Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zfV9QJ5oeAatx8KLkN11JFL7jBM.cer
File: zfV9QJ5oeAatx8KLkN11JFL7jBM.cer (raw, json)
Hash identifier: eoSonBQ/RqolExyc3SsDNTH0T2Fvy/eg+RZfqZE1sC0=
Subject key identifier: CD:F5:7D:40:9E:68:78:06:AD:C7:C2:8B:90:DD:75:24:52:FB:8C:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A342D4CF36
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/c452b6-944c-4128-a55d-3123f5699d72/1/zfV9QJ5oeAatx8KLkN11JFL7jBM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/c452b6-944c-4128-a55d-3123f5699d72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:03:46 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210977
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701200912182 (0xa342d4cf36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdf57d409e687806adc7c28b90dd752452fb8c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:89:0e:6e:63:89:b8:ef:56:3f:28:20:00:
83:7e:98:c1:d6:c7:ff:0d:43:fd:71:26:47:a9:35:
7d:f7:1f:9e:05:01:96:29:6a:15:24:ed:14:b7:bc:
ac:e8:96:db:92:ee:2c:a0:33:c5:d8:0d:0f:05:fa:
ae:68:37:d8:93:c5:d5:92:f1:82:7a:a7:cd:35:61:
c7:66:2b:ba:1b:89:cb:1f:36:6b:ff:68:fa:0d:51:
87:f8:bf:af:7f:d6:58:a3:b1:cd:0a:0c:d6:cc:89:
75:c9:04:0f:82:45:65:11:de:ae:1e:fc:1c:ec:c4:
ad:08:6c:3d:7f:d9:be:7f:ab:c6:ff:23:7c:c6:52:
ee:93:b0:46:69:2b:fb:f7:ce:5e:09:c9:47:be:6f:
42:05:c4:65:f5:20:68:47:46:0d:de:d7:c2:8f:f6:
63:4d:99:2f:a6:57:11:c5:ec:ef:29:93:f6:67:54:
77:bb:7e:1a:b3:b4:18:dc:c8:3f:9a:71:c0:4f:2a:
c0:0b:e4:03:9e:16:97:d7:0c:5e:2b:2d:a4:4a:8c:
fd:92:ba:59:cb:ab:6e:53:8b:66:69:2f:ff:69:db:
6c:30:92:10:5c:62:f9:5a:e7:7e:b6:45:15:df:6f:
07:93:b1:69:04:ce:06:ea:66:6e:31:69:fb:91:3d:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F5:7D:40:9E:68:78:06:AD:C7:C2:8B:90:DD:75:24:52:FB:8C:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c452b6-944c-4128-a55d-3123f5699d72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c452b6-944c-4128-a55d-3123f5699d72/1/zfV9QJ5oeAatx8KLkN11JFL7jBM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210977
Signature Algorithm: sha256WithRSAEncryption
20:3d:c4:e2:2c:2e:ce:47:21:88:ba:c5:fa:53:1b:2a:7c:0a:
91:34:f5:15:ee:29:ce:f3:40:6a:4c:f1:e7:26:93:aa:72:b4:
90:29:ad:81:e2:e8:cc:e8:8e:7c:a1:06:e4:dc:e4:37:72:c6:
1a:64:ee:9b:8f:90:4a:d6:76:2a:df:28:21:11:9c:a1:70:27:
e4:46:a7:86:ab:5f:ae:2b:c8:03:bc:f4:1e:e6:ed:b4:97:9c:
e8:c2:28:f8:f7:91:99:07:c3:5f:7d:35:94:33:8a:eb:ef:c0:
fe:5f:f3:85:83:1d:e5:60:2c:c4:59:94:9a:0d:7e:85:44:e5:
04:4e:28:1e:21:71:a3:a9:61:5a:ac:d0:12:5e:37:e4:1d:f9:
aa:7c:17:15:42:c7:16:c5:13:fa:e8:11:02:74:1c:0f:63:54:
e1:bf:3c:41:29:f3:08:82:96:43:8a:4d:81:c9:02:33:52:db:
4c:3d:22:aa:1f:b7:8c:fe:0a:97:9d:d7:21:17:a0:fd:95:83:
4f:3b:75:63:2c:b4:24:a8:b3:5c:cf:55:77:79:41:9d:d2:10:
3b:7e:19:7b:0d:0e:ad:5b:e2:8b:75:e8:cb:7e:41:c2:e4:a1:
08:d4:3b:8e:da:52:e1:d7:9f:2b:f4:ed:ea:8d:81:c2:b0:1f:
a0:56:71:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:38:42 2025 by rpki-client