Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oRpJHRo3BitG7o3xZeBTQhR31j8.cer
File: oRpJHRo3BitG7o3xZeBTQhR31j8.cer (raw, json)
Hash identifier: x4psrlq47gwsgMrjBmg1JHoF0LYak2hQNDpe0c8epBQ=
Subject key identifier: A1:1A:49:1D:1A:37:06:2B:46:EE:8D:F1:65:E0:53:42:14:77:D6:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018AACDB1C07D8EEF4F678A4D8E23F9E6C9B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/oRpJHRo3BitG7o3xZeBTQhR31j8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 19 Sep 2023 09:52:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.184.188.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:db:1c:07:d8:ee:f4:f6:78:a4:d8:e2:3f:9e:6c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 19 09:52:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a11a491d1a37062b46ee8df165e053421477d63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:c1:35:c6:a9:cc:04:9d:07:78:f2:7e:64:
98:e3:55:89:3d:7a:96:20:5b:2d:af:68:bb:63:0d:
7d:6b:94:0e:9b:0b:4b:3f:29:1c:7e:ef:5e:e8:75:
5a:da:f8:68:89:b6:a0:d3:ee:08:17:21:56:d4:98:
fa:53:34:6c:65:a8:dd:d5:91:6d:4c:02:dc:51:3a:
9d:41:1c:c8:a8:0e:0b:cc:97:07:dc:69:62:29:0e:
d3:64:65:ab:99:56:72:50:22:59:03:cf:a4:53:ae:
a0:a3:b4:d0:7d:98:4a:23:80:08:bc:45:88:ae:6b:
c6:55:65:12:74:76:0a:bd:80:ba:80:32:59:68:0c:
49:32:a0:8c:73:65:82:18:36:0a:f5:71:db:08:70:
41:03:ae:d6:27:72:a1:14:8e:23:61:de:06:d1:a9:
5f:fa:84:e6:e7:7b:9c:86:2d:92:8c:22:89:45:f6:
0b:aa:a8:be:ba:6a:87:90:f8:38:87:af:db:02:16:
2d:70:48:c7:79:b1:99:09:d8:4a:e0:3d:33:52:97:
fe:90:8d:1f:cd:01:e8:19:5b:3b:84:2c:5f:37:1d:
2b:85:dd:d8:f1:2b:13:00:61:c5:d6:d8:6b:09:d5:
6f:57:8b:84:32:d5:e4:fb:1b:1a:ab:17:fd:1a:d3:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1A:49:1D:1A:37:06:2B:46:EE:8D:F1:65:E0:53:42:14:77:D6:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/oRpJHRo3BitG7o3xZeBTQhR31j8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.188.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:c1:80:eb:cf:27:f1:a4:9f:93:8e:4f:d1:ee:43:6f:6b:fd:
3b:0f:29:5b:8b:ae:2e:01:d4:fc:2c:ce:db:04:bb:f9:88:3f:
e9:fa:e5:4d:d6:fa:28:a5:11:49:1d:20:e8:d6:28:64:23:52:
24:d6:22:dc:13:11:f3:04:ec:91:ac:7e:c9:57:31:88:26:7d:
a5:8d:10:3e:65:ed:8b:d1:f2:33:6b:75:b0:79:74:76:53:bf:
c0:04:e0:13:4a:0a:72:66:b7:00:2b:43:ad:43:1a:58:a5:04:
d7:46:d2:61:32:cb:24:7e:02:6a:17:a8:43:82:e3:11:65:ce:
13:ca:0f:75:fa:47:05:4e:b4:47:c7:de:28:cb:7e:3a:20:1e:
cd:81:cc:72:c6:01:48:b6:68:2d:2f:b8:aa:2a:cd:9f:f1:c7:
35:4d:b7:ae:4c:ba:e1:c5:c2:b1:90:d7:bf:a5:a8:80:e0:c9:
e8:20:56:30:a5:33:db:6a:3e:f8:1f:08:86:97:69:ac:59:c6:
d2:8d:45:cb:75:3b:f8:79:a3:28:a1:49:b0:88:43:6f:ec:c7:
64:c5:27:fb:30:39:b7:5e:37:ab:d6:d8:e1:4e:eb:1b:d3:93:
7f:a8:cc:91:ec:cb:c0:a6:33:ba:00:01:93:5c:46:17:60:d7:
15:01:f5:c9
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYqs2xwH2O709nik2OI/nmybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwOTE5MDk1MjM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTFhNDkxZDFhMzcwNjJiNDZlZThkZjE2NWUwNTM0MjE0NzdkNjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr3BNcapzASdB3jyfmSY41WJPXqW
IFstr2i7Yw19a5QOmwtLPykcfu9e6HVa2vhoibag0+4IFyFW1Jj6UzRsZajd1ZFt
TALcUTqdQRzIqA4LzJcH3GliKQ7TZGWrmVZyUCJZA8+kU66go7TQfZhKI4AIvEWI
rmvGVWUSdHYKvYC6gDJZaAxJMqCMc2WCGDYK9XHbCHBBA67WJ3KhFI4jYd4G0alf
+oTm53uchi2SjCKJRfYLqqi+umqHkPg4h6/bAhYtcEjHebGZCdhK4D0zUpf+kI0f
zQHoGVs7hCxfNx0rhd3Y8SsTAGHF1thrCdVvV4uEMtXk+xsaqxf9GtOd8QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKEaSR0aNwYrRu6N8WXgU0IUd9Y/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzYwOTEy
Mi03YmQzLTQ2MjMtYTk2Yy1jZGEyYTE2MGQ0NTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvNjA5MTIy
LTdiZDMtNDYyMy1hOTZjLWNkYTJhMTYwZDQ1NS8xL29ScEpIUm8zQml0RzdvM3ha
ZUJUUWhSMzFqOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCubi8MA0GCSqGSIb3DQEBCwUAA4IBAQCqwYDr
zyfxpJ+Tjk/R7kNva/07Dylbi64uAdT8LM7bBLv5iD/p+uVN1voopRFJHSDo1ihk
I1Ik1iLcExHzBOyRrH7JVzGIJn2ljRA+Ze2L0fIza3WweXR2U7/ABOATSgpyZrcA
K0OtQxpYpQTXRtJhMsskfgJqF6hDguMRZc4Tyg91+kcFTrRHx94oy346IB7Ngcxy
xgFItmgtL7iqKs2f8cc1TbeuTLrhxcKxkNe/paiA4MnoIFYwpTPbaj74HwiGl2ms
WcbSjUXLdTv4eaMooUmwiENv7MdkxSf7MDm3Xjer1tjhTusb05N/qMyR7MvApjO6
AAGTXEYXYNcVAfXJ
-----END CERTIFICATE-----
Generated at Wed Mar 12 16:39:40 2025 by rpki-client