Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oZibQhcMQXlQmsPUzgJfzIQ0m8Y.cer
File: oZibQhcMQXlQmsPUzgJfzIQ0m8Y.cer (raw, json)
Hash identifier: LBPYT1VTHgbCDSQIaYxcLqgcxcAPrJJDDFM1C2n+ltE=
Subject key identifier: A1:98:9B:42:17:0C:41:79:50:9A:C3:D4:CE:02:5F:CC:84:34:9B:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99A15F21CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/bb1746-6484-498b-836b-f8ed16da37be/1/oZibQhcMQXlQmsPUzgJfzIQ0m8Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/bb1746-6484-498b-836b-f8ed16da37be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:58:36 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210354
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659837362639 (0x99a15f21cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1989b42170c4179509ac3d4ce025fcc84349bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:1b:c1:0b:2d:ac:df:70:3a:5c:00:8d:5c:
ec:b5:67:8b:0e:e3:5d:e5:0e:83:a6:6f:02:20:0e:
4d:1a:35:af:e3:ce:7f:04:ac:d7:75:e5:74:17:96:
66:4e:59:a8:4d:8b:24:8e:08:8d:75:17:07:ed:d9:
6b:f6:87:a2:56:a7:e5:bb:22:a1:87:9e:42:88:c3:
21:68:cd:0e:6e:5c:40:6e:83:a2:13:d2:d3:ea:21:
b5:27:08:8e:9b:c8:24:68:7b:5d:0f:75:20:4b:ba:
ea:a9:78:f8:50:7b:ea:4d:1b:a1:b7:b3:2f:f6:ad:
d3:c9:01:f1:44:c1:c8:ae:60:68:1b:87:13:22:bd:
a5:35:05:fb:26:5e:16:2d:92:17:ba:2e:34:87:86:
e0:82:30:10:91:63:08:6a:85:05:a1:65:9c:73:c3:
d2:4f:30:43:1e:da:b1:c4:c7:36:28:29:ca:cc:11:
86:e0:77:2d:23:8e:4c:64:76:a9:1e:aa:1c:d6:14:
53:c0:df:61:aa:8e:5c:ad:69:81:b2:ad:d5:72:12:
b6:65:55:d5:47:d3:69:4d:3e:37:a8:56:c4:d7:9c:
62:55:40:25:66:e7:a8:6c:13:ca:b8:a2:5b:89:f4:
2a:79:f5:ba:06:9a:93:3c:2b:5d:f4:fb:ad:60:f9:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:98:9B:42:17:0C:41:79:50:9A:C3:D4:CE:02:5F:CC:84:34:9B:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb1746-6484-498b-836b-f8ed16da37be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb1746-6484-498b-836b-f8ed16da37be/1/oZibQhcMQXlQmsPUzgJfzIQ0m8Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210354
Signature Algorithm: sha256WithRSAEncryption
85:e2:d3:7c:d2:c1:ac:65:11:6f:eb:77:44:2d:31:8e:9c:9a:
e5:37:4c:b3:ba:bc:0a:8d:e8:d6:f1:ca:fd:2a:56:bd:ba:36:
d3:1e:49:e1:a6:43:07:34:ba:31:00:a2:db:f1:a8:b2:7c:82:
dd:73:91:84:2d:21:1f:b5:47:6c:e9:5f:19:2e:c8:62:43:4a:
ff:8f:fb:1b:28:b9:34:e7:6b:cd:7d:4a:bb:49:7f:1e:5e:f3:
d9:df:30:16:1c:f9:22:b2:47:c8:32:67:6d:8a:d2:c6:52:8b:
54:e6:ff:0b:72:ae:53:78:6d:8e:9c:71:9c:15:20:10:30:7f:
65:a0:c8:b7:24:74:c5:51:5d:cc:de:2f:4f:c3:68:98:e2:21:
ed:8e:8c:0f:35:1a:a0:fe:4c:e0:5c:a4:cd:59:6c:50:41:b9:
64:b4:52:e0:ae:c6:d5:0d:a2:88:fa:b5:81:fe:8e:0b:e4:01:
e0:dc:45:8d:7f:d3:07:f6:3c:3f:1b:0e:12:9a:73:64:2b:ba:
f9:44:ab:b8:31:76:ee:71:8c:69:cf:dd:4f:52:c5:ca:59:b5:
23:5c:bf:df:df:34:1a:15:da:77:34:8f:f7:3b:b9:0a:32:90:
f7:14:a1:3a:f4:7d:90:65:21:20:ba:42:c0:82:85:08:38:7e:
c8:5d:71:00
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAJmhXyHPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDA1ODM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhMTk4OWI0MjE3
MGM0MTc5NTA5YWMzZDRjZTAyNWZjYzg0MzQ5YmM2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAv9MbwQstrN9wOlwAjVzstWeLDuNd5Q6Dpm8CIA5NGjWv
485/BKzXdeV0F5ZmTlmoTYskjgiNdRcH7dlr9oeiVqfluyKhh55CiMMhaM0OblxA
boOiE9LT6iG1JwiOm8gkaHtdD3UgS7rqqXj4UHvqTRuht7Mv9q3TyQHxRMHIrmBo
G4cTIr2lNQX7Jl4WLZIXui40h4bggjAQkWMIaoUFoWWcc8PSTzBDHtqxxMc2KCnK
zBGG4HctI45MZHapHqoc1hRTwN9hqo5crWmBsq3VchK2ZVXVR9NpTT43qFbE15xi
VUAlZueobBPKuKJbifQqefW6BpqTPCtd9PutYPkSOQIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFKGYm0IXDEF5UJrD1M4CX8yENJvGMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwL2JiMTc0Ni02NDg0LTQ5OGIt
ODM2Yi1mOGVkMTZkYTM3YmUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvYmIxNzQ2LTY0ODQtNDk4Yi04
MzZiLWY4ZWQxNmRhMzdiZS8xL29aaWJRaGNNUVhsUW1zUFV6Z0pmeklRMG04WS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM1sjANBgkqhkiG9w0BAQsFAAOCAQEAheLTfNLBrGURb+t3RC0xjpya5TdM
s7q8Co3o1vHK/SpWvbo20x5J4aZDBzS6MQCi2/GosnyC3XORhC0hH7VHbOlfGS7I
YkNK/4/7Gyi5NOdrzX1Ku0l/Hl7z2d8wFhz5IrJHyDJnbYrSxlKLVOb/C3KuU3ht
jpxxnBUgEDB/ZaDItyR0xVFdzN4vT8NomOIh7Y6MDzUaoP5M4FykzVlsUEG5ZLRS
4K7G1Q2iiPq1gf6OC+QB4NxFjX/TB/Y8PxsOEppzZCu6+USruDF27nGMac/dT1LF
ylm1I1y/3980GhXadzSP9zu5CjKQ9xShOvR9kGUhILpCwIKFCDh+yF1xAA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:30 2025 by rpki-client