Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zAHFODIm_zHjXhY4mykLKx-cXSY.cer
File: zAHFODIm_zHjXhY4mykLKx-cXSY.cer (raw, json)
Hash identifier: tvP5UFmwkAap9O/z2m9TpYI+o6bLTP5tV/1GmdZzLC0=
Subject key identifier: CC:01:C5:38:32:26:FF:31:E3:5E:16:38:9B:29:0B:2B:1F:9C:5D:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0182C26CF0CD10A9D2D818A7856265FE034A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/82b51a-6027-45ac-beba-0699e23db01d/1/zAHFODIm_zHjXhY4mykLKx-cXSY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/82b51a-6027-45ac-beba-0699e23db01d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 21 Aug 2022 22:01:35 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 203852
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c2:6c:f0:cd:10:a9:d2:d8:18:a7:85:62:65:fe:03:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 21 22:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc01c5383226ff31e35e16389b290b2b1f9c5d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:ea:d7:2d:c7:d5:b8:34:26:92:68:16:64:
ff:ac:74:86:16:61:2a:6f:35:ea:75:a7:e3:b3:a4:
5d:a4:12:89:c6:5b:26:2b:a8:02:3d:53:89:c8:2e:
66:6c:5d:04:d7:ee:12:de:76:4a:8f:a4:6d:1e:6d:
40:b1:ed:9a:51:6e:57:9e:83:a9:c4:69:46:18:66:
9d:05:93:6c:6b:3e:46:4a:ed:30:50:a0:15:2a:34:
be:6d:c9:7e:e2:57:78:f4:9a:1d:24:cd:c1:55:f7:
6d:88:3a:01:73:15:3f:24:95:70:7e:24:fc:1b:b6:
54:78:be:c7:3a:92:16:3f:8b:18:30:d5:7a:6b:e3:
da:76:ac:d8:02:07:a4:16:6c:62:47:8c:e6:f3:07:
b6:53:a5:76:32:ad:22:b9:20:63:bb:45:af:e1:67:
15:97:af:84:c8:da:1f:b2:45:de:90:45:f0:a9:d5:
ff:92:e8:e8:0b:71:9d:81:2c:13:b3:2f:dd:56:18:
0c:72:c9:ae:77:e9:08:e1:df:5a:32:cb:3a:58:2c:
fa:a8:df:4b:7e:86:e9:2c:af:71:74:9d:7d:42:b3:
28:db:21:10:60:2d:79:a8:86:d4:d5:22:8f:68:fe:
7b:17:9e:14:ec:8f:0a:79:fb:73:4a:d5:5e:c2:c8:
cb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:01:C5:38:32:26:FF:31:E3:5E:16:38:9B:29:0B:2B:1F:9C:5D:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/82b51a-6027-45ac-beba-0699e23db01d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/82b51a-6027-45ac-beba-0699e23db01d/1/zAHFODIm_zHjXhY4mykLKx-cXSY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203852
Signature Algorithm: sha256WithRSAEncryption
79:eb:44:c3:d9:8e:42:95:89:25:38:8c:f4:64:32:ec:7e:fa:
f2:69:d2:1a:a0:3d:b4:87:d0:16:3b:5f:f9:7d:c7:75:e6:21:
90:5f:af:01:89:0a:c7:7a:87:a6:e6:0b:45:33:11:4c:a9:8c:
ce:71:01:61:bd:51:18:33:60:fe:36:57:3b:7e:79:3f:95:b1:
e3:c2:74:8c:82:13:b3:d9:bb:26:60:71:32:69:17:39:3c:18:
c2:6b:d7:97:95:84:01:60:72:97:7e:00:96:88:c8:5d:93:63:
7c:5c:bb:84:11:f1:9c:36:1d:d8:6c:66:dc:63:5d:ba:16:f9:
b3:25:58:9e:9d:5a:39:a6:eb:62:40:c8:00:06:42:71:da:6d:
a4:8d:37:11:79:57:dc:4b:ab:4c:22:42:b9:dd:7b:a0:a4:ef:
fb:52:26:a8:d4:62:05:d0:e7:2c:78:83:88:ee:92:a4:82:4c:
45:59:67:17:67:c3:a8:c9:f0:d9:ee:68:e6:8d:06:f8:f9:10:
50:b1:36:0a:e3:c9:eb:6c:0c:82:b9:c4:10:42:1c:a8:61:ff:
5d:82:87:63:62:56:09:46:6c:b2:bd:2a:99:9d:aa:06:31:90:
25:38:f4:d9:b4:69:5b:59:a3:4c:f1:35:89:d9:83:f3:cd:a4:
fd:aa:d9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:22:59 2025 by rpki-client