
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/detN26w5nW4F4CtG-Rhkyb3oJgU.cer
File: detN26w5nW4F4CtG-Rhkyb3oJgU.cer (raw, json)
Hash identifier: QgCyOZ12TQUvnoyfSgd1uipYrfvSu398JLkcPsEBo3M=
Subject key identifier: 75:EB:4D:DB:AC:39:9D:6E:05:E0:2B:46:F9:18:64:C9:BD:E8:26:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187E198E22895A2788A4BFF227334938E99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/865974-fcb5-4407-9fde-5d1113692d6f/1/detN26w5nW4F4CtG-Rhkyb3oJgU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/865974-fcb5-4407-9fde-5d1113692d6f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 May 2023 12:31:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 198689
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:98:e2:28:95:a2:78:8a:4b:ff:22:73:34:93:8e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 3 12:31:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75eb4ddbac399d6e05e02b46f91864c9bde82605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:68:69:93:0d:5d:56:0e:af:d9:24:a5:d7:
cb:8c:fd:87:4b:ca:3d:28:83:8b:b6:6e:c3:6a:71:
65:39:db:23:90:ca:1d:6c:39:0f:61:8b:83:76:35:
11:15:c9:3b:bf:34:53:2f:ca:87:9b:8b:c9:39:17:
42:8c:3c:4b:71:06:e0:1a:dd:58:b8:bd:3c:bf:8a:
2f:87:56:12:ca:fb:e1:b5:08:7e:e9:43:ed:31:ad:
46:35:78:1d:28:90:60:94:d1:82:60:b7:21:d2:23:
30:e9:0e:0f:73:1b:1c:1e:d6:ab:86:4c:f1:61:ce:
01:36:00:84:9a:5e:b7:9c:86:83:10:91:33:bc:9b:
3a:12:64:16:dd:9c:27:de:61:ad:28:3b:e8:9c:3b:
1d:6a:5b:fb:fb:07:b9:98:c7:cc:8f:4d:70:62:83:
a6:6e:67:62:c8:37:4f:04:a4:82:e8:5f:1a:6f:09:
15:53:08:04:b5:57:50:7f:db:cd:3a:d7:7a:5a:aa:
0b:27:dc:e9:27:2d:52:c1:31:b3:fe:c8:72:c6:e6:
7f:3c:38:6e:d1:41:2b:e5:27:f9:09:b2:ec:f3:bf:
07:09:29:03:93:21:27:f2:18:e6:b0:f0:79:44:dc:
b9:66:16:1c:79:49:2f:7c:27:fa:bc:d3:e0:7b:47:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:4D:DB:AC:39:9D:6E:05:E0:2B:46:F9:18:64:C9:BD:E8:26:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/865974-fcb5-4407-9fde-5d1113692d6f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/865974-fcb5-4407-9fde-5d1113692d6f/1/detN26w5nW4F4CtG-Rhkyb3oJgU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198689
Signature Algorithm: sha256WithRSAEncryption
94:23:dc:04:5d:97:77:c5:d8:1b:a7:71:1f:02:e6:1d:2f:97:
a9:e4:ef:36:6c:a6:a9:af:54:30:08:71:62:71:9e:85:14:a4:
22:31:4a:9f:6e:cd:a6:00:57:e0:89:31:6b:bc:b5:3c:f1:70:
3e:28:39:f3:c8:b2:07:36:66:38:f9:b4:e5:fd:39:4f:b7:59:
b6:91:13:c1:24:cb:95:47:a4:b2:81:b0:3f:92:b0:e8:1d:0e:
f9:a9:e3:1a:03:c8:8d:9d:42:a8:52:7a:b9:e6:6a:56:bc:51:
bc:56:25:28:86:ad:01:ac:30:72:40:f3:ad:ca:e5:3e:9a:08:
40:e0:a0:62:0e:6f:80:43:41:4e:3f:85:92:a2:e5:31:e8:11:
59:87:f3:f9:c8:73:82:03:96:d1:c9:52:9d:b4:db:63:4d:59:
ba:a5:18:a7:d4:0d:57:f5:49:2b:ff:26:a2:fa:f6:6e:0d:c9:
38:73:72:69:d7:2b:19:21:95:a3:4f:ec:77:c4:d2:27:8c:5f:
a4:3f:28:e8:f0:65:1a:e3:dd:40:7b:f3:c6:d7:af:50:d4:39:
56:5d:08:6c:81:c9:86:32:1d:63:99:83:c7:bf:ca:6c:c3:6d:
25:a0:10:d7:cb:1a:7d:c3:98:cb:fa:7a:12:cb:8d:1a:2e:0d:
71:96:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:01:49 2025 by rpki-client