Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gjx1fl_73lY_J6ldbZekmMMSJS4.cer
File: gjx1fl_73lY_J6ldbZekmMMSJS4.cer (raw, json)
Hash identifier: NBI1BQm+e7CLdXv99jfUEke27szHXKBnrNk5FbryylU=
Subject key identifier: 82:3C:75:7E:5F:FB:DE:56:3F:27:A9:5D:6D:97:A4:98:C3:12:25:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0181D372069E7431E1E9A252DAB5B76D7F9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/gjx1fl_73lY_J6ldbZekmMMSJS4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Jul 2022 12:17:54 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 4455
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d3:72:06:9e:74:31:e1:e9:a2:52:da:b5:b7:6d:7f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 6 12:17:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=823c757e5ffbde563f27a95d6d97a498c312252e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:0e:bb:3d:86:e2:68:4f:cb:7c:5b:a3:25:
ce:8e:f0:3c:86:27:e3:30:5f:7a:68:cf:8b:0f:54:
32:31:64:d8:22:18:c5:2e:ee:47:59:de:5e:db:89:
b7:85:8c:d0:6b:80:17:22:29:1b:58:ea:14:af:7d:
73:46:97:e2:30:be:8c:6d:3f:11:5b:1f:f8:7b:ae:
34:5d:8a:53:a2:f8:1e:bc:72:5d:f5:ef:40:7e:63:
79:f1:ff:e0:c2:03:ee:b6:9e:2f:67:f0:ad:fa:d2:
69:e4:47:3b:56:50:54:16:c9:95:68:24:ba:bc:d1:
99:5f:27:61:42:99:92:e5:cd:76:19:24:9b:31:d8:
60:f6:80:31:b7:48:94:e1:b6:11:eb:aa:42:3c:c9:
6b:00:97:54:10:75:16:bc:69:46:4a:e8:b1:05:d8:
3d:ce:db:6e:0b:4d:9c:81:f2:d5:07:7c:b7:ab:4c:
02:fd:de:52:65:0f:6b:f6:9a:7a:d9:7f:a9:d6:b3:
b3:ec:30:4e:44:bd:a8:61:95:45:17:fd:90:4a:25:
96:cb:a1:e1:de:c1:79:19:fb:05:63:8e:1f:27:c0:
8f:a6:65:7e:b9:a4:5b:cd:4d:21:03:c0:27:0e:cb:
f7:f3:43:78:79:80:69:f4:da:63:f0:3e:97:7d:19:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3C:75:7E:5F:FB:DE:56:3F:27:A9:5D:6D:97:A4:98:C3:12:25:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/gjx1fl_73lY_J6ldbZekmMMSJS4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4455
Signature Algorithm: sha256WithRSAEncryption
46:a3:d8:50:82:7f:fe:03:4e:16:b4:83:af:64:9b:9b:d8:90:
2a:4d:72:cc:22:07:6e:af:17:a5:1d:2e:b7:92:c6:1b:9d:39:
a2:a2:0a:1b:fb:d5:20:25:ce:04:a0:b8:fd:b4:cb:85:76:04:
9a:6b:8c:4b:08:60:70:16:06:55:91:47:75:4d:ff:46:c4:6d:
2a:00:3b:d2:fe:29:de:2f:00:8e:ba:b4:b3:da:60:fa:7e:0d:
c9:ea:28:1b:5b:35:4a:99:0d:30:16:8e:ec:e4:94:91:31:84:
68:10:8b:85:66:dc:2f:96:6d:fb:e7:9e:59:40:2e:d0:db:fb:
dc:06:36:76:63:13:6c:fe:f0:93:b9:53:08:08:78:2b:0a:e1:
5e:1c:a4:8d:8e:1c:d6:9c:68:8f:31:f2:28:23:20:52:fe:40:
c8:29:fe:e7:21:78:1d:de:c2:13:75:67:f6:c9:a5:ba:aa:bd:
e6:c8:04:9d:1b:d4:c7:4e:e0:ad:36:5a:9a:02:c9:93:1a:e0:
5c:89:4e:2d:15:20:92:88:f2:70:09:91:44:0d:c4:35:77:ce:
84:0e:81:d1:06:2e:51:c8:b6:2c:57:cf:a0:c9:3c:91:cb:60:
22:d6:02:c6:f4:62:0e:fd:b6:9a:eb:17:e9:5f:e3:36:ce:65:
51:5f:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:31:05 2025 by rpki-client