Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t7ZD6pFmRwwnSb0HKe8KI_x4KwE.cer
File: t7ZD6pFmRwwnSb0HKe8KI_x4KwE.cer (raw, json)
Hash identifier: 01aJ9xgzPz74QfXHo85sVMZnIt/oH0dHpxFCYzy4+sY=
Subject key identifier: B7:B6:43:EA:91:66:47:0C:27:49:BD:07:29:EF:0A:23:FC:78:2B:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1D73538C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/1a2443-cc8c-414b-b895-94b15cf20d26/1/t7ZD6pFmRwwnSb0HKe8KI_x4KwE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/1a2443-cc8c-414b-b895-94b15cf20d26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:01:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211828
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695100324035 (0xa1d73538c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7b643ea9166470c2749bd0729ef0a23fc782b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:7e:37:12:e0:6c:cc:f2:94:76:40:e7:64:
fa:47:a7:bc:c9:a1:12:7b:eb:0e:f5:a0:90:c4:93:
f4:8c:1c:57:aa:12:f8:c7:08:d8:f5:66:54:50:27:
00:0f:40:fa:e5:6a:08:c6:ad:4c:b2:e5:23:32:7f:
b8:df:b9:93:32:fc:ae:48:6a:3d:c5:f8:c5:c3:a9:
fe:ba:f9:2d:2d:34:a8:69:93:57:6b:4a:ad:d9:6f:
d6:80:b9:05:5c:62:9f:d5:66:bf:0e:38:28:92:6a:
a1:28:19:38:7e:5a:06:14:1b:f2:9a:05:16:12:63:
2e:c6:c0:20:4a:c1:33:ea:d2:66:53:f3:e7:12:bf:
25:4f:c9:cb:f9:9f:78:64:51:56:39:cb:fc:08:9d:
af:83:24:16:97:8a:39:1a:be:9c:c4:2f:3f:c2:53:
2d:06:53:70:77:92:7d:94:cb:8b:dc:c4:20:9f:ea:
22:5c:a6:08:2c:cd:b6:90:38:76:53:62:03:96:ad:
26:14:6f:c7:a8:06:b0:c0:ac:99:f3:d2:08:60:d7:
61:57:05:bb:1a:61:30:8b:eb:66:08:86:ee:98:7f:
53:c1:b6:d8:8b:03:55:c2:99:7e:da:c7:90:5a:76:
71:89:d4:ba:a9:08:4e:32:bc:2f:0f:72:3b:f2:c6:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B6:43:EA:91:66:47:0C:27:49:BD:07:29:EF:0A:23:FC:78:2B:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/1a2443-cc8c-414b-b895-94b15cf20d26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/1a2443-cc8c-414b-b895-94b15cf20d26/1/t7ZD6pFmRwwnSb0HKe8KI_x4KwE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211828
Signature Algorithm: sha256WithRSAEncryption
15:73:a8:b3:18:81:05:e7:86:d1:f8:e4:10:e1:c1:33:3f:d6:
79:a1:df:df:c7:99:8a:1a:db:f9:ac:ed:ba:f0:9c:b0:0c:7b:
ab:b6:6e:6b:da:58:e1:19:30:dc:09:21:e3:0e:5e:40:f8:ee:
f2:47:28:92:69:b0:c6:ce:34:2b:c5:fe:a7:09:a4:f3:91:92:
6e:53:b1:b8:9d:75:33:27:89:b8:eb:e0:b5:ae:c7:53:41:5d:
03:7d:5b:1e:2a:41:f2:76:e1:02:39:49:fb:92:b4:58:d2:19:
43:fd:7d:aa:f4:61:a2:41:23:b5:6e:ae:4a:99:89:8e:a1:26:
82:52:92:f2:64:b9:15:b1:a7:88:94:9d:78:c4:7e:72:ba:a9:
00:13:dd:6f:c5:12:54:d0:47:ea:9d:b1:11:8d:17:ea:96:e8:
be:b0:9d:e4:04:cd:c5:d4:ab:62:53:c8:f2:ec:4a:7d:4e:8c:
0f:10:ab:d8:69:88:74:9e:d8:d7:85:dd:fa:74:42:4e:df:c1:
71:98:23:57:5a:53:35:6a:e1:27:d9:bf:6b:a5:93:7e:95:bb:
47:6d:98:d5:2c:c4:89:99:aa:30:92:37:48:5b:1c:b8:0a:98:
1e:db:9b:1e:29:5f:0c:88:44:0e:55:c3:2d:e0:b0:13:27:8a:
34:50:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:22 2025 by rpki-client