Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rf0_D8x-GvBSmX2TVFYqyezSwZE.cer
File: rf0_D8x-GvBSmX2TVFYqyezSwZE.cer (raw, json)
Hash identifier: nrnMJTY7/mc4NcwyxRk81sMvAf0Jz6peoeSPE+YaaQ4=
Subject key identifier: AD:FD:3F:0F:CC:7E:1A:F0:52:99:7D:93:54:56:2A:C9:EC:D2:C1:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B52693909B89938725758F6A603D0F39F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/00871d-8f2e-486c-84af-e813d97ec3e5/1/rf0_D8x-GvBSmX2TVFYqyezSwZE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/00871d-8f2e-486c-84af-e813d97ec3e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 21 Oct 2023 13:25:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 216121
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:52:69:39:09:b8:99:38:72:57:58:f6:a6:03:d0:f3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 21 13:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adfd3f0fcc7e1af052997d9354562ac9ecd2c191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:00:b0:b5:b6:79:93:10:2a:c0:25:51:10:
57:6f:21:cc:94:3c:21:31:96:91:1f:ef:c0:8b:63:
c4:65:f7:2c:a0:37:ac:90:ac:40:64:f2:9a:25:75:
6a:c2:eb:32:4f:03:2a:4f:71:07:d4:19:87:b1:89:
68:e2:5d:30:fd:f4:56:ee:04:3c:e0:a7:b3:27:cd:
99:a4:5f:87:3d:dc:c1:33:23:fd:64:a1:f7:b4:e8:
b0:77:6a:a5:e1:17:57:24:fd:a2:81:1f:b3:63:b2:
7b:9e:11:a0:29:c2:41:9d:14:84:ba:60:cc:1d:2e:
42:d8:9f:22:53:65:49:a2:f6:e7:f9:29:12:21:dd:
29:aa:52:84:76:05:af:09:bb:dc:90:2a:7a:3e:4a:
bc:4b:96:0d:79:74:80:e2:c9:0e:64:db:04:79:6f:
24:df:65:ea:71:da:b4:01:dc:46:19:df:80:e8:eb:
34:8e:1c:2d:00:87:1a:bb:19:ca:7c:5d:a2:17:12:
50:be:2c:a3:df:19:e2:e8:f1:be:60:43:55:27:cd:
e0:59:97:1f:18:95:0d:1b:0c:14:07:be:88:fb:50:
a0:9e:ac:ed:0d:15:dd:27:5b:0d:7f:03:b8:a4:73:
0f:89:f9:39:12:37:3c:db:a8:c0:ac:9d:2c:9f:2f:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FD:3F:0F:CC:7E:1A:F0:52:99:7D:93:54:56:2A:C9:EC:D2:C1:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00871d-8f2e-486c-84af-e813d97ec3e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00871d-8f2e-486c-84af-e813d97ec3e5/1/rf0_D8x-GvBSmX2TVFYqyezSwZE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216121
Signature Algorithm: sha256WithRSAEncryption
23:32:1e:6e:c3:02:5c:8e:df:8e:2f:9e:b9:60:09:f1:f4:8f:
b5:4b:d8:47:56:a3:eb:53:01:b3:a7:82:0a:d2:78:49:8a:a7:
bb:ef:8f:dd:94:1c:e1:21:6e:d8:86:20:f1:f5:0e:c6:3a:c5:
0a:ca:e8:9f:f6:c3:1a:63:b4:c8:41:25:c8:33:55:7c:e9:03:
5c:d6:7f:cf:07:19:df:14:1b:7f:9f:e6:37:b1:70:c4:9b:80:
0c:82:ea:ce:87:30:bc:67:d6:b0:24:6c:3f:e2:d2:ef:31:35:
13:51:f9:03:9a:a1:18:b7:bc:22:c5:a6:00:68:75:0d:8a:d7:
79:65:fc:ac:92:04:77:4d:cf:a8:74:f1:3d:6a:40:ae:d2:fc:
1f:a5:f3:b5:22:54:f1:81:bc:8c:05:b2:3f:5a:31:1f:23:16:
65:02:1a:7f:7f:a9:3f:c0:2a:97:46:b7:48:e6:3e:f5:8f:3b:
58:83:7c:82:68:90:c2:28:37:86:a3:fb:f8:bc:0e:fb:d3:30:
b5:60:d3:10:08:0a:e4:5b:10:23:35:ba:ed:41:cb:0d:43:23:
2b:2a:b9:3c:dd:3f:08:04:1e:10:42:61:15:d7:92:26:7f:19:
a4:76:08:a2:ce:44:a0:2e:3c:23:6b:b9:ae:1f:99:1e:a7:34:
5e:fb:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:53:22 2025 by rpki-client