Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uCTju9rbCbaQrWq3YfH7dPb68sI.cer
File: uCTju9rbCbaQrWq3YfH7dPb68sI.cer (raw, json)
Hash identifier: P10j4t1cba/iN6v9DLxYbDbrDSSYLq+vSXD+4327j10=
Subject key identifier: B8:24:E3:BB:DA:DB:09:B6:90:AD:6A:B7:61:F1:FB:74:F6:FA:F2:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185A5EAA372ECBF3BD059FCB5FB0C3D0D80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/3764fa-0be3-415b-8292-eecce06f2955/1/uCTju9rbCbaQrWq3YfH7dPb68sI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/3764fa-0be3-415b-8292-eecce06f2955/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Jan 2023 12:18:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 16372
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:ea:a3:72:ec:bf:3b:d0:59:fc:b5:fb:0c:3d:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 12 12:18:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b824e3bbdadb09b690ad6ab761f1fb74f6faf2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:a1:c7:c3:d5:f5:9d:0c:5c:c3:b2:7d:a0:
95:db:62:2c:2c:ef:1e:e9:9c:66:a5:35:10:20:13:
b1:ce:89:ac:32:c9:7e:89:b7:9c:b1:24:db:d2:e4:
bb:78:c1:da:1c:0d:3a:1f:9f:33:19:81:82:b6:c6:
43:70:87:95:1b:62:1c:25:db:1f:11:f8:83:96:3a:
2f:95:1d:be:44:91:46:6f:90:eb:3c:53:05:05:12:
cd:fd:39:89:b2:aa:69:5f:59:1d:53:e5:9b:0c:1e:
21:0a:c2:bd:24:1f:30:64:ba:a6:32:85:e5:70:37:
95:84:78:67:e3:ac:90:91:ac:fa:8d:b8:60:e2:b4:
07:dc:4a:57:aa:d3:fd:12:5a:40:a9:61:1a:09:d5:
68:85:76:84:ac:ea:16:1c:4b:c1:79:2e:96:1c:f4:
e2:a1:16:1a:5a:2b:4a:ac:87:c2:3b:20:89:4d:68:
5b:b4:74:a5:6c:aa:68:ff:72:4b:f1:9e:78:24:72:
e6:e5:fc:7d:8e:93:7b:c1:de:2f:d3:be:58:ed:38:
3b:c0:04:9b:cc:bb:89:eb:df:d2:4a:59:f8:cb:bf:
c5:2b:98:54:fd:7b:95:11:8e:05:10:81:9b:68:1e:
8d:b0:72:a8:a5:eb:c0:be:4a:18:3e:f8:65:c8:36:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:24:E3:BB:DA:DB:09:B6:90:AD:6A:B7:61:F1:FB:74:F6:FA:F2:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3764fa-0be3-415b-8292-eecce06f2955/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3764fa-0be3-415b-8292-eecce06f2955/1/uCTju9rbCbaQrWq3YfH7dPb68sI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16372
Signature Algorithm: sha256WithRSAEncryption
1c:e4:71:ec:22:b3:38:07:e9:88:a5:0c:f2:19:e2:ef:91:02:
6a:a0:37:5e:f1:99:68:4d:55:86:09:81:1d:2b:e9:dc:80:ee:
36:30:c4:44:20:65:83:f9:83:b1:27:77:42:dc:c1:bd:6a:4d:
f7:75:e3:bd:86:2d:15:fb:ce:d4:5c:69:6e:a0:97:d6:ae:d8:
59:33:f5:54:66:69:e3:45:f7:8f:56:41:a2:ad:60:9f:61:31:
78:0d:c0:cd:c4:98:42:a0:f3:d8:20:a0:25:fc:ce:04:99:be:
6a:98:b4:d2:a3:a9:f2:80:e8:d2:aa:c1:53:e6:39:fe:dc:04:
aa:e4:1b:37:3d:c2:e6:3d:fb:71:d0:1f:a9:5e:e1:0d:9d:c3:
94:ff:a2:86:f0:b9:85:9c:50:b3:83:b5:d1:76:22:3a:9e:ec:
58:b9:67:1b:e9:ea:71:c8:da:5c:c1:2b:28:5f:4e:d8:63:08:
f4:f1:bb:41:d0:08:42:18:a6:70:0c:cf:a5:33:02:9b:08:ee:
e9:45:8b:54:64:18:7e:38:b3:a8:7d:e0:93:4c:dd:5c:18:a6:
7e:98:10:5d:b5:29:a1:ca:b0:63:59:8b:e6:62:f1:d2:03:c7:
e7:c8:d5:9f:fb:1e:7a:1c:4d:ea:5b:06:3c:bd:a7:f0:b5:1e:
1c:2d:cb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:22:55 2025 by rpki-client