Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.cer
File: oGGJs4Tat7mwgm0DFPpmw_8tW4Y.cer (raw, json)
Hash identifier: 2z8LqzyReSPRDsNt/udjIRdpQJsguUx6YhPdK8OfZmE=
Subject key identifier: A0:61:89:B3:84:DA:B7:B9:B0:82:6D:03:14:FA:66:C3:FF:2D:5B:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018953AE25A189E1FBACAB69B10694A62852
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 14 Jul 2023 09:14:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.122.184.0/24
IP: 185.159.84.0/24
IP: 185.235.247.0/24
IP: 2a10:5d40::/29
IP: 2a11:5400::/29
IP: 2a11:bf00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:ae:25:a1:89:e1:fb:ac:ab:69:b1:06:94:a6:28:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 14 09:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a06189b384dab7b9b0826d0314fa66c3ff2d5b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:a5:27:af:0e:09:78:39:82:01:39:f5:1f:
52:fa:e6:db:7c:e8:73:4f:14:77:3f:3d:13:4a:63:
60:74:68:1d:67:32:a1:d0:f2:9d:f3:d5:47:ef:23:
ab:de:91:78:b7:40:88:d2:0c:2b:ab:e0:18:1e:06:
b0:bb:cd:db:e0:98:64:46:4d:64:d2:72:7b:26:32:
86:8d:9c:39:ee:26:38:4b:57:c2:95:7f:46:16:cc:
7a:70:a5:1b:49:c6:c7:4f:f5:54:58:81:8a:d6:cf:
d7:63:32:b4:de:d3:21:1b:b8:4c:db:80:da:b5:15:
95:c2:9a:c3:a7:d6:0e:18:eb:b4:0d:e9:3b:2b:77:
9c:65:d4:a1:c7:3f:a1:46:98:8b:a4:c4:48:a5:fe:
5f:26:af:75:93:f8:f0:16:fb:85:28:c6:b3:fe:87:
c8:e8:59:26:ca:83:94:e3:05:27:0b:24:c8:e8:2b:
ef:e3:7f:0c:11:3f:5b:7a:28:bb:fa:33:a5:98:63:
c4:c6:d5:d5:80:cf:9b:9c:27:53:3c:90:5d:6d:04:
7e:ee:17:81:0d:38:55:8f:a3:58:db:41:0d:c0:8a:
00:b3:f1:6f:12:e8:50:3d:8e:f6:c0:d8:63:fa:26:
71:6d:1a:4b:9c:4b:10:a6:0d:2e:7c:39:06:a5:0e:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:89:B3:84:DA:B7:B9:B0:82:6D:03:14:FA:66:C3:FF:2D:5B:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.184.0/24
185.159.84.0/24
185.235.247.0/24
IPv6:
2a10:5d40::/29
2a11:5400::/29
2a11:bf00::/29
Signature Algorithm: sha256WithRSAEncryption
8d:ca:0d:61:10:f5:ec:54:45:32:09:58:9a:57:4d:71:19:d3:
18:f4:10:21:f5:09:dd:fe:9b:0b:7b:38:c0:de:3b:a8:50:9f:
96:1b:09:33:67:60:f6:54:aa:e3:39:0c:d9:e4:86:d0:3e:33:
49:8c:ce:77:89:fb:a7:b2:dd:25:47:3e:9f:eb:e0:2c:71:17:
09:0f:4b:77:31:fe:48:dc:10:61:d8:aa:e4:49:6e:b4:6b:58:
6f:af:82:30:7d:8d:b2:82:f7:cc:75:0a:df:5d:4f:27:74:53:
cd:20:97:33:43:0d:67:4a:42:04:4d:b0:c4:da:02:36:9d:c3:
70:e5:4e:da:2d:d7:f5:fc:49:47:e4:12:f9:e7:da:f4:5f:fa:
b1:71:3f:0d:17:8a:62:b6:3b:ef:ca:ff:a5:9f:f4:5f:0f:ca:
09:0d:d3:fe:3d:ac:c9:c5:25:c6:f3:65:57:41:2d:4d:41:65:
73:c5:4d:c2:62:47:90:f9:37:61:01:ad:40:45:ea:6c:35:50:
ef:c0:51:e4:8b:9f:18:49:d5:b0:58:f0:1c:d8:56:2a:94:bd:
80:0a:96:2d:dd:9d:66:c2:83:0c:48:48:ba:4a:2b:1e:a5:bc:
1c:27:4b:ee:29:ae:9e:dd:06:a9:2c:57:f8:46:91:38:8d:07:
0d:1b:85:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:23 2025 by rpki-client