Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zIe-NtcInkC8y3ZoP0V-36Thu_0.cer
File: zIe-NtcInkC8y3ZoP0V-36Thu_0.cer (raw, json)
Hash identifier: eqcFruXe1SoXuuh3QwTJci8Cog8AKVVQAyyrThohwJc=
Subject key identifier: CC:87:BE:36:D7:08:9E:40:BC:CB:76:68:3F:45:7E:DF:A4:E1:BB:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF7DE3A2753356B55780774A3DC38E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/6465d3-d5bb-4298-acc3-ea40967f9104/1/zIe-NtcInkC8y3ZoP0V-36Thu_0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/6465d3-d5bb-4298-acc3-ea40967f9104/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 210320
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:de:3a:27:53:35:6b:55:78:07:74:a3:dc:38:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc87be36d7089e40bccb76683f457edfa4e1bbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:8f:3a:f1:8a:c4:f9:67:e1:7f:89:d5:36:
56:1c:c5:5f:53:c1:fd:ee:8d:c1:13:4c:e5:a7:88:
93:bc:a2:11:87:9a:86:fb:c5:2f:4c:19:21:11:af:
f3:84:86:cf:41:12:e5:77:89:d1:40:fa:40:a1:bb:
16:7c:48:a1:7e:a0:06:7f:e2:d4:02:c0:7f:78:e1:
f4:9b:ac:d6:eb:62:82:d7:9b:4f:24:7a:3e:76:76:
2d:51:01:41:6b:f1:c8:24:39:ed:80:63:ef:b5:4d:
ee:a3:af:f7:5d:d2:80:bc:a9:85:e6:43:c5:52:26:
ae:ce:fb:c4:79:f8:ef:f3:2f:d8:1b:9e:77:32:a3:
dd:84:79:ab:e0:bb:63:70:24:f5:10:02:65:d3:8c:
d7:5e:b2:6d:da:54:59:71:49:5e:11:2b:16:2c:60:
be:d0:f4:f8:d5:34:d3:6f:8e:4a:81:3d:d9:65:96:
90:3d:5b:b7:be:8a:ae:19:81:89:ad:07:94:b8:59:
9b:8d:91:48:28:a0:3f:7a:c0:19:0f:d0:cb:c8:78:
90:2d:d1:41:a3:4e:27:1d:bb:d1:86:b4:88:23:a9:
2c:75:a3:3f:60:aa:a4:e5:c1:ac:20:92:be:97:be:
84:1f:4b:18:9e:a2:04:2c:fc:70:38:83:46:4c:7c:
2c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:87:BE:36:D7:08:9E:40:BC:CB:76:68:3F:45:7E:DF:A4:E1:BB:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6465d3-d5bb-4298-acc3-ea40967f9104/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6465d3-d5bb-4298-acc3-ea40967f9104/1/zIe-NtcInkC8y3ZoP0V-36Thu_0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210320
Signature Algorithm: sha256WithRSAEncryption
48:d2:0b:d7:4e:27:67:be:90:e8:e1:ca:e3:ac:1f:c7:ca:23:
db:cb:56:e4:7d:42:2c:d4:80:6a:a1:f7:56:2d:58:4f:97:de:
88:21:74:43:88:99:05:f3:9d:40:73:27:65:a5:46:a8:ea:82:
2b:fb:a1:c6:1e:8e:87:7e:f2:fa:62:d8:22:e9:92:7e:96:55:
4a:28:84:93:52:df:05:20:41:11:5c:12:61:59:e4:2d:20:10:
ec:5b:4b:55:cb:5b:f7:aa:06:b5:b7:e9:cf:7f:62:cb:de:60:
02:d7:8c:a7:8a:db:0a:e2:cc:19:f6:6d:d4:36:8e:68:64:03:
f7:cd:29:f6:80:49:23:74:83:e4:35:33:5c:cb:fd:43:10:32:
b1:09:35:e9:7b:6c:3d:d9:9e:92:a5:07:b4:b1:9e:45:e5:06:
f5:f8:e7:43:b7:f8:c0:d6:67:5d:b5:99:99:92:a6:45:72:85:
50:b1:ea:f7:d7:29:3d:c2:8e:35:a7:df:7c:33:c6:7e:b3:10:
66:c2:48:23:12:02:b5:e7:a2:92:6a:f7:d3:c4:dd:09:43:a3:
4c:ae:48:39:1f:b7:f8:c5:1e:49:e5:d1:ce:59:dd:e1:bc:b7:
cc:1c:11:24:1b:e3:b5:d5:74:05:a3:6e:a1:4b:30:da:37:cc:
40:11:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:26:40 2025 by rpki-client