Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oS3kDYCE_1GkNJ3svHK62uCkEN0.cer
File: oS3kDYCE_1GkNJ3svHK62uCkEN0.cer (raw, json)
Hash identifier: Ur2MCR8psgGgAFQHUoW6oKzwB2xtD6sr1kcXl6Sbb1I=
Subject key identifier: A1:2D:E4:0D:80:84:FF:51:A4:34:9D:EC:BC:72:BA:DA:E0:A4:10:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A476027992
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/07e936-f3d6-42c7-8145-b80576ef0a75/1/oS3kDYCE_1GkNJ3svHK62uCkEN0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/07e936-f3d6-42c7-8145-b80576ef0a75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:05:19 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 52069
IP: 194.247.40.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706354510226 (0xa476027992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:05:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a12de40d8084ff51a4349decbc72badae0a410dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:bf:03:2b:4f:61:91:e7:63:cf:c8:20:b6:
e2:00:fe:1f:92:56:9b:40:68:16:4b:2d:2b:cc:fe:
e7:18:2f:02:26:1e:17:fc:35:f9:e4:0b:e2:e0:0d:
bd:d9:6d:7a:68:e0:86:76:2e:b6:26:6c:c1:d1:d8:
17:db:b8:ca:70:06:36:49:5d:72:f0:b6:82:64:96:
96:3a:8a:1a:25:81:c9:53:e7:73:e7:98:bb:2d:7a:
c1:d5:ea:d7:39:d4:d9:8b:c2:97:3c:92:ad:21:2a:
8b:f1:7a:14:2f:77:dc:ca:44:50:dc:99:60:d0:ae:
91:af:be:44:f3:8a:79:3c:a5:58:df:38:f7:69:6d:
05:3f:80:13:5d:53:ea:d3:5d:5b:c3:9c:ae:44:21:
5f:9c:21:90:8a:32:9f:57:c9:e9:73:2a:d6:4a:4f:
6b:f3:f1:f9:de:7a:76:1b:42:c2:8b:b8:ae:69:3f:
b3:ce:70:21:e1:56:ae:40:d9:97:34:db:67:0a:35:
a0:b7:ed:6c:9c:b6:91:0c:8e:69:07:e7:5d:4f:9e:
f1:ee:46:e6:63:56:e4:29:14:b6:ae:73:7c:57:a9:
16:53:ce:c7:ae:5b:89:7d:95:4a:a2:33:e7:87:cc:
b9:97:49:c3:0b:bd:ec:11:0b:e3:a3:25:36:14:b0:
d5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2D:E4:0D:80:84:FF:51:A4:34:9D:EC:BC:72:BA:DA:E0:A4:10:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/07e936-f3d6-42c7-8145-b80576ef0a75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/07e936-f3d6-42c7-8145-b80576ef0a75/1/oS3kDYCE_1GkNJ3svHK62uCkEN0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.40.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52069
Signature Algorithm: sha256WithRSAEncryption
2d:80:f3:01:c6:02:34:fb:3d:3e:66:04:20:00:78:6a:db:04:
f9:18:a6:5e:a2:32:d1:6c:af:e9:41:d1:81:0e:48:f2:9b:03:
c5:d9:27:cf:12:55:92:75:e8:4b:a9:3d:21:e0:6b:d6:1a:9f:
74:f1:92:56:0e:87:b6:df:56:7b:ce:d4:41:c6:be:b8:f7:06:
d9:13:88:5e:12:ff:46:0c:92:bc:59:ca:42:02:2c:50:a7:38:
dc:60:49:df:0d:3a:6f:47:13:dc:a1:62:8a:44:b8:5b:37:06:
7a:76:8d:38:f6:cc:9f:99:e9:bd:cd:c9:4b:40:5a:01:3c:c0:
17:2c:cd:76:0b:b1:8e:cc:3d:36:09:c5:2e:b8:5a:e4:f9:0e:
e3:ee:97:b0:56:92:c4:83:fd:44:1c:0d:1a:82:a2:b6:fa:51:
68:33:9e:d8:75:62:f1:9a:66:8e:05:e4:de:19:8e:fa:8d:e7:
71:da:7a:97:f4:0e:e2:05:0d:11:d1:f5:4e:76:7e:9a:da:dc:
c3:b7:62:85:06:9d:4c:af:44:8b:f3:87:ea:ab:45:ba:a7:eb:
ad:74:00:56:75:84:b2:d6:15:7c:9a:22:8b:15:52:eb:24:48:
89:a1:54:ef:cc:fe:ad:fd:39:8a:32:5e:90:77:5c:cf:54:1f:
be:0c:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:50 2025 by rpki-client