Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dbxuyguSSMPjmCHeWjbyFZOYv5c.cer
File: dbxuyguSSMPjmCHeWjbyFZOYv5c.cer (raw, json)
Hash identifier: /VJw3IDTiJ+xeXRUJGUp3pKp6hKCEjJvM2/VBKCkohU=
Subject key identifier: 75:BC:6E:CA:0B:92:48:C3:E3:98:21:DE:5A:36:F2:15:93:98:BF:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA3D3A69EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/dbxuyguSSMPjmCHeWjbyFZOYv5c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:06:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34539
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731171678698 (0xaa3d3a69ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:06:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75bc6eca0b9248c3e39821de5a36f2159398bf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:b2:6d:9c:81:18:bf:e6:88:34:e5:01:d9:
5b:41:7d:86:93:2d:db:12:27:77:18:69:db:63:26:
da:dd:b1:62:9f:f3:85:89:66:60:5d:e1:2a:91:b1:
53:08:42:09:9a:4d:0d:9d:12:31:88:67:46:ed:b0:
42:1d:3e:98:f7:04:c4:62:5d:c3:2b:91:c4:a6:53:
ea:7e:f6:5f:cf:2e:2b:7e:db:6f:cb:59:09:fe:10:
e6:03:2e:45:b5:c9:36:e7:08:7a:18:eb:84:d5:24:
3c:d1:d8:73:2a:d1:ea:8f:03:15:c7:65:48:90:0d:
b2:1c:20:3d:48:dd:53:f6:b8:16:3f:02:56:e8:da:
23:11:d9:80:92:9d:d3:b9:42:e2:d6:62:54:34:2d:
e1:ad:26:58:ba:25:e9:03:5b:bf:62:d5:d9:9b:a2:
9a:49:da:45:ae:d4:ef:49:a8:c9:58:28:82:0c:51:
d1:9e:5c:d9:64:2a:5a:ee:1d:65:6e:7a:cb:3f:6d:
25:2c:4a:4e:2e:b8:f8:65:51:a5:6a:47:1e:71:31:
4d:9f:c2:4d:e9:53:5f:0e:c9:39:f4:17:92:df:0b:
7a:14:54:db:75:9c:f4:05:dd:67:ee:64:fb:c6:58:
9f:56:ec:c5:eb:71:d8:e7:5a:87:e8:14:0e:34:2c:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BC:6E:CA:0B:92:48:C3:E3:98:21:DE:5A:36:F2:15:93:98:BF:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/dbxuyguSSMPjmCHeWjbyFZOYv5c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34539
Signature Algorithm: sha256WithRSAEncryption
83:14:e5:5f:29:a2:b2:52:0d:eb:39:23:c8:48:98:43:07:e4:
78:82:94:44:e7:be:4b:38:7c:ae:d9:fa:91:90:d3:31:ae:6c:
31:74:4a:b4:09:ee:03:b2:a0:54:af:f6:4b:68:70:c6:55:c3:
10:94:d0:c0:e6:dd:75:bf:2e:55:07:0e:0b:2a:87:52:14:5b:
89:d5:99:87:23:9c:f4:42:41:1c:69:c2:45:e2:72:51:c4:04:
ef:d1:5c:3c:f5:14:5d:42:19:bf:ce:48:94:3f:f9:86:2a:b0:
e4:bd:38:4f:aa:65:9c:14:84:84:80:16:18:08:b3:39:bd:cc:
ff:8d:79:c8:a8:fd:9f:d0:01:4e:e7:3a:92:bb:ea:37:6e:f8:
ae:80:25:bb:b3:06:1b:b3:74:e4:44:6f:89:56:45:42:48:cd:
89:20:03:9d:93:c4:0b:c8:c2:7c:41:06:4d:05:b1:fd:fb:58:
1e:d3:e9:17:83:27:13:aa:fb:17:a8:74:fb:68:05:7c:35:19:
ee:82:37:ad:a8:fe:9d:db:24:41:d8:77:81:6f:04:e8:45:c4:
92:ce:99:e2:38:c2:d2:2e:1c:bf:4b:07:0f:4c:1e:be:aa:50:
e2:29:bf:e8:87:30:5b:2b:b4:82:a8:99:90:02:95:a3:78:67:
1a:7d:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:55:07 2025 by rpki-client