Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yRu8xaTlz5otKOco37wTD2iLuN0.cer
File: yRu8xaTlz5otKOco37wTD2iLuN0.cer (raw, json)
Hash identifier: BMv9pkA1ram2dAGA3kd5LxGxROQzdkblBgYjnbbfmXc=
Subject key identifier: C9:1B:BC:C5:A4:E5:CF:9A:2D:28:E7:28:DF:BC:13:0F:68:8B:B8:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A3A5F041D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/yRu8xaTlz5otKOco37wTD2iLuN0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:55:52 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 35616
AS: 62242
IP: 193.23.28.0/22
IP: 2a04:9ac0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702863655378 (0xa3a5f041d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c91bbcc5a4e5cf9a2d28e728dfbc130f688bb8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:d5:3e:4f:92:03:06:50:19:f2:5a:24:0d:
1a:9f:44:a4:95:92:4b:f1:00:9f:34:5f:19:2b:b6:
c0:0f:ae:68:2e:45:2f:01:87:6f:51:cd:3e:45:14:
22:ef:59:43:c5:b8:94:1c:d7:9e:ee:a1:71:f1:41:
1a:3c:f0:89:09:87:3c:4f:aa:5d:e2:4a:fb:bf:3f:
02:7b:91:02:bd:dd:cf:22:70:1f:98:11:8b:fb:92:
0e:a1:bb:79:88:42:5a:ed:b5:a7:9d:00:db:9e:20:
b2:b0:90:54:44:04:7b:ae:2e:35:eb:19:7f:a6:d2:
82:8a:e6:d4:22:05:fd:75:db:7f:ac:ba:15:37:d4:
b2:4e:ac:ee:6b:53:d9:08:0d:48:f2:46:0d:bb:f0:
a8:2e:63:d1:65:57:6e:f7:24:60:a9:4c:b5:28:fe:
e7:73:3f:e2:11:63:d0:82:44:f0:46:f7:c4:c2:0d:
cb:50:c4:18:66:51:95:f2:c8:89:8b:3c:6e:3e:e8:
e0:bc:60:98:a7:f1:31:2e:95:4a:f0:e1:25:60:2a:
86:80:68:b6:21:70:3d:af:c6:91:77:69:68:e8:e1:
24:93:73:57:a0:ac:d1:7f:83:62:a5:b8:cb:5d:29:
b9:ef:0b:00:19:bc:9f:4a:52:8b:c6:36:16:a2:d4:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1B:BC:C5:A4:E5:CF:9A:2D:28:E7:28:DF:BC:13:0F:68:8B:B8:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/yRu8xaTlz5otKOco37wTD2iLuN0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.28.0/22
IPv6:
2a04:9ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35616
62242
Signature Algorithm: sha256WithRSAEncryption
78:28:c2:e4:87:65:79:68:55:d0:68:b6:f1:d4:be:45:eb:5a:
7f:ef:4e:3a:2f:ab:40:dc:77:df:5b:4d:43:ec:74:13:09:4f:
49:c4:7f:79:34:3a:66:e3:05:a3:cd:5e:4c:54:95:78:5a:1e:
0c:78:ae:a3:dd:79:0a:fc:ae:6c:f2:c2:06:68:78:df:a3:e0:
52:7e:64:e4:4c:15:68:32:66:fb:04:b4:2a:fd:2b:2c:b6:49:
16:3a:ed:77:d8:4d:81:2e:8e:a3:db:a2:38:14:e4:0f:de:e5:
a2:03:9a:40:e6:7a:4d:87:91:88:d6:01:a2:68:f3:87:4a:4d:
d1:27:64:04:2b:f6:d1:3d:7f:9f:9a:5a:f4:cf:71:12:17:6f:
64:79:03:19:d9:a3:61:95:78:ba:e1:d0:e3:d3:b7:65:24:f6:
d5:d2:ee:d3:d9:08:ba:f0:54:d1:57:08:54:4b:f6:d2:ca:7d:
20:72:d5:8f:c8:52:1a:33:c7:e4:20:c1:48:b6:32:9a:62:17:
18:66:35:21:0e:9b:1a:2f:22:78:c8:bc:83:82:b0:1f:1d:a1:
28:2a:2c:81:91:38:7a:fd:42:58:17:0c:6d:dd:69:da:77:b6:
16:82:27:cc:fb:e5:de:73:cf:39:93:1c:07:4d:93:d4:d6:b0:
4d:d5:e9:f7
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIGAKOl8EHSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDk1NTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjOTFiYmNjNWE0
ZTVjZjlhMmQyOGU3MjhkZmJjMTMwZjY4OGJiOGRkMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA1MfVPk+SAwZQGfJaJA0an0SklZJL8QCfNF8ZK7bAD65o
LkUvAYdvUc0+RRQi71lDxbiUHNee7qFx8UEaPPCJCYc8T6pd4kr7vz8Ce5ECvd3P
InAfmBGL+5IOobt5iEJa7bWnnQDbniCysJBURAR7ri416xl/ptKCiubUIgX9ddt/
rLoVN9SyTqzua1PZCA1I8kYNu/CoLmPRZVdu9yRgqUy1KP7ncz/iEWPQgkTwRvfE
wg3LUMQYZlGV8siJizxuPujgvGCYp/ExLpVK8OElYCqGgGi2IXA9r8aRd2lo6OEk
k3NXoKzRf4NipbjLXSm57wsAGbyfSlKLxjYWotTcGwIDAQABo4ICtDCCArAwHQYD
VR0OBBYEFMkbvMWk5c+aLSjnKN+8Ew9oi7jdMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2MxNzZhNy0wYThkLTQ1N2It
OTRhNy1mZmJhOGRjNmQzM2MvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvYzE3NmE3LTBhOGQtNDU3Yi05
NGE3LWZmYmE4ZGM2ZDMzYy8xL3lSdTh4YVRsejVvdEtPY28zN3dURDJpTHVOMC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCwRccMA0EAgACMAcDBQMqBJrAMB8GCCsGAQUFBwEIAQH/BBAwDqAM
MAoCAwCLIAIDAPMiMA0GCSqGSIb3DQEBCwUAA4IBAQB4KMLkh2V5aFXQaLbx1L5F
61p/7046L6tA3HffW01D7HQTCU9JxH95NDpm4wWjzV5MVJV4Wh4MeK6j3XkK/K5s
8sIGaHjfo+BSfmTkTBVoMmb7BLQq/SsstkkWOu132E2BLo6j26I4FOQP3uWiA5pA
5npNh5GI1gGiaPOHSk3RJ2QEK/bRPX+fmlr0z3ESF29keQMZ2aNhlXi64dDj07dl
JPbV0u7T2Qi68FTRVwhUS/bSyn0gctWPyFIaM8fkIMFItjKaYhcYZjUhDpsaLyJ4
yLyDgrAfHaEoKiyBkTh6/UJYFwxt3Wnad7YWgifM++Xec885kxwHTZPU1rBN1en3
-----END CERTIFICATE-----
Generated at Sat Jun 14 01:37:51 2025 by rpki-client