Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PqP19mW7VL1e_OkKJWVhCYY_h4Y.cer
File: PqP19mW7VL1e_OkKJWVhCYY_h4Y.cer (raw, json)
Hash identifier: //j3ZvLIq8M0HWcaJx1E4Dci75jIu80ScHXh3bihkVM=
Subject key identifier: 3E:A3:F5:F6:65:BB:54:BD:5E:FC:E9:0A:25:65:61:09:86:3F:87:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFBD53837DED48483BDB4D6412726B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/PqP19mW7VL1e_OkKJWVhCYY_h4Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.116.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:d5:38:37:de:d4:84:83:bd:b4:d6:41:27:26:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ea3f5f665bb54bd5efce90a25656109863f8786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:db:0e:ab:c7:39:34:be:c3:8b:87:b2:44:ec:
3b:94:99:b5:69:5b:56:0b:0d:27:06:c8:f8:17:c1:
f4:51:49:bf:0a:ba:62:f9:81:da:97:bf:d5:72:8b:
d6:48:d3:0a:e4:9e:fe:8e:a5:b3:c3:98:09:c7:da:
69:32:b5:7d:58:8e:d6:dd:a2:b3:32:d3:2e:78:f4:
b9:85:97:83:5d:55:10:ea:f1:57:a9:b7:0d:5d:7e:
db:ad:85:4d:a3:46:3a:f7:19:23:6c:aa:db:b9:c9:
58:b3:cd:58:81:11:dd:0b:f4:ed:3b:9d:cb:fd:65:
43:a0:6a:51:af:44:b1:81:60:fd:8a:68:c5:cd:b1:
dd:dd:c5:43:09:53:d2:14:a3:94:64:52:61:49:a5:
36:66:9b:b4:5d:d3:89:d7:a3:fd:df:b1:35:c1:12:
27:57:8c:4a:5c:0b:e3:7c:b3:38:2b:9a:b8:5f:4c:
49:b2:f5:48:b3:79:1c:a2:94:fc:ef:40:0f:8b:4d:
70:3c:5d:0f:fb:c9:99:85:28:6b:cd:9c:a0:53:cb:
90:93:fb:be:61:82:db:64:0a:42:ea:68:dd:e9:a7:
6a:0e:38:86:05:b5:e9:56:83:11:ac:dc:c7:99:77:
dd:f6:59:10:28:23:a5:8b:8b:9f:8a:7e:4c:77:ea:
68:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A3:F5:F6:65:BB:54:BD:5E:FC:E9:0A:25:65:61:09:86:3F:87:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/PqP19mW7VL1e_OkKJWVhCYY_h4Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b4:d0:1c:27:f2:62:b7:4e:1d:a3:b1:7e:65:49:f7:d2:cb:
50:f3:fc:90:ab:85:f9:26:31:de:6c:6a:79:07:eb:d2:88:70:
8e:b0:46:99:11:21:0e:21:5a:a4:ce:6a:2b:a3:da:86:15:75:
3b:a1:de:f2:53:25:9a:33:75:78:36:92:53:38:4b:9d:0f:c1:
a6:8d:6b:f2:f7:1f:35:b0:b4:e2:2c:c8:61:61:bb:4c:25:fd:
81:9a:b2:d0:d9:25:84:87:44:89:79:1c:cf:f0:00:ba:0d:1d:
8e:f5:87:72:fb:aa:7d:1e:5b:ff:63:8a:ed:b2:1b:a3:8c:d0:
ef:f3:e0:51:b3:22:9e:e5:2f:2d:6f:67:ae:5f:63:e6:67:c7:
74:c3:a9:6b:79:a7:7b:f0:c4:de:75:4f:14:a1:b3:c0:07:30:
0e:f6:a1:44:20:f3:e2:23:db:5e:da:7d:fa:78:7d:9b:1b:e9:
80:11:02:3d:d8:07:2b:e4:d8:bf:d0:59:35:37:8c:ed:b7:32:
2c:6d:d7:42:85:7b:c0:e9:85:56:26:9b:ce:2c:2e:87:13:60:
30:c9:2a:14:d9:8e:4f:85:94:69:46:b8:36:b8:da:e4:f3:b5:
6f:68:57:41:02:81:d6:84:6e:b9:b2:53:38:09:65:ba:94:52:
8b:b3:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:02 2025 by rpki-client