Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O1mdv97z9_ovpzn3fNyEAgVbDQw.cer
File: O1mdv97z9_ovpzn3fNyEAgVbDQw.cer (raw, json)
Hash identifier: 0H+cN/OnFalLKlpu3tKNp3YytjabgRjWSLFZ60P3gwA=
Subject key identifier: 3B:59:9D:BF:DE:F3:F7:FA:2F:A7:39:F7:7C:DC:84:02:05:5B:0D:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED34E4568FF2866CACC52509709F3EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/720e23-e85e-4884-8686-afc60413ec87/1/O1mdv97z9_ovpzn3fNyEAgVbDQw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/720e23-e85e-4884-8686-afc60413ec87/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:33:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.140.240.0/24
IP: 2a11:3240::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:4e:45:68:ff:28:66:ca:cc:52:50:97:09:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:33:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b599dbfdef3f7fa2fa739f77cdc8402055b0d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:b3:8e:3c:c3:eb:36:3b:57:b8:40:16:b2:
39:60:bc:ba:82:59:a3:d9:32:63:02:ff:c2:2e:51:
fa:01:69:09:0f:0b:be:5f:b7:96:a2:65:b6:5b:67:
1d:c2:7c:f1:dc:78:f6:f4:43:82:24:d3:e6:60:74:
ff:58:32:e4:a3:bd:d6:cf:24:d7:ec:f2:ef:b9:26:
3f:ee:38:4e:85:37:4e:b7:bc:b1:d3:fb:a4:48:b7:
5e:7c:b3:0f:de:92:61:db:15:15:57:49:97:76:e3:
8b:98:15:cf:e7:99:bc:5a:cc:cd:47:dc:f4:2b:55:
91:89:a3:dd:8d:ec:2a:ce:2b:cf:2f:9e:d4:34:a4:
3c:30:e9:97:bd:bd:ba:f4:7c:14:cd:ba:6d:6b:97:
e3:0c:34:4a:39:90:74:56:e4:fb:b2:2b:64:c9:ef:
22:62:27:c8:8e:b9:e4:cf:b1:5f:1d:11:5c:e5:88:
78:56:73:db:0d:c6:67:7f:80:ff:b0:fb:03:13:c1:
59:ce:ef:bd:88:fa:a7:fe:92:00:63:d5:3d:eb:4b:
a3:2f:5b:a0:ee:be:90:35:65:09:5a:c5:de:87:75:
aa:b7:fb:1a:fa:be:95:00:1c:07:1b:3a:c8:24:33:
83:4e:6a:86:bb:6e:4d:50:45:46:65:2c:e8:da:0c:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:59:9D:BF:DE:F3:F7:FA:2F:A7:39:F7:7C:DC:84:02:05:5B:0D:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/720e23-e85e-4884-8686-afc60413ec87/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/720e23-e85e-4884-8686-afc60413ec87/1/O1mdv97z9_ovpzn3fNyEAgVbDQw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.240.0/24
IPv6:
2a11:3240::/29
Signature Algorithm: sha256WithRSAEncryption
aa:6e:65:9e:94:fb:d3:30:8d:ef:f8:cf:43:31:f0:28:24:7d:
48:32:be:53:d5:cd:bb:27:61:bc:35:3d:07:d0:ed:86:6c:d8:
3d:e9:d6:81:72:0e:5b:b6:55:ce:00:be:b6:b2:69:f4:c2:5a:
2f:34:1a:09:fc:0a:b9:32:22:fe:47:d3:de:a4:71:8f:5a:d4:
49:e0:7f:d5:74:65:2b:4e:2a:1b:9a:a3:87:3f:54:b2:9a:6a:
bc:87:dc:e2:11:76:d8:7d:ce:2d:82:62:2c:30:b4:5d:15:f1:
44:99:94:f3:8b:8a:94:ef:5b:81:dd:b5:3a:b1:88:86:1d:57:
93:52:b7:37:02:2d:b1:35:3b:85:68:81:58:1a:13:b4:de:5e:
8f:09:7f:0b:b8:61:58:66:5e:c3:ba:ac:92:1b:df:18:9a:20:
95:8c:10:b9:8d:40:d5:85:a8:40:26:71:62:ad:54:90:d1:f9:
6d:df:23:5a:7b:ed:eb:29:4f:b6:1b:18:92:f8:74:12:85:93:
79:4c:f5:eb:ae:0d:64:46:22:c3:67:3e:46:8d:f0:b0:e8:78:
3f:33:ea:91:8f:c7:bf:5a:ac:5f:a7:f4:b5:b7:fd:50:46:1c:
9c:0f:3a:2e:ef:e0:b8:97:3a:1b:cd:24:ff:b3:db:c4:56:27:
89:b5:3a:1a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu005FaP8oZsrMUlCXCfPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzMzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjU5OWRiZmRlZjNmN2ZhMmZhNzM5Zjc3Y2RjODQwMjA1NWIwZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QGzjjzD6zY7V7hAFrI5YLy6glmj
2TJjAv/CLlH6AWkJDwu+X7eWomW2W2cdwnzx3Hj29EOCJNPmYHT/WDLko73WzyTX
7PLvuSY/7jhOhTdOt7yx0/ukSLdefLMP3pJh2xUVV0mXduOLmBXP55m8WszNR9z0
K1WRiaPdjewqzivPL57UNKQ8MOmXvb269HwUzbpta5fjDDRKOZB0VuT7sitkye8i
YifIjrnkz7FfHRFc5Yh4VnPbDcZnf4D/sPsDE8FZzu+9iPqn/pIAY9U960ujL1ug
7r6QNWUJWsXeh3Wqt/sa+r6VABwHGzrIJDODTmqGu25NUEVGZSzo2gx/9QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDtZnb/e8/f6L6c593zchAIFWw0MMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1LzcyMGUy
My1lODVlLTQ4ODQtODY4Ni1hZmM2MDQxM2VjODcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvNzIwZTIz
LWU4NWUtNDg4NC04Njg2LWFmYzYwNDEzZWM4Ny8xL08xbWR2OTd6OV9vdnB6bjNm
TnlFQWdWYkRRdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAJYzwMA0EAgACMAcDBQMqETJAMA0GCSqGSIb3
DQEBCwUAA4IBAQCqbmWelPvTMI3v+M9DMfAoJH1IMr5T1c27J2G8NT0H0O2GbNg9
6daBcg5btlXOAL62smn0wlovNBoJ/Aq5MiL+R9PepHGPWtRJ4H/VdGUrTiobmqOH
P1Symmq8h9ziEXbYfc4tgmIsMLRdFfFEmZTzi4qU71uB3bU6sYiGHVeTUrc3Ai2x
NTuFaIFYGhO03l6PCX8LuGFYZl7DuqySG98YmiCVjBC5jUDVhahAJnFirVSQ0flt
3yNae+3rKU+2GxiS+HQShZN5TPXrrg1kRiLDZz5GjfCw6Hg/M+qRj8e/Wqxfp/S1
t/1QRhycDzou7+C4lzobzST/s9vEVieJtToa
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:33 2025 by rpki-client