Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OTjBInZ3WM__L947EaF8lZF2hCs.cer
File: OTjBInZ3WM__L947EaF8lZF2hCs.cer (raw, json)
Hash identifier: 2ueDLjYnsNtakrCRX/wChMQ7fv4kVUBqERZVVZPABv8=
Subject key identifier: 39:38:C1:22:76:77:58:CF:FF:2F:DE:3B:11:A1:7C:95:91:76:84:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B396EECC8D77F48366DD0D17CA4C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/OTjBInZ3WM__L947EaF8lZF2hCs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 81.22.216.0/21
IP: 92.61.72.0/21
IP: 103.77.32.0/22
IP: 103.229.36.0/22
IP: 103.232.172.0/22
IP: 185.204.140.0/22
IP: 185.208.248.0/22
IP: 188.66.56.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:39:6e:ec:c8:d7:7f:48:36:6d:d0:d1:7c:a4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3938c122767758cfff2fde3b11a17c959176842b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:6e:2a:6d:c6:13:0f:02:5d:cb:ca:1f:4a:
6a:df:c5:37:55:fc:2d:84:33:bf:49:9c:e2:d3:32:
d2:bf:f0:63:3b:61:61:ab:63:a5:7e:05:6d:f9:4e:
a2:f1:37:eb:56:d4:83:5d:ba:8c:28:74:42:96:e7:
50:a9:64:04:47:0d:db:f6:b2:c8:71:99:f7:88:49:
f7:85:19:4c:5b:c0:23:96:39:aa:26:92:f1:57:cb:
8c:72:bb:83:90:0f:cc:5f:dd:a7:0f:93:06:44:f4:
c7:60:1a:a1:40:1d:7e:f0:2a:83:a9:fe:68:34:5f:
e3:ad:e8:e4:0d:3b:3f:33:38:d7:da:a6:4a:3a:d4:
42:8b:b0:cc:ea:ad:10:b1:84:9a:97:9b:7f:a4:e1:
4f:31:81:c7:dc:7c:5a:be:00:ac:13:53:f0:c2:e6:
4d:3a:2d:30:f5:36:09:7a:9a:e1:22:ff:8b:56:e7:
e8:4a:44:71:56:2d:a7:39:da:94:81:c0:d9:3c:da:
97:b9:a1:43:41:0f:eb:37:01:d4:df:1b:b6:be:d3:
ee:b7:83:f5:aa:e8:44:77:08:9a:de:57:52:2b:19:
35:0d:ae:18:89:67:84:da:4e:4b:9c:64:d9:b8:78:
4d:cc:f7:e2:5c:0e:fd:98:c3:b4:c2:bd:ff:dd:d0:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:38:C1:22:76:77:58:CF:FF:2F:DE:3B:11:A1:7C:95:91:76:84:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/OTjBInZ3WM__L947EaF8lZF2hCs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.216.0/21
92.61.72.0/21
103.77.32.0/22
103.229.36.0/22
103.232.172.0/22
185.204.140.0/22
185.208.248.0/22
188.66.56.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:87:ce:97:e4:ab:d3:eb:22:d2:69:dc:36:7b:5a:80:b2:11:
65:c6:08:8f:a2:3b:9c:42:10:79:b7:ba:72:59:39:91:97:6b:
23:16:35:44:f1:c7:b0:07:ab:76:ab:78:38:f7:8a:bb:ae:51:
0d:19:27:d2:9f:c5:95:bd:4a:e6:1e:02:1d:53:e4:91:c6:a8:
c3:ee:39:b6:8d:d3:00:ae:bd:0f:f9:c8:09:ba:1f:8b:4b:5e:
4a:6b:1a:1f:75:d6:4d:29:de:56:42:a7:47:3a:e5:b7:aa:e3:
3b:1c:27:b3:c5:5d:ee:cb:7d:a6:1f:08:ad:90:1c:88:b4:d6:
28:91:7c:e6:de:b6:d7:d2:21:0c:ab:87:5d:23:ac:20:af:3f:
b3:43:33:14:ea:44:3a:f6:c8:cd:b1:f2:6a:cb:5a:d7:cc:d3:
94:ee:e7:d6:15:3b:90:1c:08:67:b6:23:03:da:14:24:cf:86:
2c:85:79:c9:8a:b1:02:84:3c:de:15:d9:f8:b8:a1:5e:f5:cd:
00:ac:12:78:e6:2d:be:91:44:de:f9:3e:e9:70:f9:bb:c3:59:
8b:73:bc:66:2d:4f:c8:81:bf:ae:82:98:05:f0:5e:92:c6:2d:
6a:fd:c9:eb:eb:2f:51:3c:06:f2:6a:f6:90:a0:ec:09:71:80:
8e:70:bc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:57:34 2025 by rpki-client