Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x4dbBxA0YCirKarn9vE3Znp5l44.cer
File: x4dbBxA0YCirKarn9vE3Znp5l44.cer (raw, json)
Hash identifier: Kq0puYW8pxByNS8Ugek5rc54xCiZSBNMqHYaYUD91Dw=
Subject key identifier: C7:87:5B:07:10:34:60:28:AB:29:AA:E7:F6:F1:37:66:7A:79:97:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0188AA72D3D644D64FF2FE543AC1963D2A4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/C7875B0710346028AB29AAE7F6F137667A79978E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 11 Jun 2023 12:33:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 60900
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:aa:72:d3:d6:44:d6:4f:f2:fe:54:3a:c1:96:3d:2a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 11 12:33:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7875b0710346028ab29aae7f6f137667a79978e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:71:ad:3a:6f:57:6c:59:fb:50:7d:96:19:
3c:60:59:a5:c3:09:b9:d2:e7:0b:44:a1:5a:e7:ea:
f9:d9:f8:02:db:21:79:fe:86:54:53:65:4c:26:4d:
28:6b:57:fc:ff:21:3e:b0:73:f4:96:06:ff:cc:cb:
38:85:55:fa:90:b8:4a:ed:38:eb:c4:d0:75:7c:38:
07:78:f1:ad:f2:35:96:cc:ca:b7:23:8e:c1:de:55:
4b:e1:c2:a7:25:93:6b:f7:9a:6a:65:53:68:54:08:
13:b4:ae:e8:eb:29:13:71:fe:31:f0:c4:6e:be:82:
71:7d:f2:47:60:b7:57:28:5b:fc:bd:58:a4:ea:f7:
ef:0e:f9:1a:33:1f:c5:9a:01:57:44:fe:ee:8b:9c:
e7:e8:60:6a:03:ba:2e:c8:3c:a0:83:7a:91:f2:66:
ec:46:bc:8d:b2:9b:ff:19:47:38:f8:82:6d:7c:44:
01:7a:00:65:c1:48:ba:32:9e:2d:59:22:b4:0c:46:
04:ba:16:e5:e5:35:cd:7c:c1:d9:d9:53:5f:b8:e0:
40:6a:cd:1b:c3:dd:b2:56:b0:d0:24:b4:4d:a1:09:
cd:ab:aa:25:09:72:8c:c4:96:9c:1f:0b:05:d3:a6:
3b:75:a6:cc:ae:4c:50:d5:d3:74:84:df:59:6d:62:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:5B:07:10:34:60:28:AB:29:AA:E7:F6:F1:37:66:7A:79:97:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/0/C7875B0710346028AB29AAE7F6F137667A79978E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60900
Signature Algorithm: sha256WithRSAEncryption
88:74:54:22:ad:df:1b:34:d1:64:65:40:26:ee:87:dd:d3:bf:
f5:60:18:f8:a6:c7:22:eb:91:7f:04:9a:e4:56:35:75:a1:47:
7e:ae:aa:d1:ed:9a:b4:2d:95:60:01:45:52:e2:52:a9:20:f5:
ee:41:43:42:36:26:e7:bf:86:dc:4b:8b:35:82:3f:4b:06:95:
fa:50:87:19:65:93:cd:e0:d3:88:4e:ab:44:d4:22:be:bc:e7:
bb:86:eb:e7:ce:87:7c:69:a3:9d:76:8c:e1:66:3b:4e:a5:0f:
da:4c:81:8e:52:09:7f:22:59:bd:e2:3c:30:2d:c1:54:da:d1:
3a:da:a9:cd:e9:2f:2d:44:da:d2:3c:89:62:db:17:d4:61:87:
f1:ff:ae:1b:00:c8:68:70:16:22:66:69:d4:a6:b4:55:02:e2:
8f:06:c1:5e:df:8e:cb:7d:72:34:6a:65:b3:d7:ef:ce:8c:a3:
af:d5:6c:65:10:d3:05:ae:f2:52:20:b6:3f:19:60:b7:69:1e:
e9:d3:ee:3d:2c:2b:e1:30:76:30:62:cc:a4:8f:4e:e8:e5:57:
b9:d1:9b:e7:f6:96:09:fe:81:20:09:18:55:a9:e8:27:49:b0:
fc:84:64:ae:6c:28:6b:31:42:61:b5:57:0b:df:1a:d4:e2:40:
b8:60:5f:09
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAYiqctPWRNZP8v5UOsGWPSpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNjExMTIzMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzg3NWIwNzEwMzQ2MDI4YWIyOWFhZTdmNmYxMzc2NjdhNzk5NzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUZxrTpvV2xZ+1B9lhk8YFmlwwm5
0ucLRKFa5+r52fgC2yF5/oZUU2VMJk0oa1f8/yE+sHP0lgb/zMs4hVX6kLhK7Tjr
xNB1fDgHePGt8jWWzMq3I47B3lVL4cKnJZNr95pqZVNoVAgTtK7o6ykTcf4x8MRu
voJxffJHYLdXKFv8vVik6vfvDvkaMx/FmgFXRP7ui5zn6GBqA7ouyDygg3qR8mbs
RryNspv/GUc4+IJtfEQBegBlwUi6Mp4tWSK0DEYEuhbl5TXNfMHZ2VNfuOBAas0b
w92yVrDQJLRNoQnNq6olCXKMxJacHwsF06Y7dabMrkxQ1dN0hN9ZbWI3TwIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFMeHWwcQNGAoqymq5/bxN2Z6eZeOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q1Nzg5
NTNkLWU2ZTktNGZmYS1iNWFjLWFjOTdiNTMyN2YxMS8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDU3
ODk1M2QtZTZlOS00ZmZhLWI1YWMtYWM5N2I1MzI3ZjExLzAvQzc4NzVCMDcxMDM0
NjAyOEFCMjlBQUU3RjZGMTM3NjY3QTc5OTc4RS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA7eQw
DQYJKoZIhvcNAQELBQADggEBAIh0VCKt3xs00WRlQCbuh93Tv/VgGPimxyLrkX8E
muRWNXWhR36uqtHtmrQtlWABRVLiUqkg9e5BQ0I2Jue/htxLizWCP0sGlfpQhxll
k83g04hOq0TUIr6857uG6+fOh3xpo512jOFmO06lD9pMgY5SCX8iWb3iPDAtwVTa
0Traqc3pLy1E2tI8iWLbF9Rhh/H/rhsAyGhwFiJmadSmtFUC4o8GwV7fjst9cjRq
ZbPX786Mo6/VbGUQ0wWu8lIgtj8ZYLdpHunT7j0sK+EwdjBizKSPTujlV7nRm+f2
lgn+gSAJGFWp6CdJsPyEZK5sKGsxQmG1VwvfGtTiQLhgXwk=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:07 2025 by rpki-client