGb23RSNyJ
TrcCeoH3d3mSB2FuHmOrXSG/pivctYlHrVP83qVibTcbjU7Mqdpp63d804ukVgG/
Ob2GKdwnTt7SsVEmPSSF1i4yMVWVYiY9nB0/lHPQR+nIKWj3yj/fWPvpOvFkPsf/
SCxDWkMDYpNPR/d1WBuKVc2j41LaG1rF/D4xcLHalcqJur+Md0ElT7+6AejKu0po
whXkVFnvGHqOrid+tvbNtMKJ+2kJaE1hc9nkIHN6bnV1OdsdIs7ADt3HBQIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFHWrkut4i/hVV0N0tRuHkc3RiW4MMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEEBggrBgEFBQcBCwSB9zCB9DBDBggrBgEFBQcwBYY3cnN5
bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vYXMyMDc5NjAtcnBraS1j
YS8xMzBwBggrBgEFBQcwCoZkcnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0
L3JlcG8vYXMyMDc5NjAtcnBraS1jYS8xMy83NUFCOTJFQjc4OEJGODU1NTc0Mzc0
QjUxQjg3OTFDREQxODk2RTBDLm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6Ly9ycGtp
LmFzMjA3OTYwLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBO
oEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9L
cFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxlhMA0GCSqGSIb3DQEB
CwUAA4IBAQA7hNxWDGX9LrYkINajq5kfonPI1qBdteaQGb1fNkhlk3nYxBv/YJe/
OUgBGPSB96QISOCbUaRtzzI5bhUP/dl60QAP+HgJ3avHdJFxcCpWt6GZKgM9yzTJ
nu5yl67nx7dOhzINVDVPBy0QRgDlkyCxw5AS6tLHvs5hmjJw2VtXPxk8CEjjT7T1
hhgMptRj7NdiA+LUWpapiOtesv/4DDfwjbV3c/sbTgB7wNbOCwmJYpKoxIayvQOL
1647c4aQ1JCeyonufwS3MAgdKqHpic62EYycANsRgrnr6ckSsCBf+7fYU/XB56+T
DJXBxKOzDTUQ/4h3C37x5WZFGOndkq26
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:17:50 2025 by rpki-client