Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JDDum_EaiT_d20RYzAcc4W6T-5o.cer
File: JDDum_EaiT_d20RYzAcc4W6T-5o.cer (raw, json)
Hash identifier: QxDyIgToeU1yBRigzJ/9/2vJXqoFtFC//3JgXZI1hbo=
Subject key identifier: 24:30:EE:9B:F1:1A:89:3F:DD:DB:44:58:CC:07:1C:E1:6E:93:FB:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF4FDDF651F362F78938BC1A42DE4CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/ad870b-51a6-4ac6-bb27-b38879286b1c/1/JDDum_EaiT_d20RYzAcc4W6T-5o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/ad870b-51a6-4ac6-bb27-b38879286b1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:31:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 42630
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f4:fd:df:65:1f:36:2f:78:93:8b:c1:a4:2d:e4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2430ee9bf11a893fdddb4458cc071ce16e93fb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:a3:e8:cc:c9:22:e8:08:dd:f8:d7:72:18:
bf:3b:0f:cb:14:9b:34:02:8a:38:84:df:ce:ea:bf:
ac:09:b2:94:c7:f1:96:75:72:84:5c:aa:af:d0:1f:
0b:9f:4c:de:8a:a1:a8:20:8a:4d:4c:a2:6b:25:a8:
69:0b:ca:a6:55:b1:bc:25:7e:fb:8b:63:f6:a0:70:
cd:98:c8:b4:13:04:ca:ef:48:42:b2:4e:53:48:9e:
50:42:63:05:d1:40:c7:01:29:ad:69:d7:29:04:c1:
8e:fc:43:0c:42:3d:69:ca:19:4f:28:e2:5d:e3:2a:
b5:d1:31:b4:49:d7:69:08:22:56:5a:d0:4c:ca:58:
35:99:92:28:2e:52:7e:6a:56:f3:05:41:b9:3b:e6:
a8:43:87:03:2d:0b:3b:ae:2f:dc:7b:34:c3:16:6f:
a9:40:c2:82:6b:1d:37:a3:7e:fe:87:66:b9:d0:d8:
b4:35:f4:f4:c2:39:d2:66:1d:88:73:77:8c:dc:a8:
51:0d:47:0f:7f:91:54:1c:61:7e:3a:6c:1f:51:e1:
f0:44:19:0d:a7:ec:be:b7:42:31:bf:ee:66:2e:0a:
ae:0d:80:7c:43:a6:5c:5b:24:1c:59:0f:71:77:e4:
4f:72:67:03:42:76:fa:44:cb:0b:ba:e9:9b:a7:ea:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:30:EE:9B:F1:1A:89:3F:DD:DB:44:58:CC:07:1C:E1:6E:93:FB:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad870b-51a6-4ac6-bb27-b38879286b1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad870b-51a6-4ac6-bb27-b38879286b1c/1/JDDum_EaiT_d20RYzAcc4W6T-5o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42630
Signature Algorithm: sha256WithRSAEncryption
21:b7:7f:55:6f:aa:9b:b4:72:43:9f:59:94:6a:05:7e:18:4f:
06:b9:35:1f:a2:fe:02:41:87:11:79:ab:c8:b0:3f:af:df:6b:
f0:b1:0f:1f:ef:33:a5:eb:a0:fd:90:a0:10:4d:47:1e:f0:d7:
0b:0f:39:ed:6c:77:17:b5:12:98:53:64:bc:0f:c5:d5:d9:d0:
39:69:06:1b:9e:58:70:6b:54:8e:7e:53:e1:e9:77:1a:0e:e6:
a9:95:72:d6:40:da:44:b0:91:39:92:d3:9e:b3:f5:45:50:0f:
0c:03:f5:48:9f:8f:41:3d:7d:3c:03:5e:e4:81:76:4a:d2:e8:
22:fd:31:6d:03:40:a1:24:37:d3:88:7b:f7:69:bb:d6:9b:0e:
9e:06:6b:68:8a:59:80:ec:5f:43:29:e4:03:fd:41:bb:28:64:
7a:67:7d:8f:22:61:c3:e3:2b:8a:6a:66:45:03:26:0b:a6:05:
84:86:71:e1:6f:29:2a:b0:67:f0:96:20:d1:57:34:ca:b9:cb:
b4:32:4e:de:cb:0f:f3:4c:5d:e8:5a:b3:10:fa:b5:b2:7b:2a:
b4:75:66:80:18:97:4c:1f:54:6c:c2:40:3a:89:37:2b:d1:f3:
57:a1:07:bf:25:e8:74:7b:cc:22:36:3a:a5:74:bd:9b:22:5e:
11:f6:f5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:43 2025 by rpki-client