Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F3T3Dc0m0vuUXxqYPhFlr51RqP4.cer
File: F3T3Dc0m0vuUXxqYPhFlr51RqP4.cer (raw, json)
Hash identifier: 4R95I/24Kch+cSTcwclxK4iIFae2ykaiXXYG7q0dvfQ=
Subject key identifier: 17:74:F7:0D:CD:26:D2:FB:94:5F:1A:98:3E:11:65:AF:9D:51:A8:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701D4DC2B60687DE4C0F698865D73E15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7c6cd-e77c-4be8-a376-fe29af677cce/1/F3T3Dc0m0vuUXxqYPhFlr51RqP4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7c6cd-e77c-4be8-a376-fe29af677cce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:06 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 213282
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1d:4d:c2:b6:06:87:de:4c:0f:69:88:65:d7:3e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1774f70dcd26d2fb945f1a983e1165af9d51a8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:15:12:7c:e1:d4:47:48:51:4f:e2:58:50:
19:2d:56:48:b9:da:6d:2f:c3:e5:a1:9b:9e:a4:ad:
57:73:68:b8:bb:2b:09:4d:08:9e:5f:c6:cf:96:f0:
86:59:f9:da:c0:d3:54:9b:22:0f:1b:d9:b2:d7:e4:
62:e2:1f:86:18:d9:e1:a7:39:8c:4e:f7:69:3c:87:
65:6b:91:69:0b:93:f6:99:b9:1e:7d:c1:99:01:6f:
9d:cf:19:ac:1b:dd:37:d9:eb:60:78:a5:24:2e:e0:
9a:57:7f:52:66:f3:a7:e8:ee:c9:67:69:39:f2:a4:
dc:ef:47:d4:69:ef:df:4c:fa:36:d4:5a:b8:5b:b5:
6c:a7:0f:34:6d:26:f0:0e:30:39:72:fa:ba:cc:ff:
0c:c4:04:64:86:7c:0d:72:12:78:ae:fd:f0:16:f5:
23:ac:a7:78:f9:19:2d:0a:24:1a:f5:a2:1e:27:c7:
93:35:d7:0d:e1:f4:51:90:f6:fc:c1:cb:fe:e2:a4:
14:40:94:99:2e:05:c8:b9:34:1f:80:d0:0d:70:72:
60:92:a6:b3:ce:5c:49:1d:25:30:98:34:5d:eb:2b:
49:5a:9a:ff:e1:5c:82:ae:4d:c6:19:47:97:34:ec:
48:29:37:02:4c:04:42:52:e2:97:53:da:e6:55:3c:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:74:F7:0D:CD:26:D2:FB:94:5F:1A:98:3E:11:65:AF:9D:51:A8:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7c6cd-e77c-4be8-a376-fe29af677cce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7c6cd-e77c-4be8-a376-fe29af677cce/1/F3T3Dc0m0vuUXxqYPhFlr51RqP4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213282
Signature Algorithm: sha256WithRSAEncryption
55:c5:37:51:52:36:62:78:05:b8:de:57:06:40:f7:25:e1:6b:
2a:6e:61:f3:7e:da:43:65:24:8f:7f:10:b5:dd:8b:16:bb:50:
ff:01:9a:9a:26:9b:05:a9:69:d0:b5:19:9a:52:fd:7e:e1:f1:
d4:1d:fa:66:c1:59:46:94:ef:4c:0d:1e:3f:d5:be:2e:1e:47:
41:54:19:18:3d:e4:38:1a:43:f0:d0:4d:3d:05:3f:99:59:26:
3a:43:50:e2:c8:7d:5b:ae:ec:ac:72:ec:b5:74:08:25:17:2a:
af:43:45:34:a3:74:c9:67:c1:55:94:2f:34:ad:58:2b:e5:8a:
21:ce:3b:a1:3e:bf:d4:04:c9:c4:8f:f2:d3:ed:c4:48:fe:36:
65:67:e3:ca:77:5c:98:ac:48:8f:4e:c8:31:db:6b:8e:f3:4a:
3b:19:87:51:b3:67:4e:49:3a:9b:9d:76:ee:d7:d5:e5:bd:b0:
b8:d0:7d:32:70:9a:42:d0:9e:ec:43:b2:98:3f:ea:6a:01:a5:
7b:8f:c7:75:c3:15:17:72:2e:93:d2:92:ab:7d:38:0a:77:08:
13:93:a1:9f:84:ef:20:cb:3c:1c:35:06:36:57:e5:99:46:ce:
66:c0:8f:c6:aa:c3:3e:28:6a:9f:d8:80:5f:c0:65:b3:78:07:
80:dd:57:ce
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVwHU3CtgaH3kwPaYhl1z4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDEzNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzc0ZjcwZGNkMjZkMmZiOTQ1ZjFhOTgzZTExNjVhZjlkNTFhOGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08YVEnzh1EdIUU/iWFAZLVZIudpt
L8PloZuepK1Xc2i4uysJTQieX8bPlvCGWfnawNNUmyIPG9my1+Ri4h+GGNnhpzmM
TvdpPIdla5FpC5P2mbkefcGZAW+dzxmsG9032etgeKUkLuCaV39SZvOn6O7JZ2k5
8qTc70fUae/fTPo21Fq4W7Vspw80bSbwDjA5cvq6zP8MxARkhnwNchJ4rv3wFvUj
rKd4+RktCiQa9aIeJ8eTNdcN4fRRkPb8wcv+4qQUQJSZLgXIuTQfgNANcHJgkqaz
zlxJHSUwmDRd6ytJWpr/4VyCrk3GGUeXNOxIKTcCTARCUuKXU9rmVTzksQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBd09w3NJtL7lF8amD4RZa+dUaj+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2I3YzZj
ZC1lNzdjLTRiZTgtYTM3Ni1mZTI5YWY2NzdjY2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYjdjNmNk
LWU3N2MtNGJlOC1hMzc2LWZlMjlhZjY3N2NjZS8xL0YzVDNEYzBtMHZ1VVh4cVlQ
aEZscjUxUnFQNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBIjANBgkqhkiG9w0BAQsFAAOCAQEAVcU3UVI2YngF
uN5XBkD3JeFrKm5h837aQ2Ukj38Qtd2LFrtQ/wGamiabBalp0LUZmlL9fuHx1B36
ZsFZRpTvTA0eP9W+Lh5HQVQZGD3kOBpD8NBNPQU/mVkmOkNQ4sh9W67srHLstXQI
JRcqr0NFNKN0yWfBVZQvNK1YK+WKIc47oT6/1ATJxI/y0+3ESP42ZWfjyndcmKxI
j07IMdtrjvNKOxmHUbNnTkk6m5127tfV5b2wuNB9MnCaQtCe7EOymD/qagGle4/H
dcMVF3Iuk9KSq304CncIE5Ohn4TvIMs8HDUGNlflmUbOZsCPxqrDPihqn9iAX8Bl
s3gHgN1Xzg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:53:16 2025 by rpki-client