Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tcyrPDJ4qLo_y6fCYv8LGdNvUXE.cer
File: tcyrPDJ4qLo_y6fCYv8LGdNvUXE.cer (raw, json)
Hash identifier: f/Pad1BPc+bVvdjVECeRvSqnQ2nUcYUvM2pAXAuBG/8=
Subject key identifier: B5:CC:AB:3C:32:78:A8:BA:3F:CB:A7:C2:62:FF:0B:19:D3:6F:51:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98F99431DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/8d76bd-8972-4b36-a49b-16a3e510be64/1/tcyrPDJ4qLo_y6fCYv8LGdNvUXE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/8d76bd-8972-4b36-a49b-16a3e510be64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:52:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212067
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657022267868 (0x98f99431dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:52:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5ccab3c3278a8ba3fcba7c262ff0b19d36f5171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:44:98:0b:d8:2d:3d:09:80:6e:8a:44:b1:
f2:c5:eb:18:f1:d6:f0:4f:e2:c6:89:b8:50:e0:97:
bc:ec:4a:bf:48:0d:ea:e5:84:fd:f5:79:b8:5e:e5:
56:06:ec:e7:fb:12:7a:19:cf:c3:58:b7:74:f6:87:
aa:38:04:e4:80:5a:45:4e:cc:98:0a:26:e9:0d:61:
18:d7:a0:69:17:ab:f2:5e:37:04:0a:af:aa:af:13:
a7:da:46:31:bc:2f:9d:8b:33:fc:ee:43:3b:18:02:
8b:ed:da:de:53:84:32:59:b4:22:2a:80:3d:c5:ca:
94:ee:46:e2:f4:d4:bc:d4:d8:8a:f1:88:cc:19:70:
97:83:50:ec:3f:e9:84:4d:30:d1:43:0d:48:9f:df:
df:4a:2e:0b:c6:37:50:3a:c5:e3:d9:90:ab:ef:76:
b5:a9:75:bf:17:71:78:97:83:b0:f6:42:9d:a2:a4:
ee:38:6d:f8:22:10:6d:26:b8:da:eb:3a:17:e4:bd:
9a:60:66:76:14:53:92:63:af:b6:65:e6:cf:b6:ec:
ce:95:21:02:2e:5c:3b:6e:d1:3b:dc:c0:a0:d8:1e:
ed:5e:41:7a:16:c1:c8:26:0d:f6:a7:2b:56:20:6b:
27:a8:8d:70:7a:42:50:39:f6:d9:f7:28:55:b5:ae:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CC:AB:3C:32:78:A8:BA:3F:CB:A7:C2:62:FF:0B:19:D3:6F:51:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/8d76bd-8972-4b36-a49b-16a3e510be64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/8d76bd-8972-4b36-a49b-16a3e510be64/1/tcyrPDJ4qLo_y6fCYv8LGdNvUXE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212067
Signature Algorithm: sha256WithRSAEncryption
16:32:0e:7d:82:74:24:62:56:a8:95:22:03:32:ad:83:5b:2b:
97:c1:d3:c3:ad:70:48:1a:67:d4:2c:de:6b:bf:1d:77:78:9c:
ec:26:f4:37:4d:0b:bb:82:3d:68:c3:62:ef:08:57:1a:38:b9:
78:47:c8:3e:d5:b9:2e:26:90:dc:1c:93:8f:e0:dd:d4:d4:7d:
bb:e7:25:dc:d7:1b:02:2b:45:79:46:c4:4c:ca:89:75:db:16:
59:28:14:b5:1b:52:09:e1:a4:68:41:75:88:17:a7:05:b6:2c:
e9:c8:ad:6b:35:25:f7:90:21:a1:54:13:da:dc:43:99:a2:49:
5c:05:ab:51:a2:70:00:6b:6f:60:bf:49:8d:2c:fa:ba:4c:8b:
29:bc:7b:2e:bf:9b:b6:6a:35:c9:f3:80:70:d1:ba:af:7f:c3:
11:77:9b:a7:95:9c:a2:d9:68:7d:d1:24:8e:bf:57:71:b8:78:
23:a9:ea:63:b4:ee:9c:03:c4:61:ff:e1:71:48:fa:eb:c0:90:
e1:2a:9d:79:bd:da:66:25:e1:47:c8:11:e2:83:84:8d:ee:12:
26:d9:cc:99:f3:9f:0c:28:6e:6f:d6:09:81:0c:1a:ac:4a:6e:
26:4c:3e:86:42:dc:02:4a:4a:08:79:3c:9a:54:e7:6f:e6:48:
21:4d:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:25 2025 by rpki-client