Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YC_y7_Ljdv5AkvweiNcA1wMFUis.cer
File: YC_y7_Ljdv5AkvweiNcA1wMFUis.cer (raw, json)
Hash identifier: T5ZeGDkMFy29WuO+jJ3ULnV08AI7p5n5FYski+MadHw=
Subject key identifier: 60:2F:F2:EF:F2:E3:76:FE:40:92:FC:1E:88:D7:00:D7:03:05:52:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B1A582A939
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/84913f-840b-489d-8c85-f89c033bf152/1/YC_y7_Ljdv5AkvweiNcA1wMFUis.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/84913f-840b-489d-8c85-f89c033bf152/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 May 2022 16:10:37 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 50799
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762986015033 (0xb1a582a939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 12 16:10:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=602ff2eff2e376fe4092fc1e88d700d70305522b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:66:a8:b0:9b:45:79:95:05:29:16:f6:e8:
51:f8:ab:99:8a:35:ce:88:93:28:e5:b6:83:b1:b6:
22:1d:2c:3e:76:de:ce:82:72:7f:7f:08:26:a9:5f:
0a:5e:87:34:59:1f:0d:2e:fc:03:d4:9d:54:fb:70:
8e:57:1e:71:77:b2:45:0b:ca:5d:72:b3:fb:4c:69:
bf:00:00:68:1b:e0:12:a7:c2:d1:94:64:8a:b8:5f:
54:1f:09:b9:7a:6f:13:f6:0a:2d:5d:00:0e:0c:7d:
ef:1a:29:ef:cd:92:0c:1a:6b:d7:63:0a:f5:fd:f8:
96:f6:93:3e:fa:7f:ed:ec:51:f2:be:b1:0d:8e:2e:
33:c9:79:4c:3d:82:5c:6f:c5:d3:59:da:05:65:ca:
6e:e3:01:fd:fb:5b:9b:85:93:16:ae:3d:51:75:be:
73:49:9a:86:8e:de:4c:d6:96:3d:d7:75:ce:86:24:
8e:72:7d:d4:8f:1a:23:f7:00:be:a3:fe:bc:74:22:
3b:d7:bd:85:d3:27:51:11:73:5d:cc:3a:da:32:0c:
3b:05:86:7e:0c:c3:a5:7f:76:1f:53:8f:02:10:1e:
4e:b1:9e:a4:d7:a1:d8:72:14:7c:d6:d2:34:b3:6d:
67:80:35:c1:93:1b:b5:e1:a0:48:93:74:11:c0:a2:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2F:F2:EF:F2:E3:76:FE:40:92:FC:1E:88:D7:00:D7:03:05:52:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/84913f-840b-489d-8c85-f89c033bf152/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/84913f-840b-489d-8c85-f89c033bf152/1/YC_y7_Ljdv5AkvweiNcA1wMFUis.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50799
Signature Algorithm: sha256WithRSAEncryption
19:f5:62:60:c8:69:8a:3d:16:72:dd:44:e7:e1:6a:b2:90:9b:
f0:e2:24:4b:32:f7:7b:f1:e2:c0:64:63:fa:d7:fc:eb:4b:4d:
b0:23:b4:5c:39:94:b2:82:ab:ee:a4:6d:32:ff:30:3c:8f:47:
9f:c6:6e:64:fb:16:49:e6:cd:03:65:60:ae:93:e3:b6:bc:0d:
36:4f:24:33:d5:8e:2f:d8:56:ee:84:82:9e:9b:f0:11:b1:0f:
48:90:6a:04:84:aa:81:e5:ea:0d:6d:ea:9c:8a:2c:82:74:97:
c1:ad:22:dd:cb:36:a9:b6:81:4a:26:5e:f1:db:99:55:45:5a:
8a:8b:bc:12:f8:0f:2c:36:77:46:38:a2:53:9e:f2:58:c6:cf:
33:82:64:8f:39:53:5a:22:d8:b7:e0:cc:d1:7e:c2:72:72:87:
60:a5:78:f8:d2:4e:f6:df:56:b8:df:57:1b:6b:4a:45:af:98:
5c:7c:15:09:4b:3b:86:c5:fa:dc:3a:b7:98:f3:2f:62:a9:8a:
93:da:16:7c:4b:ed:c5:17:ef:0e:79:83:22:d7:bf:42:16:e0:
7f:3c:0d:93:bd:06:df:6d:cb:60:f4:6c:92:ba:1f:59:bb:e3:
58:ad:3c:3a:f8:58:03:d9:15:b0:e4:74:47:52:54:f3:f9:58:
ad:97:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:27:31 2025 by rpki-client