Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OSj62QUrolHkYakmnAAGQiUH7C0.cer
File: OSj62QUrolHkYakmnAAGQiUH7C0.cer (raw, json)
Hash identifier: d5VCWSpJrX8ShvTgR8jDIp/MAHPulaZ8bT9A7azTe7Q=
Subject key identifier: 39:28:FA:D9:05:2B:A2:51:E4:61:A9:26:9C:00:06:42:25:07:EC:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01839E25FB8981DA0D84651885525EED717F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/725e03-28b1-487d-8cd8-9b26918cd51a/1/OSj62QUrolHkYakmnAAGQiUH7C0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/725e03-28b1-487d-8cd8-9b26918cd51a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Oct 2022 14:00:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.63.152.0/22
IP: 2a03:7e0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:25:fb:89:81:da:0d:84:65:18:85:52:5e:ed:71:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 3 14:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3928fad9052ba251e461a9269c0006422507ec2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:bb:e5:51:0d:b9:59:71:24:73:b8:e3:52:
b6:ad:0a:1f:f6:b1:7c:59:64:b3:b5:f2:d5:06:31:
69:b0:61:49:88:7c:c4:00:37:17:60:28:ec:16:fd:
7e:85:81:4e:9d:72:15:1b:76:eb:02:2f:96:36:01:
ab:86:a9:0a:10:55:82:77:a4:3f:c0:a5:60:64:9d:
78:3e:27:75:be:b7:2d:9a:aa:4f:33:6b:a8:00:35:
8a:eb:ce:cd:11:12:d7:e9:78:55:0f:cd:1d:4a:36:
8a:fc:3e:2f:ef:4c:15:e3:a0:67:b0:d9:38:e2:4f:
4a:0a:d0:b1:a3:fd:a3:3a:f7:a2:ef:a6:4d:a3:00:
e1:e5:85:45:f6:a8:f6:5a:3c:de:83:b0:fd:81:18:
79:ed:63:23:d2:69:9f:ad:b2:0d:0c:56:3c:ff:f7:
af:e9:e5:30:25:82:ae:41:34:e2:73:c0:ff:70:60:
4b:a0:90:ff:a5:63:7f:d8:41:9d:26:23:2e:07:79:
f7:d6:73:ad:eb:46:96:08:0d:c4:df:32:ac:fb:d3:
83:b9:4b:42:36:c4:03:b4:4c:be:f4:ab:47:02:31:
05:d4:49:13:0c:b6:8b:44:bc:a3:0e:b1:7b:35:96:
ef:f9:25:44:6e:d3:cb:79:8d:a2:a7:01:26:cb:02:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:28:FA:D9:05:2B:A2:51:E4:61:A9:26:9C:00:06:42:25:07:EC:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/725e03-28b1-487d-8cd8-9b26918cd51a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/725e03-28b1-487d-8cd8-9b26918cd51a/1/OSj62QUrolHkYakmnAAGQiUH7C0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.152.0/22
IPv6:
2a03:7e0::/32
Signature Algorithm: sha256WithRSAEncryption
af:7d:83:ce:bf:04:dc:c0:ad:c5:73:b2:20:cb:c0:1b:de:d7:
e4:e8:42:48:6c:ec:04:77:86:31:ae:4b:d0:6f:64:d2:e2:7e:
80:7b:44:6c:de:b7:6f:9c:ef:f9:08:ef:14:45:c3:be:0b:1a:
39:54:8a:fc:be:25:81:81:32:1a:f7:9a:7f:fe:89:33:a4:bc:
3d:6d:8e:7f:ac:b1:70:b0:ff:6b:75:76:25:b0:98:c9:88:34:
77:d4:20:64:45:0d:7f:07:6e:f3:82:98:52:c0:f2:d1:cd:73:
21:af:17:6a:b0:ed:01:3e:f3:fb:37:a8:57:fd:ac:08:6f:06:
e4:82:35:c3:bc:f2:cb:f9:80:94:d9:2c:f4:a5:b3:82:96:d9:
2e:09:36:b4:02:a3:d4:2f:d4:0c:4f:65:dd:72:e4:d8:14:35:
19:de:9b:84:ee:25:ab:f8:f4:d3:24:3c:12:d8:df:06:81:c3:
d5:d8:7b:62:d5:a4:38:7f:ea:de:69:fc:1b:9f:03:78:76:b5:
69:f0:35:f6:95:8b:7f:99:9d:13:1c:13:95:91:5a:bf:16:04:
2d:87:a4:10:a1:7e:d4:30:d6:6c:3e:fd:b3:de:7d:ec:40:57:
32:c2:b7:05:49:46:a9:34:8b:62:04:cf:34:65:e0:56:6e:1a:
82:8f:2d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:48 2024 by rpki-client on console-fra.rpki-client.org