Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hIiOAclEE0a99zvwRB4sUHj_65E.cer
File: hIiOAclEE0a99zvwRB4sUHj_65E.cer (raw, json)
Hash identifier: MaQO2qR3h4dNfheLnLu0IdFvW0KD9DfevjffQJOaoUw=
Subject key identifier: 84:88:8E:01:C9:44:13:46:BD:F7:3B:F0:44:1E:2C:50:78:FF:EB:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5F18B1671
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6a2d2-8fb0-4fbd-80b2-a4e99e4ffa8d/1/hIiOAclEE0a99zvwRB4sUHj_65E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6a2d2-8fb0-4fbd-80b2-a4e99e4ffa8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:55:57 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 64479
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712722028145 (0xa5f18b1671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:55:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84888e01c9441346bdf73bf0441e2c5078ffeb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:46:1c:73:5f:45:50:32:6d:69:bc:f6:2a:67:
7f:81:39:9f:68:21:9b:69:d7:fa:cd:7b:25:23:c9:
a3:fb:24:f9:75:3a:be:ca:3b:40:f7:52:b8:25:77:
7a:af:6c:ef:29:52:ed:66:2f:c6:c1:ee:0e:f2:b3:
6f:7f:b0:f5:2a:7b:28:fb:69:08:09:a5:b4:46:e0:
91:b7:01:40:1d:64:ac:33:03:04:50:81:01:ba:31:
b3:74:eb:6e:68:15:9d:26:97:a0:73:6d:a3:af:7a:
39:04:c5:ce:1b:e8:4e:25:8d:95:4f:17:c2:a8:f3:
e8:02:81:0e:ab:ea:f6:7a:4c:fd:e0:8c:56:a7:95:
ee:40:4d:bd:26:2c:34:2e:18:14:32:d7:28:97:67:
4d:45:d4:9f:52:a1:8c:a9:6b:7f:4a:cc:e5:0f:7b:
a5:ad:ad:89:33:39:4a:0b:97:d2:c2:34:61:3d:4a:
78:8c:25:34:05:22:c6:66:21:39:2a:ff:1c:2b:0e:
5a:3b:1a:26:4b:fa:af:3c:5a:84:45:d0:39:40:75:
77:ac:b8:2d:bb:b8:26:95:52:43:39:1d:79:33:68:
56:0f:cf:32:be:64:22:2a:6b:4d:7c:93:7f:2f:cf:
94:b5:38:d9:37:f4:97:f5:42:60:cb:bf:00:7f:9f:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:8E:01:C9:44:13:46:BD:F7:3B:F0:44:1E:2C:50:78:FF:EB:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6a2d2-8fb0-4fbd-80b2-a4e99e4ffa8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6a2d2-8fb0-4fbd-80b2-a4e99e4ffa8d/1/hIiOAclEE0a99zvwRB4sUHj_65E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64479
Signature Algorithm: sha256WithRSAEncryption
7b:1d:60:2e:95:7d:55:76:c8:9c:6c:1e:6c:58:b4:71:9b:6d:
ad:1b:3e:8b:20:7a:13:99:eb:21:76:35:a7:6d:1a:23:87:f6:
02:45:8b:98:01:bf:f7:22:5f:1b:cf:55:b3:b5:40:b2:20:d6:
f3:e9:03:13:10:a5:11:e0:9a:d1:b4:ff:86:66:a8:d6:de:d3:
a9:cb:13:c4:21:cf:05:46:47:20:74:69:35:4f:43:21:df:00:
12:49:82:1d:19:27:44:03:12:1e:db:4a:4c:82:72:d0:2c:fe:
f9:7d:ac:c2:d6:75:61:84:08:ec:2d:65:82:5a:6c:70:2e:ee:
fd:3e:bf:0f:fb:47:26:e1:83:20:6b:10:4d:b7:8f:b5:d3:90:
69:2c:61:4f:ad:86:4d:c8:5b:db:47:cd:39:a0:a9:20:0c:bb:
60:3f:9d:78:5a:ac:dc:72:1e:4c:8c:56:bf:1b:da:0b:9c:ef:
b1:64:a9:81:b8:ee:99:bf:ea:e8:63:54:5e:b4:bf:38:24:f1:
53:46:45:da:ff:d5:d5:8c:6f:82:74:50:32:34:54:2f:d0:99:
5c:ef:f5:b5:2d:1e:6b:06:aa:c8:1c:34:e6:aa:15:5d:4a:e2:
be:71:8f:b9:bc:23:52:1c:91:b0:43:a8:37:61:d9:fc:3c:cd:
b0:b8:77:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:57:55 2025 by rpki-client