Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ExIAbeTg0ZeC-wV_Z5DF2Bs2DPc.cer
File: ExIAbeTg0ZeC-wV_Z5DF2Bs2DPc.cer (raw, json)
Hash identifier: wVX4ifLFwg8lXYjpfSHlh/eRWa1GRiPN95d3YWAzhOM=
Subject key identifier: 13:12:00:6D:E4:E0:D1:97:82:FB:05:7F:67:90:C5:D8:1B:36:0C:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A31BB245D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/046a48-0956-4ca0-87db-dfa78eadbc40/1/ExIAbeTg0ZeC-wV_Z5DF2Bs2DPc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/046a48-0956-4ca0-87db-dfa78eadbc40/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:02:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 60025
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700544337364 (0xa31bb245d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1312006de4e0d19782fb057f6790c5d81b360cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c7:65:c0:4c:4f:06:44:05:f0:0b:07:01:c5:
19:27:76:dd:e2:58:2a:54:8e:6b:88:17:63:0f:85:
d8:83:60:59:55:17:58:50:42:d6:15:fc:45:5f:08:
0b:48:78:53:06:ee:af:2d:a3:9f:33:de:8d:fd:7c:
00:55:25:c4:b2:75:9d:36:06:ff:08:05:34:fe:ca:
e6:4f:8d:3d:90:8e:3a:25:77:d5:ca:5d:b6:d4:53:
e4:2e:cc:18:54:e0:dc:be:f6:e1:8b:38:b1:d6:72:
6b:76:a8:f7:a7:1c:5d:21:f6:05:5a:49:0c:55:02:
46:5e:35:dc:f2:a1:db:f1:f4:31:1e:15:bf:3d:9a:
0e:1e:f3:4d:f4:5f:0e:3c:30:44:44:65:89:2e:ea:
32:d7:6a:d5:67:77:a7:2c:65:b8:e3:71:bb:7d:df:
e9:ea:b7:68:6e:46:e3:d6:b2:36:cc:de:0b:dc:fc:
e5:f8:44:96:c8:a3:87:34:02:5a:ec:f5:4e:ba:9b:
46:9e:f0:bd:55:08:9f:51:80:e3:72:66:36:9b:1a:
ea:d3:f2:b1:f9:ad:85:b6:18:ff:49:35:7f:7b:f3:
bd:40:5d:ab:e5:48:8f:e2:c2:1d:66:4b:52:dd:35:
58:f8:78:d0:5b:23:c4:69:6e:95:c8:88:f4:84:9e:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:00:6D:E4:E0:D1:97:82:FB:05:7F:67:90:C5:D8:1B:36:0C:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/046a48-0956-4ca0-87db-dfa78eadbc40/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/046a48-0956-4ca0-87db-dfa78eadbc40/1/ExIAbeTg0ZeC-wV_Z5DF2Bs2DPc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60025
Signature Algorithm: sha256WithRSAEncryption
22:99:12:99:fa:bb:d7:5c:07:64:f9:ad:44:c8:53:41:44:d7:
7f:14:34:70:9b:b0:5f:6a:cd:66:a5:9c:bc:35:f7:79:b8:f6:
a9:42:02:0e:7c:ca:55:9f:60:ea:77:28:d7:a4:43:90:93:ec:
4d:4a:71:57:37:d4:97:db:a0:cf:b3:c5:20:62:bf:57:ce:c6:
b9:5c:0b:2b:91:7b:39:3c:98:b2:6d:51:6f:22:58:07:c8:db:
34:61:78:f6:b4:b2:17:2c:bf:f8:9f:c2:fb:f5:f5:aa:62:88:
d8:72:35:65:65:f2:18:4c:1d:89:f0:84:7a:8f:6e:9c:12:22:
ce:fa:dd:9b:fa:d9:2f:a2:ac:f5:7f:bd:cf:51:c8:31:a6:71:
4f:e2:89:86:17:a0:6e:cb:10:51:30:db:70:40:98:05:c0:b8:
d6:1a:4f:c0:43:cb:45:2c:4b:1c:f3:2d:7c:2a:25:5d:e0:4c:
c4:a5:f8:23:07:25:45:7a:71:87:64:df:90:78:1e:30:b0:d8:
d4:91:02:5d:f6:c6:a5:9b:73:44:07:82:dd:53:da:93:d3:34:
5f:5b:35:35:7f:fc:57:6f:11:f7:b6:40:1a:3f:12:2c:01:26:
f6:7f:ed:44:af:b8:20:b0:63:75:d3:6c:91:5b:9d:ca:fe:f9:
61:e5:f8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net