Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l_wvcX37KYQSMhbxhnTnk2ZP01o.cer
File: l_wvcX37KYQSMhbxhnTnk2ZP01o.cer (raw, json)
Hash identifier: C73/roepvhkQz5U6fPKRtWJx28KvXB/8vXjqbNEQ9gw=
Subject key identifier: 97:FC:2F:71:7D:FB:29:84:12:32:16:F1:86:74:E7:93:66:4F:D3:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01892B78A9FBBA881E54AD74EB44205A6E74
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/1/97FC2F717DFB2984123216F18674E793664FD35A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 06 Jul 2023 13:51:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 212618
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:78:a9:fb:ba:88:1e:54:ad:74:eb:44:20:5a:6e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 6 13:51:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97fc2f717dfb2984123216f18674e793664fd35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:23:c4:a8:07:69:0f:59:19:dc:be:32:3f:
8e:52:a7:3b:1c:d1:59:95:fe:f3:00:75:d9:ef:c7:
2d:e7:a3:e4:42:21:73:0f:1e:75:c0:2e:8a:dd:0b:
0c:b7:04:d6:b3:09:c5:e4:b8:17:e3:94:e1:6c:21:
a3:4a:c2:74:93:0b:85:9a:5d:4d:bf:b0:d0:18:c0:
2c:12:0c:b3:9e:30:89:da:97:dc:9a:87:49:ae:b5:
ee:93:ff:fb:90:e9:a4:c4:d1:93:ef:cd:61:ce:ab:
de:97:90:7d:17:eb:a1:40:df:a6:7a:f3:77:0e:4a:
01:76:bd:c9:3c:b5:a1:69:56:ed:94:e5:0b:5b:26:
2f:e3:43:78:92:8f:4f:a4:61:b6:bb:37:d4:50:76:
d8:2c:5f:13:ca:bc:b4:df:56:a5:57:7b:be:c1:e6:
c3:fc:a9:5d:f2:fa:38:58:8c:d9:ca:03:90:6a:01:
26:81:b1:45:96:31:2b:4c:cd:09:e2:a0:4e:e2:52:
17:f6:f4:c5:8e:9d:24:12:ea:a3:07:f1:ad:4e:f1:
f8:e2:2e:3f:0c:ea:f4:1d:a3:98:b8:f8:37:32:11:
89:fb:c5:47:ac:45:7b:83:53:af:4e:8b:10:2d:db:
a3:f4:f5:87:5f:14:c2:1e:58:43:d9:6d:ec:68:2e:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FC:2F:71:7D:FB:29:84:12:32:16:F1:86:74:E7:93:66:4F:D3:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/1/97FC2F717DFB2984123216F18674E793664FD35A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212618
Signature Algorithm: sha256WithRSAEncryption
0a:e3:a8:59:80:7e:eb:53:ba:71:f3:7c:b3:61:0a:ed:8d:45:
54:7c:a5:d5:fe:c3:2f:6d:18:59:4d:bc:de:16:80:31:1e:fd:
75:e3:62:6f:46:95:88:30:ed:40:ec:4e:2f:95:ac:1a:8c:e6:
b8:6f:d8:21:95:8b:29:cc:82:63:16:1b:67:a3:c7:c0:7e:83:
ef:51:7c:77:05:7c:6a:c9:24:04:d4:bf:ec:97:62:36:0a:88:
c7:aa:d9:b0:3d:b1:d2:35:76:59:f6:80:af:13:bd:8b:b0:6d:
42:79:b3:2f:db:69:58:ea:3d:84:55:f6:eb:7f:a7:53:e4:d1:
e1:7c:d4:d3:83:fe:66:d4:ce:47:79:61:18:5c:d9:32:4c:81:
a7:d2:08:0f:b2:ae:45:a3:67:02:e0:20:f4:7a:3c:c9:89:68:
6e:fc:a7:7c:c7:56:93:64:9d:62:00:b0:85:8d:76:47:ee:2e:
af:e2:40:88:9b:6e:e9:47:8d:f7:02:06:bf:7f:70:e9:c2:20:
78:2c:6c:d4:e4:27:b8:19:08:6a:8b:7c:ab:b2:57:51:a0:6e:
0d:99:d2:5f:6b:b2:93:4e:fc:20:d5:e7:c3:d3:ce:e7:89:be:
b2:9d:83:3b:9d:5e:f0:56:b3:db:4a:7c:cf:2c:a5:8a:a1:91:
b3:04:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:40 2025 by rpki-client