Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gVoKw38AEE_XXLjBvRGJoFmdyzM.cer
File: gVoKw38AEE_XXLjBvRGJoFmdyzM.cer (raw, json)
Hash identifier: FcvNgoY0pqio/2Vmyq61hFinQpLlsDGFWY1X6Y9/Nxw=
Subject key identifier: 81:5A:0A:C3:7F:00:10:4F:D7:5C:B8:C1:BD:11:89:A0:59:9D:CB:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98AC117433
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.caramelfox.net/repo/caramelfox/1/815A0AC37F00104FD75CB8C1BD1189A0599DCB33.mft
caRepository: rsync://rpki.caramelfox.net/repo/caramelfox/1/
Notify URL: https://rpki.caramelfox.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:00:02 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211169
IP: 2001:678:f68::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655721854003 (0x98ac117433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=815a0ac37f00104fd75cb8c1bd1189a0599dcb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:80:46:41:f9:87:b1:9f:fa:16:39:72:62:73:
5d:41:72:1c:59:c4:03:40:90:e4:8c:7f:a4:7d:f7:
8a:8b:3d:cd:09:2e:06:6a:e3:b7:81:15:9c:f1:de:
32:2a:df:cf:f8:03:7d:f3:07:e1:28:5e:d6:3d:9b:
f6:fd:25:03:82:d5:32:e6:bd:0c:94:81:7e:4d:0d:
69:ea:26:c6:96:eb:f6:94:f0:eb:e3:2f:d6:c0:1b:
fd:19:34:ab:d5:86:db:a6:23:fe:2e:b7:0a:f8:97:
e1:c3:10:e8:1c:2a:15:bd:dd:b8:c3:07:6c:be:ac:
8e:a0:f8:57:bf:bf:1f:97:89:07:39:36:17:e5:c3:
75:4f:14:83:e2:51:b5:3e:94:90:8c:5f:91:a5:eb:
03:c6:7f:eb:48:ad:d6:c3:4a:d6:16:90:a4:9b:3b:
6d:e9:f3:73:36:19:69:2b:1d:37:70:b2:42:eb:a0:
87:19:e8:fe:5e:15:e9:eb:28:c8:88:4c:a8:94:19:
03:b3:58:62:37:11:18:61:a5:40:e8:a2:68:e6:6e:
ce:a0:b1:91:9a:cb:60:0f:76:44:23:9e:bc:b0:dd:
0e:6c:4d:ae:b9:f6:72:ec:82:04:bf:98:09:3c:ee:
f1:ab:4a:9d:3b:b8:19:32:c4:f4:c5:68:16:14:98:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5A:0A:C3:7F:00:10:4F:D7:5C:B8:C1:BD:11:89:A0:59:9D:CB:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.caramelfox.net/repo/caramelfox/1
RPKI Manifest - URI:rsync://rpki.caramelfox.net/repo/caramelfox/1/815A0AC37F00104FD75CB8C1BD1189A0599DCB33.mft
RPKI Notify - URI:https://rpki.caramelfox.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f68::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211169
Signature Algorithm: sha256WithRSAEncryption
8f:5c:94:1a:93:89:5e:d3:df:31:8c:4a:b6:5d:d5:68:b7:40:
55:a1:f5:ce:f4:ae:98:e3:39:c7:52:cc:21:11:f7:9d:7c:c3:
b1:23:11:6d:4c:d6:18:90:5e:3d:ac:32:3a:48:ff:56:bb:29:
15:69:bd:0e:cf:13:14:20:a9:70:df:e3:81:d2:00:04:d0:e8:
ab:ee:71:58:b0:27:3d:64:bf:9f:77:49:e9:ae:a6:41:49:ed:
f8:e6:73:f0:f9:d1:9f:c1:15:92:2a:76:6a:11:a5:08:e5:48:
33:f2:0e:4f:b1:4f:c0:48:6b:7e:5f:f1:e5:bf:db:ed:b6:56:
96:5e:d3:f8:3a:30:ce:23:e1:40:76:ea:9f:f2:32:16:01:b8:
b9:66:8b:6f:d3:04:6e:c1:7d:06:b7:26:b2:3d:17:d6:c3:cb:
59:0b:ab:b4:4c:cd:ec:93:2a:c9:b1:45:b5:4a:63:7b:7b:fe:
b7:51:2d:c1:52:e4:75:f5:cb:f7:31:75:b9:d4:f4:2f:5e:c7:
bd:9a:80:ce:4e:62:59:ea:14:80:00:dd:31:eb:93:d9:a9:3e:
ed:fd:8d:4a:b6:18:fd:68:33:01:61:c1:26:96:72:30:3c:a7:
60:61:9f:52:99:e8:2d:78:85:df:fa:e5:21:35:60:3d:e1:ca:
f2:b4:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:39:18 2025 by rpki-client