Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ho6G4MvjV2LQGcPu2CNEi_Xs0cg.cer
File: ho6G4MvjV2LQGcPu2CNEi_Xs0cg.cer (raw, json)
Hash identifier: awRClQI9c73EfFLsL/owc0A1TtJSCdfjeZ+8o7GKqd8=
Subject key identifier: 86:8E:86:E0:CB:E3:57:62:D0:19:C3:EE:D8:23:44:8B:F5:EC:D1:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A24217A20B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/9e46cd-03e4-4f99-b628-828934cb2ac2/1/ho6G4MvjV2LQGcPu2CNEi_Xs0cg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/9e46cd-03e4-4f99-b628-828934cb2ac2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:53:12 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212209
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696893547019 (0xa24217a20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:53:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=868e86e0cbe35762d019c3eed823448bf5ecd1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:50:60:f5:3e:83:d6:73:bc:63:3c:19:93:
53:9e:b1:8a:5a:74:70:f6:65:90:6e:25:64:4a:c3:
7b:f8:d2:a6:1e:15:b2:ed:68:98:5d:60:6d:ae:09:
9c:c1:fe:84:16:38:8f:70:0c:e0:c9:74:e3:7e:1f:
fd:0f:26:e5:de:af:86:2c:47:23:c6:f9:10:d2:0d:
b6:7c:43:5d:6b:87:6b:2d:cb:1d:2a:30:9a:4a:de:
17:8f:2e:74:75:8c:6f:b8:79:e9:b3:37:d4:e8:c2:
b7:bd:b9:b9:db:2e:e6:56:18:01:0f:de:4b:54:d9:
71:9d:13:54:03:c6:f8:5e:85:10:b1:c1:b1:24:f8:
40:9d:da:15:86:1a:cd:ff:b1:d1:f7:61:55:7b:58:
32:03:4b:9f:ff:12:a1:48:3b:7a:74:11:b1:54:df:
09:63:80:4b:1b:03:ae:09:12:63:10:0c:7f:bb:a6:
7b:a9:e9:77:f4:a4:3b:9c:52:11:d0:c8:59:70:05:
80:df:e8:4a:13:a7:b8:4b:5d:26:b7:7d:69:fc:af:
91:7f:3f:66:be:0a:64:c2:6f:24:d3:c9:27:4d:52:
0f:a7:e0:ef:3e:4c:3c:b8:42:46:12:95:4c:10:e9:
c6:76:4e:cc:74:e0:62:65:af:b8:81:8f:87:3c:3d:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8E:86:E0:CB:E3:57:62:D0:19:C3:EE:D8:23:44:8B:F5:EC:D1:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9e46cd-03e4-4f99-b628-828934cb2ac2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9e46cd-03e4-4f99-b628-828934cb2ac2/1/ho6G4MvjV2LQGcPu2CNEi_Xs0cg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212209
Signature Algorithm: sha256WithRSAEncryption
0e:4c:8d:12:78:d4:c6:58:51:f7:a5:67:fe:89:a5:f9:2b:e7:
49:ff:61:c4:3a:01:d4:2e:20:69:b7:37:70:95:b8:13:2a:1e:
69:d4:f2:5b:6e:c9:5d:83:01:f5:29:f6:e5:07:58:b2:94:42:
e6:a9:d3:57:db:80:f6:6d:b3:53:0d:1c:f6:36:47:a5:47:0e:
12:91:26:19:3d:02:1e:5d:5d:76:be:d4:59:39:79:0c:1d:a1:
a7:f7:36:66:bf:a6:0c:88:58:eb:e5:0a:27:9c:ec:b4:45:09:
4a:d2:7e:f9:bb:4b:10:67:fb:fc:fb:b7:7b:8a:1c:95:9e:c1:
fe:17:b9:00:47:43:2f:9a:82:34:a2:de:94:0f:6f:56:d3:f8:
e7:e5:09:a9:63:46:ed:86:1a:fb:27:9e:e9:d9:38:51:3c:0a:
b7:4d:a0:1b:2c:f2:19:ac:43:19:46:df:7d:c5:85:dc:b6:c8:
0f:69:84:21:39:2e:62:66:dc:c5:31:7c:7f:7f:2f:5d:b0:b6:
f9:74:aa:02:00:69:68:58:66:0c:21:94:36:63:7c:1c:a0:d5:
cc:dc:ab:2a:4c:a4:44:7e:38:c3:0b:c2:c7:95:e4:8f:3d:13:
52:af:33:15:5d:e2:6a:9c:7d:84:4c:bb:63:9d:02:72:89:15:
a3:a4:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:48 2025 by rpki-client