Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vTmQXyfmafhLEkgnom7K8iKKnrU.cer
File: vTmQXyfmafhLEkgnom7K8iKKnrU.cer (raw, json)
Hash identifier: TbFRbBCBuiP1d3GYBkKkM/IXiO9dSTqtQpKwbvv9CXo=
Subject key identifier: BD:39:90:5F:27:E6:69:F8:4B:12:48:27:A2:6E:CA:F2:22:8A:9E:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F4CCD3B75
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/308a29-a965-47aa-be89-eb7049820837/1/vTmQXyfmafhLEkgnom7K8iKKnrU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/308a29-a965-47aa-be89-eb7049820837/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:59:26 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 204757
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684188318581 (0x9f4ccd3b75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:59:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd39905f27e669f84b124827a26ecaf2228a9eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:32:d4:b6:26:d1:f1:12:98:96:a7:0c:fa:
cc:26:cd:5a:83:a7:59:f1:d8:0a:cd:97:3c:77:93:
1f:44:1f:84:ae:b8:c0:80:2c:63:8b:1a:01:1a:1a:
8a:65:69:ff:50:f3:f5:44:56:47:23:f3:83:cd:8a:
57:50:ce:1f:2d:b2:ca:26:50:18:b2:ca:57:df:bc:
bd:6b:d1:15:d3:59:c6:a5:ca:4f:df:dc:2a:42:c6:
22:cd:63:14:cf:1f:13:09:3c:fd:a2:81:98:0f:19:
f6:e0:12:d1:de:e5:fe:90:d7:2f:14:3c:ce:c2:3f:
bf:d2:5a:8a:00:d2:85:1e:19:ad:cf:4c:58:13:61:
8d:a3:98:bf:d2:f6:e0:6f:fe:e7:03:d9:97:ee:27:
48:5e:63:6c:d5:15:60:ee:82:98:cc:3e:10:04:c3:
42:11:34:68:85:d8:63:14:39:4f:66:c3:52:d4:13:
8f:2e:4d:f8:53:2a:fa:c6:05:72:da:b0:59:bc:f2:
ee:1a:90:77:87:14:db:ec:fc:ee:40:ee:4d:f4:fa:
6a:0b:5b:58:05:a2:83:e6:ad:ec:6e:5f:c4:b3:5a:
ca:9c:2c:05:e2:15:15:8e:ca:75:7c:fc:6a:8e:19:
d2:a0:13:37:db:d3:66:d9:b1:4d:8b:27:c8:b5:c7:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:39:90:5F:27:E6:69:F8:4B:12:48:27:A2:6E:CA:F2:22:8A:9E:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/308a29-a965-47aa-be89-eb7049820837/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/308a29-a965-47aa-be89-eb7049820837/1/vTmQXyfmafhLEkgnom7K8iKKnrU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204757
Signature Algorithm: sha256WithRSAEncryption
9e:78:89:73:0b:87:00:53:66:48:51:71:be:9e:f2:66:63:c2:
79:e5:10:2b:7c:67:83:3a:1e:53:b1:4c:c1:ac:b0:e9:da:fd:
c2:e6:a0:8d:b0:ab:36:6f:f9:c6:fb:17:8e:d3:72:e0:7d:42:
74:f5:ca:f0:ba:a4:51:23:0e:42:66:8f:38:86:f3:05:16:23:
bd:f1:b3:cb:11:91:aa:f4:84:f6:39:8e:bd:8a:50:e9:e6:0a:
bf:6d:6b:af:6a:97:61:33:fa:6c:d0:ec:71:e9:9f:1c:f2:a3:
60:ea:3a:5c:22:1b:30:00:dd:b7:d0:7d:e5:0d:c8:aa:8f:5b:
a7:16:58:30:51:e3:ef:0d:56:dc:af:2f:c7:17:23:a0:57:57:
7d:52:2f:af:20:71:d9:31:fb:7c:45:cc:a0:76:a1:86:77:75:
fc:b9:b0:e0:7e:c9:9f:a5:f5:1c:c8:f3:c5:92:5d:84:94:f2:
4e:fb:a6:4b:b8:34:81:b6:dc:b9:41:98:dc:68:90:52:96:46:
32:0e:24:3f:b8:e6:0b:8d:78:92:10:0c:6c:d0:af:e5:19:8b:
0c:52:eb:25:67:bb:d2:1d:1d:9f:e1:c4:2b:5e:34:f6:5d:f2:
90:3c:ca:a1:bf:4b:62:4d:8f:aa:01:a9:f2:da:33:32:13:b8:
03:41:e6:e1
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAJ9MzTt1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDU1OTI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiZDM5OTA1ZjI3
ZTY2OWY4NGIxMjQ4MjdhMjZlY2FmMjIyOGE5ZWI1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAs9My1LYm0fESmJanDPrMJs1ag6dZ8dgKzZc8d5MfRB+E
rrjAgCxjixoBGhqKZWn/UPP1RFZHI/ODzYpXUM4fLbLKJlAYsspX37y9a9EV01nG
pcpP39wqQsYizWMUzx8TCTz9ooGYDxn24BLR3uX+kNcvFDzOwj+/0lqKANKFHhmt
z0xYE2GNo5i/0vbgb/7nA9mX7idIXmNs1RVg7oKYzD4QBMNCETRohdhjFDlPZsNS
1BOPLk34Uyr6xgVy2rBZvPLuGpB3hxTb7PzuQO5N9PpqC1tYBaKD5q3sbl/Es1rK
nCwF4hUVjsp1fPxqjhnSoBM329Nm2bFNiyfItcdvuwIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFL05kF8n5mn4SxJIJ6JuyvIiip61MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzMwOGEyOS1hOTY1LTQ3YWEt
YmU4OS1lYjcwNDk4MjA4MzcvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvMzA4YTI5LWE5NjUtNDdhYS1i
ZTg5LWViNzA0OTgyMDgzNy8xL3ZUbVFYeWZtYWZoTEVrZ25vbTdLOGlLS25yVS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMf1TANBgkqhkiG9w0BAQsFAAOCAQEAnniJcwuHAFNmSFFxvp7yZmPCeeUQ
K3xngzoeU7FMwayw6dr9wuagjbCrNm/5xvsXjtNy4H1CdPXK8LqkUSMOQmaPOIbz
BRYjvfGzyxGRqvSE9jmOvYpQ6eYKv21rr2qXYTP6bNDscemfHPKjYOo6XCIbMADd
t9B95Q3Iqo9bpxZYMFHj7w1W3K8vxxcjoFdXfVIvryBx2TH7fEXMoHahhnd1/Lmw
4H7Jn6X1HMjzxZJdhJTyTvumS7g0gbbcuUGY3GiQUpZGMg4kP7jmC414khAMbNCv
5RmLDFLrJWe70h0dn+HEK1409l3ykDzKob9LYk2PqgGp8tozMhO4A0Hm4Q==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:23 2025 by rpki-client