Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k593EdIf1_4jXfu7G0F4TzkSfkY.cer
File: k593EdIf1_4jXfu7G0F4TzkSfkY.cer (raw, json)
Hash identifier: 9c3LleNfuJtPRBe85k4ea8Hbgf6jLn+zEMSabqnDftA=
Subject key identifier: 93:9F:77:11:D2:1F:D7:FE:23:5D:FB:BB:1B:41:78:4F:39:12:7E:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B645B6334
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/94fea0-eeef-40ba-af72-84c83ab144f5/1/k593EdIf1_4jXfu7G0F4TzkSfkY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/94fea0-eeef-40ba-af72-84c83ab144f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:53:13 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 60722
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667403641652 (0x9b645b6334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=939f7711d21fd7fe235dfbbb1b41784f39127e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:32:9c:bb:c4:b0:ae:63:07:85:74:bd:0d:
44:94:97:6d:aa:80:32:cd:f0:4c:b1:97:84:22:42:
f6:10:ed:d5:8c:54:92:aa:d1:75:64:fa:8a:88:13:
7b:af:3f:82:80:3f:90:78:51:27:b3:cb:c9:7f:e7:
5f:26:b1:8d:e5:bf:7d:40:f1:1c:77:4b:d5:5e:f3:
fc:86:f7:56:77:a3:4a:21:cb:8d:ab:8d:33:9d:01:
40:f7:80:b5:ec:d5:80:63:ab:06:7f:0f:a3:7f:7d:
a6:38:da:78:6d:86:55:23:4e:30:17:4b:19:47:d0:
9d:da:bb:bd:dc:d4:d9:b1:eb:b6:24:7f:d9:fa:f4:
2e:be:05:6a:57:3c:9d:09:10:9e:cb:bb:eb:a4:cc:
93:2c:74:13:6c:2a:06:ac:a0:e9:93:82:95:20:21:
95:09:29:90:a1:37:49:b6:b3:eb:31:43:40:b0:24:
04:16:5c:70:88:e8:e9:f5:f1:ab:e3:9b:67:85:8d:
b2:fb:11:d3:ae:ce:76:21:b5:ca:2b:a9:48:19:4c:
f4:80:fc:b7:42:de:ae:b1:5c:fc:37:29:a2:f9:18:
b1:2d:8c:3b:ae:5c:5a:76:6c:9d:f9:04:23:17:a0:
5a:f9:37:4f:39:a3:b1:f1:39:7e:24:c4:b1:69:68:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9F:77:11:D2:1F:D7:FE:23:5D:FB:BB:1B:41:78:4F:39:12:7E:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/94fea0-eeef-40ba-af72-84c83ab144f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/94fea0-eeef-40ba-af72-84c83ab144f5/1/k593EdIf1_4jXfu7G0F4TzkSfkY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60722
Signature Algorithm: sha256WithRSAEncryption
09:c8:ee:fa:d7:3c:17:c1:61:88:31:4e:7b:c3:53:57:e2:67:
61:ef:63:4d:68:d4:aa:f6:9e:75:b5:dd:87:36:9b:82:e1:f5:
fc:db:a7:be:04:b5:e4:55:46:12:16:87:3b:16:28:1b:4d:a4:
64:b2:61:2f:18:cf:5e:7e:9f:12:77:df:8a:97:7b:09:e8:ed:
a3:68:1c:cf:15:51:86:26:ae:6b:ba:02:38:67:c3:39:35:b0:
96:23:31:64:1b:49:68:d3:6d:36:06:99:f7:79:9b:1f:14:aa:
91:a0:fe:27:90:6e:04:72:25:f7:fb:ca:45:1b:c3:27:79:26:
40:00:ff:6f:a3:12:b5:ee:dc:96:f4:3e:26:dd:55:49:db:d5:
db:59:ff:ea:aa:96:0a:26:cb:a0:18:26:d0:26:6b:87:20:e2:
52:e2:12:ad:50:37:2f:3a:91:04:c0:5e:3b:a2:1b:f4:4e:45:
98:88:28:de:8b:9d:32:d2:85:d8:d1:83:b1:07:d6:08:b8:ce:
f5:8e:3c:a2:af:68:19:cb:ad:5b:7b:07:78:47:02:b2:ec:68:
19:45:91:fa:40:9c:55:3a:89:94:3a:2d:aa:49:22:32:f7:b8:
ae:d0:5d:19:c9:c4:61:9b:5a:8d:00:6c:1b:b6:aa:ea:04:4b:
31:3b:4b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:37:40 2025 by rpki-client