Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4rssvSH33eHPMwmrFP2zywp82k.cer
File: e4rssvSH33eHPMwmrFP2zywp82k.cer (raw, json)
Hash identifier: aDJOWbp6r4OdNC79X4XM5VcE/nX3QVKBDSIfeMI3P50=
Subject key identifier: 7B:8A:EC:B2:F4:87:DF:77:87:3C:CC:26:AC:53:F6:CF:2C:29:F3:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD6CA406EFA36A01BDBFCD2B31E2F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/c1ad5c-4121-471d-8daa-8c630ccafc18/1/e4rssvSH33eHPMwmrFP2zywp82k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/c1ad5c-4121-471d-8daa-8c630ccafc18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:33:03 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 212348
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:6c:a4:06:ef:a3:6a:01:bd:bf:cd:2b:31:e2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:33:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b8aecb2f487df77873ccc26ac53f6cf2c29f369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:27:a8:27:dc:0b:af:be:5c:ec:b5:23:09:
01:09:91:8a:2c:df:c2:7c:6d:23:21:27:d0:8f:f9:
1e:1f:20:20:95:a7:19:dd:d6:d0:7d:54:82:f7:0d:
9f:c0:a5:e4:73:f3:20:e8:29:37:14:dd:b5:ad:d8:
64:b1:79:bb:82:43:8d:f2:56:34:a3:f2:20:c8:ef:
9d:d3:aa:49:c1:d7:e5:ee:74:a3:c7:ad:50:b7:89:
4f:18:9b:15:5a:cd:9a:f7:33:de:31:00:c0:7b:20:
28:9d:4c:b6:e2:ae:f7:0e:6d:9d:33:6c:95:92:72:
eb:d7:97:d5:f4:6f:a9:4b:22:db:7b:97:2f:bf:39:
8a:04:95:71:06:eb:b7:94:56:b7:11:58:93:1e:a0:
2c:b5:51:4b:f0:d9:aa:ed:47:9c:6d:3f:ca:fa:1e:
64:9a:94:cd:e7:a1:bd:1c:27:a4:31:58:91:9a:35:
72:6f:b4:a1:57:f0:8e:9b:68:52:ba:39:97:aa:48:
47:c7:8f:b5:88:f5:03:ba:72:3e:61:ea:fc:7b:5b:
b2:b0:9f:9c:f9:f5:bf:c9:0c:98:38:39:b8:be:38:
3a:02:91:14:a0:6e:05:8b:67:0e:0c:ba:16:48:2a:
7f:0c:22:40:08:dc:7a:aa:14:a8:81:e0:a8:3e:df:
16:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8A:EC:B2:F4:87:DF:77:87:3C:CC:26:AC:53:F6:CF:2C:29:F3:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c1ad5c-4121-471d-8daa-8c630ccafc18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c1ad5c-4121-471d-8daa-8c630ccafc18/1/e4rssvSH33eHPMwmrFP2zywp82k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212348
Signature Algorithm: sha256WithRSAEncryption
17:86:24:07:28:49:f1:d6:87:51:e1:05:12:b8:8a:3d:0f:63:
f7:ed:9e:ce:e7:ea:93:1c:22:56:3c:ad:17:36:85:a3:28:dc:
de:bd:13:19:ef:4d:31:de:cd:09:43:c6:47:d7:a5:ad:3c:24:
5e:55:30:60:c1:66:21:a2:eb:6c:54:71:8f:d9:1b:17:a1:d2:
76:84:66:4b:d4:cc:76:8a:0c:7e:0f:74:cb:85:51:4d:2f:85:
1d:a4:09:25:37:b4:ba:1a:06:65:80:1a:58:61:72:ee:cd:59:
be:a7:24:61:c5:15:19:2b:21:48:ba:c5:3a:8b:ff:51:f7:d2:
32:23:3d:3e:4a:77:c2:92:c4:ec:48:b3:88:5c:3f:87:65:ef:
10:2f:7f:da:55:86:1f:45:99:83:53:ba:f1:af:83:ff:dc:00:
8e:a4:7f:2f:63:36:83:c9:41:fd:43:54:0d:be:67:c3:50:77:
1a:4a:f6:5d:2e:d8:63:89:9c:7e:73:b7:bf:b3:1d:85:69:57:
47:13:39:6d:5c:fe:51:2a:41:9a:e5:2d:3a:1e:40:c5:84:b8:
d4:3f:0d:30:00:b2:46:79:1f:b9:bc:7e:bf:76:43:80:98:73:
2d:84:6f:a1:89:fb:52:19:76:bf:8b:cb:14:16:d4:e7:79:e2:
be:f5:4e:fc
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVsrWykBu+jagG9v80rMeLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDkzMzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjhhZWNiMmY0ODdkZjc3ODczY2NjMjZhYzUzZjZjZjJjMjlmMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQcnqCfcC6++XOy1IwkBCZGKLN/C
fG0jISfQj/keHyAglacZ3dbQfVSC9w2fwKXkc/Mg6Ck3FN21rdhksXm7gkON8lY0
o/IgyO+d06pJwdfl7nSjx61Qt4lPGJsVWs2a9zPeMQDAeyAonUy24q73Dm2dM2yV
knLr15fV9G+pSyLbe5cvvzmKBJVxBuu3lFa3EViTHqAstVFL8Nmq7UecbT/K+h5k
mpTN56G9HCekMViRmjVyb7ShV/COm2hSujmXqkhHx4+1iPUDunI+Yer8e1uysJ+c
+fW/yQyYODm4vjg6ApEUoG4Fi2cODLoWSCp/DCJACNx6qhSogeCoPt8WWQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFHuK7LL0h993hzzMJqxT9s8sKfNpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3L2MxYWQ1
Yy00MTIxLTQ3MWQtOGRhYS04YzYzMGNjYWZjMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvYzFhZDVj
LTQxMjEtNDcxZC04ZGFhLThjNjMwY2NhZmMxOC8xL2U0cnNzdlNIMzNlSFBNd21y
RlAyenl3cDgyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM9fDANBgkqhkiG9w0BAQsFAAOCAQEAF4YkByhJ8daH
UeEFEriKPQ9j9+2ezufqkxwiVjytFzaFoyjc3r0TGe9NMd7NCUPGR9elrTwkXlUw
YMFmIaLrbFRxj9kbF6HSdoRmS9TMdooMfg90y4VRTS+FHaQJJTe0uhoGZYAaWGFy
7s1ZvqckYcUVGSshSLrFOov/UffSMiM9Pkp3wpLE7EiziFw/h2XvEC9/2lWGH0WZ
g1O68a+D/9wAjqR/L2M2g8lB/UNUDb5nw1B3Gkr2XS7YY4mcfnO3v7MdhWlXRxM5
bVz+USpBmuUtOh5AxYS41D8NMACyRnkfubx+v3ZDgJhzLYRvoYn7Uhl2v4vLFBbU
53nivvVO/A==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:01:43 2025 by rpki-client