Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y-QypXVxjfrP9EG5YRNQO7hD6U8.cer
File: y-QypXVxjfrP9EG5YRNQO7hD6U8.cer (raw, json)
Hash identifier: M2MQg2OXGp+Yv5r1gSNA+J5U80jgMNMif9TS08iHqRU=
Subject key identifier: CB:E4:32:A5:75:71:8D:FA:CF:F4:41:B9:61:13:50:3B:B8:43:E9:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E4E730BDE5E79AE4003AF9ACB46FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/60d442-b120-4838-8289-66efe8e424b7/1/y-QypXVxjfrP9EG5YRNQO7hD6U8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/60d442-b120-4838-8289-66efe8e424b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:35:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 3187
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:4e:73:0b:de:5e:79:ae:40:03:af:9a:cb:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbe432a575718dfacff441b96113503bb843e94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:03:44:a3:4a:f6:53:31:be:88:04:48:34:
d0:40:04:bb:9b:f2:97:f9:a7:87:9d:cb:db:72:12:
04:ab:39:05:f7:f8:15:1c:99:aa:53:a7:21:9b:64:
a6:bc:0a:6a:fa:4c:19:41:67:3c:8a:0a:ef:d9:4d:
b8:a1:37:9a:98:a1:6d:d7:3f:2f:d5:49:f8:b6:0f:
1e:2b:a0:1c:7b:b0:94:87:75:63:dd:eb:6c:47:9c:
7c:48:c0:c4:e1:4a:2d:fc:86:9e:d4:ea:ac:af:df:
ff:ab:40:3f:e0:7c:92:d8:1b:30:c9:cb:2a:34:77:
4e:c8:b9:af:df:36:f1:19:ac:7d:68:7d:17:d8:17:
88:85:79:90:a8:db:05:92:02:bd:c8:48:b3:e3:8f:
4a:be:b3:9b:76:8d:fe:ac:0a:3b:49:d6:15:39:ad:
44:80:f4:75:a6:d1:f8:a9:15:70:8d:ae:26:ad:9a:
a2:bf:5d:09:7b:76:e1:31:c1:40:2b:8f:6d:c1:73:
de:65:fc:6e:91:5a:f4:14:7b:24:1c:39:98:b5:35:
af:6b:cc:c0:1b:55:90:0e:ea:c0:b3:f0:f7:cf:a0:
fa:5a:86:bb:dd:f3:ef:84:80:41:05:99:87:d3:4a:
ab:39:07:cc:6b:6e:4a:1c:b0:c7:62:81:db:30:59:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E4:32:A5:75:71:8D:FA:CF:F4:41:B9:61:13:50:3B:B8:43:E9:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/60d442-b120-4838-8289-66efe8e424b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/60d442-b120-4838-8289-66efe8e424b7/1/y-QypXVxjfrP9EG5YRNQO7hD6U8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3187
Signature Algorithm: sha256WithRSAEncryption
31:10:3b:fa:ae:32:fc:1f:81:11:af:3c:5f:25:66:8b:9a:58:
e8:b6:3e:e5:17:82:ff:e1:79:91:44:0a:a8:5e:47:98:f1:38:
64:0c:18:86:95:86:63:ad:10:1f:1e:0f:24:17:2e:02:f1:da:
1d:fd:be:a7:92:9c:d7:c6:3c:b9:dc:16:e2:cf:05:56:43:2f:
0b:12:f4:ea:e1:09:68:a2:d3:97:b3:66:98:73:02:72:96:3d:
e9:d7:ba:87:88:81:7c:69:00:9f:5d:58:a0:04:99:af:05:54:
e7:15:ce:7c:f6:97:2d:a6:b6:73:16:15:51:b2:e0:e2:bc:1f:
62:1b:a6:57:95:65:05:41:6d:9b:39:a8:e0:eb:aa:ca:5b:7b:
9b:1c:97:7e:b2:60:be:3c:d0:98:90:84:bc:08:ea:bf:08:94:
6c:d1:7d:c9:3b:34:92:1b:67:11:a4:e0:0b:a8:a0:70:78:b6:
aa:9f:02:13:41:06:a0:a2:af:33:8c:80:04:a7:65:b9:ca:e9:
16:57:4b:f9:d1:a5:b2:d8:c5:4b:c4:ea:94:2f:6e:60:83:69:
39:dd:7b:d7:2f:b6:26:77:7f:ce:6b:00:3a:cf:53:04:91:b9:
9d:94:e4:8b:79:38:cf:51:10:4f:8b:87:12:db:73:b7:d3:88:
8f:06:91:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:03:25 2025 by rpki-client