Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zp-2H5S2edzphVdU8qqEJNI9aVI.cer
File: Zp-2H5S2edzphVdU8qqEJNI9aVI.cer (raw, json)
Hash identifier: KguuoVvjlED0LnBnE+bMAy/zWOVCLZ4fF/qanY84E0E=
Subject key identifier: 66:9F:B6:1F:94:B6:79:DC:E9:85:57:54:F2:AA:84:24:D2:3D:69:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0182D020D3019E63E9FE17A6C4C65C3E0AAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/84ac87-869e-4266-a759-eb6e2c13e340/1/Zp-2H5S2edzphVdU8qqEJNI9aVI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/84ac87-869e-4266-a759-eb6e2c13e340/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Aug 2022 13:53:08 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 31448
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:20:d3:01:9e:63:e9:fe:17:a6:c4:c6:5c:3e:0a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 24 13:53:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=669fb61f94b679dce9855754f2aa8424d23d6952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:cd:03:91:af:0c:00:c0:a9:1e:9e:0b:b3:
c6:4f:22:a6:73:f8:6d:71:e4:7f:30:67:63:93:9f:
e0:0f:9e:10:fd:9e:9f:f6:69:14:29:16:ef:c8:be:
85:be:f7:40:07:bd:24:78:be:88:5b:55:5d:fb:f5:
88:96:92:fe:e3:28:1c:84:7f:45:c0:57:0d:05:64:
3e:a8:87:d0:1f:04:87:b5:db:ee:61:5f:88:2e:37:
9e:bb:6f:b7:72:b6:ea:26:f9:f2:8e:01:66:0a:34:
ce:52:38:65:8d:2a:e6:7d:cb:7e:6d:51:76:28:80:
81:bc:c0:c2:64:35:fe:e4:87:08:5e:9a:60:00:be:
c5:bf:36:5a:52:a4:41:d2:21:c2:87:b1:99:af:ea:
de:be:53:3f:99:c3:5f:4a:c0:20:77:5d:fd:ea:71:
e0:41:b8:0b:2f:00:4f:78:dc:c7:48:0c:4e:4b:87:
e8:7a:9e:73:d2:bc:48:37:c7:92:86:e1:e0:1b:9c:
c6:d0:c3:8d:0e:5a:7e:46:74:e2:b6:de:86:14:13:
c4:09:a4:41:23:0f:71:ec:a8:c8:27:5e:2a:b5:9f:
40:5a:2b:57:a2:55:9a:dd:04:4a:43:f8:5f:4b:ea:
fc:ad:09:99:37:d6:67:3c:b0:35:a5:a9:47:e1:6f:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9F:B6:1F:94:B6:79:DC:E9:85:57:54:F2:AA:84:24:D2:3D:69:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84ac87-869e-4266-a759-eb6e2c13e340/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84ac87-869e-4266-a759-eb6e2c13e340/1/Zp-2H5S2edzphVdU8qqEJNI9aVI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31448
Signature Algorithm: sha256WithRSAEncryption
93:0d:43:ab:bc:30:b8:07:18:ad:bc:11:2c:87:82:29:c0:7f:
e9:0b:e7:af:c9:92:ed:47:33:34:3f:f2:d9:60:d4:0b:47:e8:
9a:35:09:25:57:f3:d2:b3:6c:3d:86:77:33:f5:64:69:d8:2f:
eb:89:0f:42:f1:35:5c:36:99:24:67:b4:94:e7:04:e6:c2:4e:
71:d2:6e:71:0f:33:29:2c:a0:01:39:de:3c:92:87:9f:14:40:
c3:b9:1a:77:a5:0a:f5:18:73:14:97:5a:bc:3e:1d:28:18:17:
93:43:0c:e7:93:b4:07:3f:28:de:e3:9a:ea:bb:8c:a1:26:34:
f1:44:bf:31:72:7a:40:ae:fe:2e:e2:b3:8c:67:fe:a0:a6:77:
61:4e:70:a3:15:97:c3:c5:bc:08:32:18:c6:dd:10:c7:1c:f3:
3c:19:ea:a1:a8:50:98:62:10:2f:9a:1e:a7:0c:9b:cc:7e:fd:
fc:50:b8:bd:83:fc:a1:e8:cb:70:b0:48:ee:dc:ae:85:e9:64:
73:43:70:7b:94:b5:62:36:0e:8f:0b:5a:6c:a3:02:be:21:2c:
59:b9:31:72:c5:e8:67:21:b4:49:6a:31:f3:a8:1b:4b:09:3a:
79:71:a0:cd:97:ed:4f:8a:4b:e2:24:34:f2:cd:a9:b7:69:e8:
fa:d9:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:45:09 2025 by rpki-client