Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lWLCDg-8UJrXOb-MDhxeDqJaqlU.cer
File: lWLCDg-8UJrXOb-MDhxeDqJaqlU.cer (raw, json)
Hash identifier: Cj3qGnQLEZjKKFqAvgP0+XqkfNP+DbpSyJr/I0rCPuQ=
Subject key identifier: 95:62:C2:0E:0F:BC:50:9A:D7:39:BF:8C:0E:1C:5E:0E:A2:5A:AA:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A645204B01
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/e83290-277a-4c39-9301-390791a1507f/1/lWLCDg-8UJrXOb-MDhxeDqJaqlU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/e83290-277a-4c39-9301-390791a1507f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:59:44 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 206919
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714124315393 (0xa645204b01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9562c20e0fbc509ad739bf8c0e1c5e0ea25aaa55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:08:5f:2e:7b:54:ca:2b:2f:7e:9a:2e:be:
14:26:97:27:61:36:2a:32:e8:a0:1b:ca:e9:57:3b:
d5:5f:29:75:a3:14:37:64:82:44:70:79:6f:d1:45:
98:66:6a:9c:cc:83:e9:94:61:7a:57:2c:71:16:86:
4f:a4:2e:d3:79:ef:22:c0:a6:3d:c1:2b:c6:e8:b0:
a6:7a:f7:e8:10:ba:4f:80:77:c8:b3:2f:e6:21:b1:
c7:4c:46:53:a1:aa:32:e3:27:b2:3f:b4:77:c1:dd:
ed:1e:9e:27:13:df:6e:92:dd:4c:e4:4d:eb:45:e0:
eb:5b:10:68:e6:be:56:9c:6b:7e:7e:86:a4:25:e1:
8d:a1:c0:83:58:22:ea:1b:e9:aa:ee:7f:5b:e0:b0:
2a:c6:86:89:35:5a:5a:0c:70:e5:af:13:9f:15:db:
72:a1:1a:fc:85:3c:f3:5d:57:5c:00:1e:6b:d3:d1:
fc:99:fa:ad:d4:bb:1b:f8:e4:eb:c8:49:1c:94:db:
19:35:47:62:a6:05:ca:5b:9f:31:f7:d2:ee:1f:ce:
ad:af:51:fd:ab:76:ee:5e:98:c1:87:8f:7e:16:a8:
88:e4:ea:bf:35:1a:56:28:66:b5:e3:48:8e:5e:d2:
89:f1:d5:f7:ed:07:0e:33:65:69:6f:4c:aa:39:c4:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:62:C2:0E:0F:BC:50:9A:D7:39:BF:8C:0E:1C:5E:0E:A2:5A:AA:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e83290-277a-4c39-9301-390791a1507f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e83290-277a-4c39-9301-390791a1507f/1/lWLCDg-8UJrXOb-MDhxeDqJaqlU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206919
Signature Algorithm: sha256WithRSAEncryption
03:cc:65:8e:4d:d1:2b:5e:ac:d4:b6:64:30:c2:7a:92:7f:72:
9f:23:78:45:92:04:7e:4e:ca:3f:04:aa:db:81:66:81:10:c4:
d4:48:e9:f5:1a:80:2b:7d:20:d7:4a:ba:97:a9:8f:9b:fe:06:
41:01:35:b1:0b:a4:3c:a9:bf:0c:f4:e7:87:13:b2:49:e4:a6:
e7:64:46:7b:08:64:d1:e6:ff:05:ed:9e:6a:d4:f8:4c:05:8e:
17:95:8f:2a:5f:b2:d4:47:26:f3:08:bc:6b:92:0a:5b:a8:0a:
cc:af:72:cc:a8:0f:48:8a:ba:83:3a:89:ae:44:16:24:a9:f9:
46:e9:7a:72:c0:25:07:18:f4:f9:10:a5:5a:5e:f6:32:0f:a5:
35:2c:e8:79:9f:95:c3:06:b2:44:d9:4b:b7:ca:fa:fc:74:50:
94:b7:bc:e0:df:9c:ea:a8:4c:88:6e:14:92:ce:39:56:83:1e:
a5:d3:28:b8:93:d0:6f:6a:c7:90:9e:d4:19:e2:b8:10:9d:f5:
4d:b5:df:1f:63:8a:9f:06:66:5a:a8:fe:d0:2c:63:ce:06:e5:
7e:6c:b6:4a:a6:96:f8:c8:41:15:29:69:66:f7:ed:42:f1:3b:
d6:5f:36:52:39:ea:0e:b6:98:dc:99:9a:82:63:aa:1e:4e:9a:
09:74:1b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:55:19 2025 by rpki-client