Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pJjkCZ1TKYPTaBMf8_PhRlj24KM.cer
File: pJjkCZ1TKYPTaBMf8_PhRlj24KM.cer (raw, json)
Hash identifier: 5DbiNhpqOAAMGvpck8i4rYY3OXYVL9ftz4Ac3hAq/Ys=
Subject key identifier: A4:98:E4:09:9D:53:29:83:D3:68:13:1F:F3:F3:E1:46:58:F6:E0:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0186832C032EA054410A547A7F3EB6B4C858
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/0cf0fd-67bd-42db-ad23-7d34c9700c92/1/pJjkCZ1TKYPTaBMf8_PhRlj24KM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/0cf0fd-67bd-42db-ad23-7d34c9700c92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 24 Feb 2023 11:25:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 51019
AS: 208548
IP: 2001:67c:bdc::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:2c:03:2e:a0:54:41:0a:54:7a:7f:3e:b6:b4:c8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 11:25:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a498e4099d532983d368131ff3f3e14658f6e0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:9f:98:3e:7d:98:01:d0:31:1e:ae:51:81:
a2:cc:0d:c8:05:0f:7d:d0:e1:cc:2b:c3:b4:16:73:
1d:53:2f:01:6e:f0:57:64:a1:c0:2e:e9:11:70:6b:
b1:95:8e:4d:ce:94:1f:70:0a:d6:02:69:aa:58:ac:
6a:f5:db:59:a8:b3:97:9d:5a:ea:f8:da:08:8b:9c:
57:7a:77:61:e0:2d:e5:c2:5f:a2:99:74:0b:6c:b3:
31:d2:cf:4c:0b:41:b2:53:25:c3:2d:98:26:79:29:
2e:ed:15:a1:de:43:ae:a6:5a:7e:ee:97:8a:9e:e3:
96:e0:1b:1a:c8:93:9a:84:5f:6a:71:85:49:91:7d:
5c:61:ee:6e:8c:44:ea:87:8d:30:74:61:d7:e1:95:
25:41:43:30:3b:ae:6c:67:7c:28:b1:54:fc:2a:e2:
5b:0b:f5:b4:f0:a9:fb:76:0a:a3:ac:64:6e:d9:cd:
b4:ce:c7:00:b1:0e:86:f6:86:24:57:da:a3:53:21:
76:a2:e9:7e:c2:2a:c4:a5:61:ff:34:fb:5f:20:de:
80:df:26:bf:91:3e:d6:28:5c:a6:7b:ce:9e:8d:0d:
28:43:a2:78:52:78:6d:d8:3d:ec:aa:48:48:ff:30:
e2:08:63:52:3c:9f:56:da:6c:e2:14:ba:02:e8:5f:
d6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:E4:09:9D:53:29:83:D3:68:13:1F:F3:F3:E1:46:58:F6:E0:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0cf0fd-67bd-42db-ad23-7d34c9700c92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0cf0fd-67bd-42db-ad23-7d34c9700c92/1/pJjkCZ1TKYPTaBMf8_PhRlj24KM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:bdc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51019
208548
Signature Algorithm: sha256WithRSAEncryption
2f:9e:44:15:5a:8d:e5:d5:c8:92:4d:78:9f:cc:62:54:2c:c6:
6b:ed:ac:63:54:2b:f6:05:b0:f0:5e:15:79:22:a3:d1:96:4d:
99:bd:1c:7d:e5:f1:ec:b5:59:12:73:95:d4:38:e9:da:9b:9f:
35:5d:45:8c:7a:3e:38:33:1f:f8:e5:a9:7c:5d:8f:37:00:85:
c7:ec:79:da:3c:7f:a8:cf:bb:56:6c:88:02:e7:fe:c3:d0:36:
db:f0:f1:7a:58:b2:3c:73:40:35:8a:60:7b:9f:9f:31:f4:03:
21:e7:86:17:f4:3b:f0:55:b9:49:be:73:2c:98:ed:fd:e6:ee:
00:9b:3f:e9:29:0f:e9:f9:35:71:5d:8b:8b:26:63:51:a2:45:
89:af:4f:dc:ee:c2:da:e7:b8:67:3d:f0:5f:29:a7:73:a2:2e:
8b:77:d0:55:77:42:70:b5:3c:11:43:31:e7:21:13:a3:72:b3:
bd:ac:34:5a:97:3a:95:8b:3b:0a:a2:07:04:83:be:31:9a:bf:
36:37:d5:24:74:90:8e:9e:92:30:a6:79:bc:1d:ff:a0:9e:a7:
dd:c9:07:e3:67:7c:7c:92:df:aa:c8:d7:57:af:29:e2:8b:6e:
b8:22:c4:ae:e7:d1:c3:fb:1c:04:e4:4a:cb:eb:04:46:ed:0c:
d0:0d:d5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:35:07 2025 by rpki-client