Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.cer
File: uwlIm2EQhbkC8Vt45Ze6kUM3rPU.cer (raw, json)
Hash identifier: CnvJUX3ptZu5feGxb7cLbilPj8NdBeb/cjuurxbrBsk=
Subject key identifier: BB:09:48:9B:61:10:85:B9:02:F1:5B:78:E5:97:BA:91:43:37:AC:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C7C08EBA47430E3A997C669A58D0656C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Dec 2023 08:26:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 44286
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:08:eb:a4:74:30:e3:a9:97:c6:69:a5:8d:06:56:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 18 08:26:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb09489b611085b902f15b78e597ba914337acf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:93:97:d9:83:39:f2:67:92:5a:f7:ae:e0:
17:ac:05:a7:d5:97:d9:bd:26:f9:50:5e:4f:18:c8:
0e:15:c1:60:25:e5:de:db:b1:81:83:ba:86:10:58:
d4:a8:a3:95:4e:fe:c3:c7:e7:88:7f:1d:04:31:a6:
0b:a1:e1:48:9a:4e:75:73:f8:5b:c5:46:4a:1c:6f:
b8:d4:60:ec:4c:04:33:19:cf:f8:d7:ff:a3:96:bc:
c0:6f:53:fd:79:8b:1d:e0:d3:a3:60:ca:0a:4e:cc:
34:6e:12:9c:e1:cd:3b:35:9c:6a:ae:69:ef:45:88:
ca:a7:75:19:85:30:8e:0c:e8:30:c8:80:b4:bc:d1:
25:e2:b9:d8:3f:17:25:08:2d:bc:c5:52:dd:b0:17:
0c:14:3e:9a:d9:49:93:72:5c:8b:30:32:d7:9f:51:
bf:df:e7:e2:48:4e:b8:38:49:0f:e8:7c:2a:cd:e1:
6d:74:b9:9b:ff:26:ed:c3:26:63:75:07:cf:77:5e:
fd:4b:31:d2:5c:b9:63:96:a5:29:a1:82:a0:f3:7d:
d9:e6:90:15:d4:17:d1:7b:f1:10:aa:85:fd:06:3d:
52:d4:7d:f7:11:ce:26:38:bd:d3:02:03:21:08:6b:
75:f0:41:d8:c0:1a:db:0d:fd:3e:9d:a6:6f:b2:2f:
e3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:48:9B:61:10:85:B9:02:F1:5B:78:E5:97:BA:91:43:37:AC:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44286
Signature Algorithm: sha256WithRSAEncryption
3d:90:ef:c9:ca:d4:90:bc:e8:ff:5e:87:50:22:0c:7e:0e:c0:
1a:26:20:71:d1:3a:74:29:87:76:c0:d2:e8:1d:28:8e:24:ba:
dc:06:16:00:b0:b7:76:3e:28:8e:5f:1c:04:56:8a:33:da:ab:
28:ab:a4:5c:e9:ef:0c:09:e3:c3:f9:96:94:3b:d6:fa:00:71:
a8:bf:16:d3:6b:1f:50:23:10:12:61:a7:5c:bd:d3:41:48:e1:
d8:2f:a3:66:0c:79:8f:d7:ed:56:0b:6a:8f:aa:e9:cf:61:95:
d9:7e:f7:c4:42:b9:c7:13:40:77:94:a0:d4:74:54:dc:57:18:
6a:6e:91:5d:27:1b:00:74:7f:9d:c0:8b:dc:29:97:60:98:a3:
ff:10:76:44:da:7c:d8:9e:76:67:56:dc:5c:72:17:60:ad:07:
e2:b5:80:0f:60:6c:e6:b8:45:6e:91:6a:0f:39:68:6a:19:07:
f1:91:67:f8:b5:09:fc:93:f4:d1:67:23:57:1c:03:ba:21:1f:
13:40:bf:80:15:fe:34:50:66:02:f9:74:50:ef:7a:1e:38:ce:
c7:db:14:91:ec:86:b2:ad:53:1d:db:db:4c:c1:0c:6b:08:55:
75:4b:b0:97:29:9e:b0:62:ed:35:92:48:d6:fc:74:6a:a2:1f:
64:69:55:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:39:23 2025 by rpki-client