Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O5E5NOdtkX0ftpbPDK-fDYgFLlE.cer
File: O5E5NOdtkX0ftpbPDK-fDYgFLlE.cer (raw, json)
Hash identifier: 2A2nOHmfd+/hZl4OdaOCJ77BophCRMJuId5e5+uY6Hg=
Subject key identifier: 3B:91:39:34:E7:6D:91:7D:1F:B6:96:CF:0C:AF:9F:0D:88:05:2E:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A138E48C85
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/c2b63b-262c-4df2-965f-36c3bcc2c708/1/O5E5NOdtkX0ftpbPDK-fDYgFLlE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/c2b63b-262c-4df2-965f-36c3bcc2c708/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:53:49 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 85.158.80.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692444236933 (0xa138e48c85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b913934e76d917d1fb696cf0caf9f0d88052e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:59:0d:62:9a:11:02:57:33:64:05:8d:fc:f8:
52:70:0b:9f:cd:30:ff:c8:4b:3c:80:ff:6d:e0:60:
25:f6:0f:11:b5:ca:b3:39:87:58:45:c5:20:f1:b1:
18:b5:ac:7f:3e:cb:cc:dd:c8:bd:4e:d0:2c:63:5a:
c0:3e:f0:d3:6d:70:48:64:eb:ed:bd:4a:ef:07:09:
51:27:ec:8e:a6:a4:b5:85:2f:95:b4:21:e2:53:4c:
06:f2:c1:59:ad:05:df:ae:e0:c8:78:27:50:24:cb:
7e:56:a8:9f:4f:0c:64:55:e2:16:74:d8:04:0f:f0:
8b:d6:3a:33:11:fe:56:b1:51:b8:6a:4c:74:4b:9a:
76:e8:b8:a5:03:a7:c2:2c:04:fe:85:72:1e:c2:87:
b0:86:e4:19:04:13:3d:45:80:3d:fb:15:70:c6:5f:
e5:64:ca:92:8f:d5:0a:9e:a8:63:04:7f:d6:70:da:
40:f7:f9:05:ec:97:4c:1d:40:2c:5a:e7:74:1a:b9:
1e:f0:16:d6:25:b7:cc:97:18:10:94:43:69:87:b5:
e5:9b:ca:d9:5c:1b:ff:72:b6:21:fe:92:28:02:98:
4c:5b:22:f3:83:f9:26:fd:96:33:d6:ab:94:a6:a9:
e3:ea:a9:bf:cf:3c:89:6b:1b:c2:94:96:23:e0:13:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:91:39:34:E7:6D:91:7D:1F:B6:96:CF:0C:AF:9F:0D:88:05:2E:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/c2b63b-262c-4df2-965f-36c3bcc2c708/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/c2b63b-262c-4df2-965f-36c3bcc2c708/1/O5E5NOdtkX0ftpbPDK-fDYgFLlE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.80.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:24:83:43:e0:8e:0f:ec:16:02:e9:4b:a4:eb:6c:51:51:ee:
1c:fb:03:49:13:f0:a6:dd:c8:6d:c5:fb:0d:37:44:b4:b4:a4:
90:1b:3b:a4:4a:9c:7a:88:83:76:4d:e6:a0:ab:b0:b4:df:86:
56:0d:19:b6:65:79:20:b7:0b:eb:4e:af:48:4e:25:bb:74:0b:
9c:42:54:2d:84:8d:f1:cd:ec:c6:52:4d:86:8e:73:b6:a0:ae:
37:9a:d1:bf:f2:41:a4:a1:68:db:1b:3d:a6:9f:b7:94:31:71:
53:21:c2:b7:bf:0c:67:b2:2d:8d:ff:b9:5d:d9:2a:55:d6:20:
fc:1b:4b:18:9c:38:2f:1f:b9:e0:d3:2e:c3:3c:1d:84:98:65:
f3:68:cd:55:c3:ba:3f:5d:8e:5c:6a:69:78:bb:38:34:f3:e3:
a9:41:78:07:ee:b4:e3:fa:07:d8:8a:3f:66:08:30:ca:e3:93:
24:39:5c:0e:89:06:89:ad:b7:13:a8:82:26:c9:d3:9b:42:04:
97:9e:4b:ee:40:e0:bc:19:d3:df:bb:1c:03:0e:66:36:58:09:
1a:63:9c:be:76:7e:8d:fe:44:7f:fc:b5:a5:56:b7:66:6a:66:
db:96:b0:cd:5f:0c:0c:31:0b:e0:b5:ba:c1:f9:95:5a:39:13:
2f:6e:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:37 2025 by rpki-client