Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ErC0iVPOd3hOAP1SYnEL_z2JHjw.cer
File: ErC0iVPOd3hOAP1SYnEL_z2JHjw.cer (raw, json)
Hash identifier: cIO+2ESpUISZVzrPv945T6U6V6AvchJAIvG2hP+6vvg=
Subject key identifier: 12:B0:B4:89:53:CE:77:78:4E:00:FD:52:62:71:0B:FF:3D:89:1E:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857839E0FCC5134CEA57A838952826A54C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/a07157-8ba2-46e8-8896-ab5e3e98e653/1/ErC0iVPOd3hOAP1SYnEL_z2JHjw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/a07157-8ba2-46e8-8896-ab5e3e98e653/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 03 Jan 2023 15:22:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 200256
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:39:e0:fc:c5:13:4c:ea:57:a8:38:95:28:26:a5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 3 15:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12b0b48953ce77784e00fd5262710bff3d891e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:97:f9:47:91:28:c1:f7:a2:51:5d:0e:ac:ab:
de:c0:a9:31:19:9e:73:bd:b9:b9:2a:cb:8e:5c:a2:
0b:0b:16:5d:cb:d8:fe:c3:ad:32:57:16:05:05:bf:
a2:ec:c7:e4:2b:1c:2a:d3:64:89:2d:9e:2e:85:ad:
70:09:c6:d4:d9:ef:81:c8:1b:fb:9a:04:cf:56:99:
b2:ba:8b:91:91:55:49:d7:e1:35:1e:3f:e0:f4:af:
f9:ad:86:da:db:1d:0e:fb:2a:69:d3:d4:f8:6b:c0:
c1:61:8a:3a:e7:fa:e0:8d:8e:a9:c9:a0:8b:15:d3:
38:b9:8e:aa:25:af:28:70:60:72:4c:26:7d:d4:34:
ab:1b:c7:f6:c5:e5:66:ce:e5:05:c1:34:6d:10:c3:
3f:69:a2:c3:0a:df:04:e6:21:17:38:a1:2a:d6:2c:
fd:eb:42:31:ec:7b:65:b9:e3:3b:ab:1b:2f:4d:20:
b8:fb:23:3f:16:ce:78:11:07:1c:3f:c9:00:2c:d0:
85:87:89:45:66:7b:72:cd:02:da:8c:44:6f:49:64:
6c:65:0f:5f:69:15:59:11:87:32:c6:2e:bf:da:9d:
ee:f1:5d:62:bd:26:1e:c1:3f:c6:c4:cf:f0:22:7e:
55:04:ef:88:77:28:14:98:44:96:15:87:b7:4d:47:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B0:B4:89:53:CE:77:78:4E:00:FD:52:62:71:0B:FF:3D:89:1E:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a07157-8ba2-46e8-8896-ab5e3e98e653/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a07157-8ba2-46e8-8896-ab5e3e98e653/1/ErC0iVPOd3hOAP1SYnEL_z2JHjw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200256
Signature Algorithm: sha256WithRSAEncryption
b1:9d:b5:12:3f:06:3d:6e:42:55:d3:eb:99:fb:49:5b:3b:9f:
44:cc:9c:bd:97:b3:38:8f:97:21:a1:19:7d:51:85:3b:2a:8e:
97:cc:be:81:1e:1e:8f:c4:52:52:86:84:e7:28:c9:4f:3e:57:
a0:e7:89:d6:f7:2f:bb:78:a4:4c:8e:37:86:64:da:07:ed:0f:
64:69:28:e2:87:9e:ca:3e:c1:d2:c4:ca:e2:ac:d3:90:13:b1:
b3:a1:87:e2:dc:b1:04:b6:27:26:93:16:ec:ec:44:2a:46:dc:
84:d1:58:8b:13:bb:69:7a:c5:0f:e7:f5:1d:2c:32:9a:b9:1b:
09:db:22:ec:ec:7f:99:1c:38:c9:af:a2:00:46:62:b9:f4:fe:
e3:f5:60:98:a6:28:d1:ef:f9:09:24:d8:e7:cb:81:8c:dc:94:
03:a0:33:ec:a1:77:3c:29:f6:1a:76:3e:30:10:c5:22:17:62:
ed:41:8a:d8:99:d7:87:79:6e:ee:dc:d6:02:2e:ac:4d:76:39:
6a:f8:49:23:83:ce:40:72:84:b9:17:66:a3:e4:64:ce:3e:5f:
58:ce:62:2b:6d:b5:19:56:57:37:47:f2:fb:78:bd:16:0a:c5:
e2:f4:50:74:43:cf:2b:04:16:1f:d1:31:41:ae:6e:48:2d:25:
10:ff:60:f7
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYV4OeD8xRNM6leoOJUoJqVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAzMTUyMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmIwYjQ4OTUzY2U3Nzc4NGUwMGZkNTI2MjcxMGJmZjNkODkxZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Zf5R5EowfeiUV0OrKvewKkxGZ5z
vbm5KsuOXKILCxZdy9j+w60yVxYFBb+i7MfkKxwq02SJLZ4uha1wCcbU2e+ByBv7
mgTPVpmyuouRkVVJ1+E1Hj/g9K/5rYba2x0O+ypp09T4a8DBYYo65/rgjY6pyaCL
FdM4uY6qJa8ocGByTCZ91DSrG8f2xeVmzuUFwTRtEMM/aaLDCt8E5iEXOKEq1iz9
60Ix7HtlueM7qxsvTSC4+yM/Fs54EQccP8kALNCFh4lFZntyzQLajERvSWRsZQ9f
aRVZEYcyxi6/2p3u8V1ivSYewT/GxM/wIn5VBO+IdygUmESWFYe3TUfSRQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBKwtIlTznd4TgD9UmJxC/89iR48MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5L2EwNzE1
Ny04YmEyLTQ2ZTgtODg5Ni1hYjVlM2U5OGU2NTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvYTA3MTU3
LThiYTItNDZlOC04ODk2LWFiNWUzZTk4ZTY1My8xL0VyQzBpVlBPZDNoT0FQMVNZ
bkVMX3oySkhqdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMOQDANBgkqhkiG9w0BAQsFAAOCAQEAsZ21Ej8GPW5C
VdPrmftJWzufRMycvZezOI+XIaEZfVGFOyqOl8y+gR4ej8RSUoaE5yjJTz5XoOeJ
1vcvu3ikTI43hmTaB+0PZGko4oeeyj7B0sTK4qzTkBOxs6GH4tyxBLYnJpMW7OxE
KkbchNFYixO7aXrFD+f1HSwymrkbCdsi7Ox/mRw4ya+iAEZiufT+4/VgmKYo0e/5
CSTY58uBjNyUA6Az7KF3PCn2GnY+MBDFIhdi7UGK2JnXh3lu7tzWAi6sTXY5avhJ
I4POQHKEuRdmo+Rkzj5fWM5iK221GVZXN0fy+3i9FgrF4vRQdEPPKwQWH9ExQa5u
SC0lEP9g9w==
-----END CERTIFICATE-----
Generated at Sat May 10 19:45:27 2025 by rpki-client