Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pwrsoR23Pc9HdeKaRXQrV3Pkm48.cer
File: pwrsoR23Pc9HdeKaRXQrV3Pkm48.cer (raw, json)
Hash identifier: axxShylShXtsGkXMSGBFokmF+kQcR0YCmchA3f+6NPU=
Subject key identifier: A7:0A:EC:A1:1D:B7:3D:CF:47:75:E2:9A:45:74:2B:57:73:E4:9B:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A36C7355AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/567051-f440-42e8-874f-c7245b1c5613/1/pwrsoR23Pc9HdeKaRXQrV3Pkm48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/567051-f440-42e8-874f-c7245b1c5613/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:53:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212691
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701899167147 (0xa36c7355ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a70aeca11db73dcf4775e29a45742b5773e49b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:ba:8c:eb:6e:67:0d:7b:f1:3c:12:01:84:
94:41:de:9e:c1:09:2b:54:23:c2:e8:d7:f9:de:6a:
b1:96:02:be:f0:45:58:da:0c:7e:c0:43:5f:a6:12:
77:a1:f2:32:20:5b:a1:cb:94:86:ca:56:3f:ba:62:
ed:d6:5d:f2:36:ca:a1:53:80:2d:d1:8d:44:c6:1e:
17:6d:43:14:cc:20:df:12:2f:a3:28:c3:35:4c:05:
fb:e6:96:03:e0:83:8a:70:69:42:ee:cc:52:c7:b5:
64:24:f3:ba:a4:5e:d5:a8:95:ce:5d:d7:6a:95:1a:
59:d5:53:82:d8:bc:8f:0f:dd:c0:87:db:2a:c9:7a:
a4:a7:f4:50:a6:df:ed:28:4f:79:cd:63:7c:66:d6:
c1:24:b5:89:96:a4:22:86:0b:10:b5:7f:cd:26:70:
f7:f2:44:e4:c4:d0:9b:87:88:41:c2:3c:a1:29:92:
fc:c9:b1:9b:25:ca:d5:fc:41:13:83:8a:d0:ad:c8:
70:29:2d:28:d6:1c:e8:99:d4:e6:25:3f:4a:d1:fc:
f8:dd:75:82:00:4c:c4:da:f9:e2:66:80:7f:38:17:
da:b9:7e:ed:d3:3e:09:df:60:a4:bd:74:8b:26:da:
ec:52:ea:4f:d5:15:19:d1:b9:4a:37:46:27:d4:3f:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0A:EC:A1:1D:B7:3D:CF:47:75:E2:9A:45:74:2B:57:73:E4:9B:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/567051-f440-42e8-874f-c7245b1c5613/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/567051-f440-42e8-874f-c7245b1c5613/1/pwrsoR23Pc9HdeKaRXQrV3Pkm48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212691
Signature Algorithm: sha256WithRSAEncryption
a1:29:d3:e9:c4:8c:1a:ed:4f:a2:a7:11:8e:ec:c8:fe:4e:8d:
1f:73:d2:90:95:ea:d2:b0:ef:03:95:17:0f:6b:88:0e:f7:5b:
bb:4c:20:4a:c9:6c:f2:96:5d:8f:d7:3e:11:26:03:96:e7:cd:
8a:6d:82:4c:4c:fe:f1:75:34:f5:27:3b:ae:7a:3d:be:58:9b:
d2:08:e2:16:95:7c:fc:ee:1a:a0:ed:e0:2f:80:bc:f8:76:ac:
61:b0:06:c2:3a:60:7b:3c:13:88:a6:b9:8c:57:35:cf:74:d9:
20:a5:0c:7c:76:70:47:1e:b0:be:c3:3f:be:5c:88:dd:c4:ca:
fb:55:c4:0f:fb:3f:b9:4f:8a:2e:3c:c5:c9:4c:6c:ad:05:6f:
7c:0c:48:40:26:95:01:46:f7:90:e0:15:7e:d2:8f:0f:74:8d:
5f:8e:e8:93:ff:68:9b:37:0a:f9:1f:ec:16:48:64:07:b9:a1:
d8:bf:b9:bd:0b:55:1c:3b:f6:96:29:4e:24:2e:e4:af:fa:a2:
66:2a:f2:ca:d7:7c:76:e8:31:1a:19:e4:bb:00:9b:a0:fe:4d:
2e:e6:7a:55:0e:6e:d4:fb:20:00:75:08:e2:e1:c9:3b:95:58:
7d:cb:11:0b:71:3f:26:6e:da:d0:46:71:6e:9b:49:d7:a0:30:
23:b4:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:12 2025 by rpki-client