Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fouf9REueOfSlHeo-vLJ-d3h7cQ.cer
File: fouf9REueOfSlHeo-vLJ-d3h7cQ.cer (raw, json)
Hash identifier: WRpjM+rPL1RiMnmmsMKiPkk1Jrd+PkxfxxGY2AH0CGI=
Subject key identifier: 7E:8B:9F:F5:11:2E:78:E7:D2:94:77:A8:FA:F2:C9:F9:DD:E1:ED:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018803902D9DCB229D853B9BF4555CAE1A4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/804e67-f4e3-41d9-9d25-1e1e46ce47b7/1/fouf9REueOfSlHeo-vLJ-d3h7cQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/804e67-f4e3-41d9-9d25-1e1e46ce47b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 May 2023 02:49:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 198924
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:03:90:2d:9d:cb:22:9d:85:3b:9b:f4:55:5c:ae:1a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 10 02:49:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e8b9ff5112e78e7d29477a8faf2c9f9dde1edc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:83:e5:fa:c8:0f:83:61:4c:27:40:a7:4a:
3a:2a:25:a1:6c:75:cd:4e:d7:8d:1e:26:9d:e8:05:
2b:f1:42:11:17:74:35:b5:df:0b:42:c0:19:e3:8a:
42:2e:af:fe:8b:33:f0:17:1f:25:25:fd:da:a2:61:
c8:5b:70:ee:15:44:4b:99:9f:38:bc:40:00:6f:64:
29:e9:99:c0:e5:50:e6:3f:eb:77:d4:d7:3f:ce:25:
65:8e:e4:94:1c:b6:92:db:4b:59:b3:a0:af:02:d9:
4b:4e:7c:5e:f3:56:3d:b2:9c:e7:3e:57:24:3e:c1:
08:c8:6a:99:0c:21:98:2c:68:b0:09:1a:18:d3:4d:
7c:1a:d4:72:24:d3:33:c7:6e:aa:8e:85:78:0d:b1:
f7:80:7e:16:52:7b:5f:cb:2d:aa:f6:76:9e:a3:fe:
e5:20:87:ea:48:52:b2:8e:24:05:f7:47:05:b8:60:
f9:96:9c:60:66:53:c8:d5:53:37:22:9d:e3:eb:c2:
55:e6:3e:8c:cf:12:d1:d4:bc:26:3a:49:4b:5f:41:
aa:d7:7b:95:2b:56:04:73:7e:f8:c3:7f:0a:49:f0:
1f:2f:67:b9:75:ba:d3:61:f1:cb:2c:1c:95:d8:fc:
25:e3:36:84:e7:38:e0:5e:6a:df:fa:6e:14:8f:81:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8B:9F:F5:11:2E:78:E7:D2:94:77:A8:FA:F2:C9:F9:DD:E1:ED:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/804e67-f4e3-41d9-9d25-1e1e46ce47b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/804e67-f4e3-41d9-9d25-1e1e46ce47b7/1/fouf9REueOfSlHeo-vLJ-d3h7cQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198924
Signature Algorithm: sha256WithRSAEncryption
8e:c5:20:b6:c8:fe:43:b2:56:bf:68:74:7c:0d:e8:0f:ab:4f:
39:32:7b:73:aa:43:8b:cd:7e:e3:c4:d3:cb:e0:d0:37:c1:5e:
a2:e4:8e:50:c6:b4:ff:b1:b1:27:5d:65:f7:6e:e8:73:7c:92:
94:df:7e:3c:8d:da:9b:bc:05:db:e4:4a:65:cd:a7:53:2c:84:
3d:fc:22:55:b7:ab:3c:0b:58:a0:c6:d5:06:b9:76:84:60:c6:
40:f4:89:a2:c0:25:35:f2:e0:cb:1e:14:f3:a3:48:3d:1e:f3:
a4:8f:c8:f0:49:a6:ac:5a:92:26:62:fc:34:50:c0:77:b9:91:
7c:7e:ab:58:bb:14:f5:3e:78:7c:67:94:27:d7:c0:38:44:0b:
e3:23:10:0b:d8:3d:a9:fe:44:6a:f8:36:20:54:1c:80:aa:b5:
04:62:d2:5d:86:ad:49:fb:95:60:5b:e8:9a:8c:1b:45:24:d0:
8f:3b:d9:30:5b:1f:46:4e:56:10:24:5e:29:18:2a:86:2f:b0:
8f:16:52:18:71:f9:9d:8d:ae:b6:ee:8b:a6:2a:96:ca:ff:ef:
52:ff:a0:18:ee:c3:e6:43:fe:b0:43:f8:07:c4:6f:c1:d7:17:
bc:79:ea:45:f4:ce:54:b4:59:7c:a1:c4:8d:29:d0:48:f8:e8:
07:73:18:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:33:01 2025 by rpki-client