Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tTJWdaWUgSTDoVu8XlLM41g8kOI.cer
File: tTJWdaWUgSTDoVu8XlLM41g8kOI.cer (raw, json)
Hash identifier: WRujXoseZn90B2O5qlnMVrfzmdmdZ7leEvbMDpK4HZ8=
Subject key identifier: B5:32:56:75:A5:94:81:24:C3:A1:5B:BC:5E:52:CC:E3:58:3C:90:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0186931AA6F169776ADF2DA22289650EA858
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/f12b7f-6a53-4b1e-9087-1b64b5b37b0c/1/tTJWdaWUgSTDoVu8XlLM41g8kOI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/f12b7f-6a53-4b1e-9087-1b64b5b37b0c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 Feb 2023 13:40:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 61368
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:1a:a6:f1:69:77:6a:df:2d:a2:22:89:65:0e:a8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 13:40:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5325675a5948124c3a15bbc5e52cce3583c90e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ae:6c:f6:a0:86:f0:c7:59:e9:2d:bf:c1:6b:
af:a3:d7:6b:c1:17:b7:c1:27:57:00:34:48:78:a1:
c1:02:4c:fb:ee:48:fd:b0:84:06:b0:a5:31:a6:4b:
a6:99:4d:05:d3:49:9e:b1:0e:4f:63:2f:01:59:c0:
02:ec:81:b5:fa:f8:8b:f2:e0:3a:dd:19:b3:ff:86:
90:53:12:07:97:a7:f4:f8:43:07:c5:6c:21:1a:5f:
ac:54:78:d1:7a:24:59:e2:0b:c4:a6:30:c3:05:cb:
fb:bb:1b:8a:12:f7:7d:3e:40:db:bb:43:50:07:de:
ec:10:f8:9e:d2:7e:21:49:71:89:3d:62:c5:f7:4f:
b1:bf:42:d4:d0:d9:2e:2a:f4:23:72:74:1f:72:9a:
59:0f:71:89:10:bd:3d:c9:40:4b:8c:2f:bc:f1:2c:
aa:b8:52:72:70:2c:fe:04:64:91:49:21:3d:ec:c2:
99:86:b5:37:43:4e:b8:f7:f0:fa:01:8e:17:e8:ed:
10:e0:44:dd:19:63:43:7a:34:34:1f:6f:f9:8c:96:
77:57:85:c9:65:4c:73:ab:e9:90:07:7f:d0:db:fc:
d8:c2:36:0c:9c:fa:c3:a4:59:9e:b8:a9:03:6e:91:
99:a3:ce:53:95:d9:7e:75:09:10:a5:62:25:cc:2d:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:56:75:A5:94:81:24:C3:A1:5B:BC:5E:52:CC:E3:58:3C:90:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f12b7f-6a53-4b1e-9087-1b64b5b37b0c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f12b7f-6a53-4b1e-9087-1b64b5b37b0c/1/tTJWdaWUgSTDoVu8XlLM41g8kOI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61368
Signature Algorithm: sha256WithRSAEncryption
8c:ef:7c:15:49:97:35:52:80:8a:93:2b:92:83:09:b7:ee:a1:
00:a3:23:e7:c3:44:24:75:11:58:a9:92:de:37:4d:59:bc:5a:
c7:6b:b3:08:40:df:3a:82:a6:29:dc:d7:b5:95:bc:8f:16:84:
2e:1b:7c:4a:1f:e9:d6:9f:8c:b6:98:d5:2f:45:5c:1e:ff:89:
b8:a1:93:b3:06:3d:bf:82:2f:ec:5a:5e:8f:c1:ce:99:ee:fd:
87:32:e7:44:49:9f:5e:4e:ec:05:0b:59:e0:d4:b4:85:c9:7e:
8c:bd:35:7a:0c:b5:20:6d:f8:d3:9e:52:1e:f2:fe:e1:a2:b2:
08:c8:c9:b6:9d:08:43:ad:93:94:df:02:12:6a:fd:ba:f3:08:
a2:1e:24:da:75:2d:c7:c2:4c:51:21:8d:36:90:e0:70:1b:1a:
67:65:b5:28:d9:84:94:b6:5c:e1:12:db:2f:16:54:82:0e:a1:
8c:b4:7f:fe:1d:6f:40:d7:3c:a0:e7:15:9d:8c:c6:44:50:c4:
49:65:67:34:5d:fc:35:37:66:e8:ed:1d:71:3d:0f:5e:41:5f:
0a:f3:a2:de:68:86:e9:04:ae:16:99:a7:81:17:ae:e2:5a:74:
c3:47:cf:63:b0:30:98:c4:69:3a:81:02:5f:aa:f3:bc:4e:66:
ca:52:06:0a
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYaTGqbxaXdq3y2iIollDqhYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMjI3MTM0MDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTMyNTY3NWE1OTQ4MTI0YzNhMTViYmM1ZTUyY2NlMzU4M2M5MGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA765s9qCG8MdZ6S2/wWuvo9drwRe3
wSdXADRIeKHBAkz77kj9sIQGsKUxpkummU0F00mesQ5PYy8BWcAC7IG1+viL8uA6
3Rmz/4aQUxIHl6f0+EMHxWwhGl+sVHjReiRZ4gvEpjDDBcv7uxuKEvd9PkDbu0NQ
B97sEPie0n4hSXGJPWLF90+xv0LU0NkuKvQjcnQfcppZD3GJEL09yUBLjC+88Syq
uFJycCz+BGSRSSE97MKZhrU3Q0649/D6AY4X6O0Q4ETdGWNDejQ0H2/5jJZ3V4XJ
ZUxzq+mQB3/Q2/zYwjYMnPrDpFmeuKkDbpGZo85Tldl+dQkQpWIlzC0E6QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLUyVnWllIEkw6FbvF5SzONYPJDiMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2YxMmI3
Zi02YTUzLTRiMWUtOTA4Ny0xYjY0YjViMzdiMGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvZjEyYjdm
LTZhNTMtNGIxZS05MDg3LTFiNjRiNWIzN2IwYy8xL3RUSldkYVdVZ1NURG9WdThY
bExNNDFnOGtPSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDvuDANBgkqhkiG9w0BAQsFAAOCAQEAjO98FUmXNVKA
ipMrkoMJt+6hAKMj58NEJHURWKmS3jdNWbxax2uzCEDfOoKmKdzXtZW8jxaELht8
Sh/p1p+MtpjVL0VcHv+JuKGTswY9v4Iv7Fpej8HOme79hzLnREmfXk7sBQtZ4NS0
hcl+jL01egy1IG34055SHvL+4aKyCMjJtp0IQ62TlN8CEmr9uvMIoh4k2nUtx8JM
USGNNpDgcBsaZ2W1KNmElLZc4RLbLxZUgg6hjLR//h1vQNc8oOcVnYzGRFDESWVn
NF38NTdm6O0dcT0PXkFfCvOi3miG6QSuFpmngReu4lp0w0fPY7AwmMRpOoECX6rz
vE5mylIGCg==
-----END CERTIFICATE-----
Generated at Sun May 11 22:31:46 2025 by rpki-client