Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zw42WLNcxMAXD8UfbgZEVTZtNmA.cer
File: zw42WLNcxMAXD8UfbgZEVTZtNmA.cer (raw, json)
Hash identifier: dBLguAWnx2EAbVBYIcJzMhH2nD9aNj+LYZtMARZ/3m0=
Subject key identifier: CF:0E:36:58:B3:5C:C4:C0:17:0F:C5:1F:6E:06:44:55:36:6D:36:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C68724963C4F863B4F10BB1BB3CDAFDEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/6eca9a-301f-42ba-be0e-0ae4a5d8f6b5/1/zw42WLNcxMAXD8UfbgZEVTZtNmA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/6eca9a-301f-42ba-be0e-0ae4a5d8f6b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Dec 2023 13:09:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 8477
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:72:49:63:c4:f8:63:b4:f1:0b:b1:bb:3c:da:fd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 14 13:09:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf0e3658b35cc4c0170fc51f6e064455366d3660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:be:5f:40:27:bd:81:11:d1:ea:c7:19:73:
7e:fa:4f:e4:a1:5c:09:e6:3b:fa:f6:77:73:90:84:
85:d2:de:49:1c:c0:a8:70:a6:12:41:b4:7b:28:19:
9d:c4:b6:9e:99:48:01:21:31:27:7a:8e:56:ee:b7:
2e:1f:14:06:8d:21:58:6a:d6:2c:31:5d:89:7b:b6:
18:20:8c:14:f7:e2:c9:51:3e:9a:10:a8:b2:cc:4b:
90:e1:4b:74:ad:6b:a8:4a:90:24:05:fe:dd:8a:ca:
e7:fe:08:d3:16:99:2f:b8:97:93:23:c1:5c:df:c0:
f2:02:7c:0c:b3:a9:6b:e9:e6:ff:cd:7f:7a:18:dc:
d9:37:73:c6:c2:af:78:76:c0:2d:67:77:3e:f3:43:
1a:e0:14:5f:1e:eb:bf:3a:b8:af:cb:84:fd:f6:f6:
6d:b7:ad:80:fa:ab:b1:76:f5:fb:71:fb:fa:87:9e:
0d:04:d1:a9:a5:a3:bf:fd:1f:59:d4:09:3b:97:4d:
5f:74:03:2a:d3:63:69:85:d5:3b:24:b1:13:ef:56:
93:cf:25:74:be:ff:60:4b:90:2c:7e:d5:1e:59:8d:
9c:9e:10:5c:90:84:9e:c3:3e:88:d1:19:2f:47:2a:
2b:35:45:79:eb:cf:ce:e2:41:8d:8f:be:95:c9:99:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:36:58:B3:5C:C4:C0:17:0F:C5:1F:6E:06:44:55:36:6D:36:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6eca9a-301f-42ba-be0e-0ae4a5d8f6b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6eca9a-301f-42ba-be0e-0ae4a5d8f6b5/1/zw42WLNcxMAXD8UfbgZEVTZtNmA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8477
Signature Algorithm: sha256WithRSAEncryption
2d:88:47:2b:e5:82:22:ce:23:af:35:d9:4e:70:8f:ae:69:ec:
08:3e:6a:ce:a1:58:de:85:32:ff:50:0e:4d:0f:38:a7:08:f0:
f4:bc:65:2f:e2:7a:de:79:8b:ca:f3:97:88:65:2c:dc:f3:da:
0f:c8:d4:4a:d1:56:b0:8b:5f:1c:98:db:d5:51:98:03:d0:27:
eb:1b:14:2d:69:1b:06:ad:45:69:44:09:f5:95:0a:f9:6f:0f:
db:9b:e1:e4:cd:64:13:c0:7e:44:e1:b7:cb:2d:25:85:38:3c:
b8:9d:20:20:0b:2e:b5:cb:77:11:d2:2d:13:a5:20:77:3b:09:
3f:d9:06:05:28:f7:f2:ab:38:72:09:4f:e1:00:75:b3:d1:24:
02:9b:ae:54:e8:12:9e:d6:d1:70:21:1b:45:80:f2:0f:32:18:
6b:1a:74:e1:03:ac:6b:2a:47:2c:b9:f2:dc:90:5b:99:8d:ee:
f2:aa:e2:23:93:a1:a8:48:08:74:aa:77:e2:93:e4:cf:cf:04:
05:b0:8e:8f:b2:b9:c2:d4:8b:87:05:f6:56:d8:5b:d6:de:b5:
8b:c7:c1:11:ff:70:8a:46:b2:72:a3:66:26:f0:49:79:72:64:
fe:38:e5:b6:bc:f4:63:c7:e5:1d:03:b3:5d:8e:d3:84:3e:82:
1d:28:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:10:03 2025 by rpki-client