Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w9PpaZhRen4L3dXQDyDnewMVZws.cer
File: w9PpaZhRen4L3dXQDyDnewMVZws.cer (raw, json)
Hash identifier: 5zsP74KvuGvER3XUPpBVMGsxzlyyHZ27LAoSe9R9v7Y=
Subject key identifier: C3:D3:E9:69:98:51:7A:7E:0B:DD:D5:D0:0F:20:E7:7B:03:15:67:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A64C696A88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/81d5c0-44d9-4185-af47-a138720504be/1/w9PpaZhRen4L3dXQDyDnewMVZws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/81d5c0-44d9-4185-af47-a138720504be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:00:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211129
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714246548104 (0xa64c696a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3d3e96998517a7e0bddd5d00f20e77b0315670b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:d1:60:f1:c6:77:50:df:4d:21:77:66:b6:
a3:5a:8e:e7:88:13:32:12:dc:67:fa:3f:9e:69:5a:
cf:9d:f2:04:8c:49:57:d6:dc:7e:23:f7:14:61:d6:
5d:00:11:db:5f:e4:7d:b1:61:e0:84:2b:ff:ab:8e:
ad:5f:c5:a5:d1:be:c9:2e:36:2a:c4:c2:33:bc:f2:
84:a2:c8:b4:47:d3:64:33:37:dc:ef:0c:5a:90:41:
45:f9:52:e4:00:6d:aa:72:19:23:a0:b9:11:0f:fb:
0e:62:36:92:02:41:0a:89:0b:8f:e5:ce:37:fc:90:
bf:be:55:8e:00:12:57:72:b4:80:de:2a:81:fa:2a:
9a:c6:5a:79:07:1d:f5:e3:6c:33:f2:2a:9c:1b:df:
ed:75:dd:e1:a6:53:d0:19:47:2a:e3:a8:fc:bc:32:
fa:54:5b:aa:51:d6:f6:c8:2a:69:5a:e1:dc:a2:35:
f7:8a:2e:11:28:4b:78:70:a8:2d:74:dd:a1:3e:24:
7d:50:4f:fb:f9:be:7a:db:2d:0a:78:b7:b2:98:8a:
5a:50:e1:1e:5d:cf:15:cf:3d:1a:ba:d7:6f:99:db:
55:8e:3a:28:bf:05:30:62:3a:d9:d2:37:10:ba:96:
44:a7:a4:62:9f:6a:af:c2:e8:bc:a7:73:73:ef:18:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D3:E9:69:98:51:7A:7E:0B:DD:D5:D0:0F:20:E7:7B:03:15:67:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/81d5c0-44d9-4185-af47-a138720504be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/81d5c0-44d9-4185-af47-a138720504be/1/w9PpaZhRen4L3dXQDyDnewMVZws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211129
Signature Algorithm: sha256WithRSAEncryption
15:ef:b4:24:a2:4d:81:45:db:9f:fc:28:1c:3a:8b:87:ff:98:
fe:59:3c:89:c4:24:f0:31:4e:7f:83:4a:1b:42:55:5a:b9:52:
f4:5a:5f:a0:46:d7:f5:82:c9:4f:b4:81:6a:e7:42:c2:9e:62:
98:fb:ae:11:1a:37:ca:70:e1:17:c8:f5:5a:8d:83:d8:94:53:
e3:92:21:4e:51:c9:75:98:2d:55:c8:0f:c2:a2:07:a3:64:2f:
65:13:54:4c:9d:00:db:96:04:c9:07:5d:ea:d3:9b:cd:68:3c:
44:d9:17:a7:f3:a7:37:1d:e2:11:9b:20:0d:08:5e:f4:be:03:
4c:1f:56:23:c6:dc:0f:b7:75:11:e2:73:ee:42:aa:37:95:13:
a4:d6:5a:4f:80:44:c5:70:8f:f2:00:35:8a:31:5c:13:8d:86:
31:e1:22:c2:55:f9:79:33:c6:bf:5c:dc:d5:97:6c:51:6c:38:
d4:4a:11:ff:4a:99:9d:96:d3:4f:06:fe:7e:e6:d3:7c:f6:94:
b3:3c:3b:f7:bb:e5:38:0c:b8:43:d6:8e:da:80:5c:e1:04:07:
f1:42:78:68:93:93:5f:20:c6:9e:18:08:1f:9c:49:cb:d8:e7:
3d:00:03:48:fd:8a:dc:f8:07:08:07:c7:21:ba:8e:ae:73:65:
83:51:d9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:43:59 2025 by rpki-client