Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NOXUcneD1fGLu6Xs25Qt6uOFLT4.cer
File: NOXUcneD1fGLu6Xs25Qt6uOFLT4.cer (raw, json)
Hash identifier: EUNqGuZtBrGy5pjRbReMrwgDtrawd7l7LymjNMrrr28=
Subject key identifier: 34:E5:D4:72:77:83:D5:F1:8B:BB:A5:EC:DB:94:2D:EA:E3:85:2D:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA470251DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/a5be35-7fe5-4c29-b92c-ed12fc4aee9f/1/NOXUcneD1fGLu6Xs25Qt6uOFLT4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/a5be35-7fe5-4c29-b92c-ed12fc4aee9f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:06:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 51089
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731335774687 (0xaa470251df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:06:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34e5d4727783d5f18bbba5ecdb942deae3852d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:de:b2:56:3d:ae:ed:29:15:84:b2:33:11:
96:a4:23:b5:50:d4:8e:3e:54:0e:f3:ea:a9:bc:f3:
ec:83:f7:87:5a:47:6b:b6:f6:d4:50:49:6d:a0:78:
5c:27:09:59:3c:cf:cd:26:88:9b:ca:ec:95:cd:b2:
b1:80:ee:04:f8:38:be:aa:fe:01:0d:1c:bc:93:ae:
6e:c0:d8:8c:4b:44:4b:ba:52:a5:e5:f7:aa:0d:3f:
a9:a7:b0:0c:5f:8c:6c:e0:8a:11:a2:7d:6b:8d:e2:
f1:a6:8a:d2:c5:93:93:d4:25:bf:f1:24:d1:bb:0b:
f1:92:0f:2f:96:64:52:cf:a8:a8:17:ed:b8:13:f9:
7a:99:dd:69:9f:7b:42:13:27:26:ea:b6:63:c8:31:
bb:bb:aa:29:6b:4b:0e:98:d5:10:44:3d:43:d2:ad:
c8:75:ba:4c:db:2e:8a:7b:ba:dc:3a:bb:ae:a5:90:
07:e9:9e:d7:fd:48:a7:ac:69:f9:09:82:5c:2a:55:
d6:0e:c1:56:92:50:4b:ef:5e:41:02:15:92:f0:1c:
41:9e:2f:43:ea:ea:9a:4b:65:e4:dc:2f:c4:b5:12:
8c:a2:dc:57:f4:d3:50:a7:e1:13:cb:45:86:2c:7a:
e1:e4:ec:78:51:ed:0b:8a:07:94:d7:2c:4c:b6:9f:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E5:D4:72:77:83:D5:F1:8B:BB:A5:EC:DB:94:2D:EA:E3:85:2D:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5be35-7fe5-4c29-b92c-ed12fc4aee9f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5be35-7fe5-4c29-b92c-ed12fc4aee9f/1/NOXUcneD1fGLu6Xs25Qt6uOFLT4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51089
Signature Algorithm: sha256WithRSAEncryption
6a:85:80:5d:c4:30:fb:f7:28:fe:ec:ac:ee:9c:bb:c3:81:15:
42:8f:46:08:85:e3:39:ed:ba:18:21:a0:db:0e:99:5f:cb:20:
fa:ac:8c:a4:02:a6:0b:e4:75:f5:d7:3d:02:12:90:8c:da:6e:
32:c5:af:a6:3c:86:25:3c:ab:45:06:99:19:5f:50:21:eb:2f:
f2:d0:ef:55:76:84:2e:f2:e0:66:c0:75:93:e1:ae:83:58:e5:
82:b1:66:f3:d3:86:6e:5c:dd:3f:68:b6:3a:35:7d:93:d9:e3:
46:22:0e:4b:71:ed:e2:f9:2c:e0:85:31:1f:84:7c:62:fa:d5:
4f:85:7a:56:96:7d:9a:b9:d7:62:ca:a9:1a:fc:2d:04:eb:39:
a3:fd:92:28:2d:de:a0:5a:d6:26:e7:81:13:3f:6b:70:e3:81:
16:1a:a1:c8:5b:a7:e2:0f:ce:0c:13:a4:5b:94:3e:14:c1:23:
1f:d2:67:9c:bc:e3:56:b3:73:40:4f:bc:96:e2:88:5e:04:99:
a7:df:25:04:b7:5f:83:b3:83:bc:00:62:12:8a:ae:a4:e3:7e:
e1:36:8d:3e:6e:89:e0:1e:de:3b:f9:64:3f:a0:e8:b5:db:98:
d8:06:3d:95:4f:62:bb:5e:47:38:e5:0e:0a:c3:ad:8c:a9:63:
2e:35:8c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:13:52 2025 by rpki-client