Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oVj7BgQ377l_TAPf-3UXFp8gScQ.cer
File: oVj7BgQ377l_TAPf-3UXFp8gScQ.cer (raw, json)
Hash identifier: 9cgfJK3f/I5YRGNDLqSPPqwbipzPSWagY2m90Rq69Ak=
Subject key identifier: A1:58:FB:06:04:37:EF:B9:7F:4C:03:DF:FB:75:17:16:9F:20:49:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0189654A529EBDD4CAEE2A0718343D15806A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/12f56c-be48-4152-8182-1591ea07d4d9/1/oVj7BgQ377l_TAPf-3UXFp8gScQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/12f56c-be48-4152-8182-1591ea07d4d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Jul 2023 19:18:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.116.17.0/24
IP: 2a11:e640::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:52:9e:bd:d4:ca:ee:2a:07:18:34:3d:15:80:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 19:18:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a158fb060437efb97f4c03dffb7517169f2049c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:b0:df:14:c2:a4:c1:f3:35:35:3d:5f:25:
da:97:57:36:fd:fb:a4:13:77:1d:3d:17:3b:5e:0d:
a3:2a:21:06:ae:c7:e4:1f:1b:12:56:38:ea:0d:0f:
b9:39:91:b4:04:6f:48:66:ba:1c:6a:e2:ed:9f:04:
73:a8:10:61:13:be:07:fd:b5:11:b9:4b:eb:e1:fd:
2e:ae:40:ff:64:c3:8c:29:99:12:b2:6b:d9:f0:20:
d2:09:72:5a:13:dc:ca:b8:37:83:0d:0f:ab:65:36:
1f:a6:f2:af:9c:d2:55:fa:64:88:3b:0f:11:d8:fe:
46:9d:52:ad:cc:83:34:c5:04:b1:44:33:8c:20:11:
97:68:4e:bb:2e:45:25:6c:42:e6:c1:32:9f:b3:da:
90:84:06:f8:00:59:69:f8:3e:81:77:ed:a4:95:8f:
c8:ca:0a:07:71:ac:81:23:5b:2f:b7:9c:15:ab:b0:
05:60:e5:4a:60:4f:ed:e6:07:bb:14:5b:86:41:32:
ae:39:5e:77:6e:37:eb:52:16:5a:14:9b:e6:51:74:
82:a0:16:67:41:f3:2d:25:4d:ac:c2:83:14:94:b7:
9d:b9:a6:74:eb:48:32:75:c1:e3:33:d6:7e:95:f0:
f3:ab:56:69:45:d9:d5:5d:24:e6:e8:16:d3:4a:77:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:58:FB:06:04:37:EF:B9:7F:4C:03:DF:FB:75:17:16:9F:20:49:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/12f56c-be48-4152-8182-1591ea07d4d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/12f56c-be48-4152-8182-1591ea07d4d9/1/oVj7BgQ377l_TAPf-3UXFp8gScQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.17.0/24
IPv6:
2a11:e640::/29
Signature Algorithm: sha256WithRSAEncryption
4d:71:95:de:5e:80:58:eb:7e:14:0f:2b:0c:1d:9b:2d:ae:f3:
47:9c:8e:0f:8f:9c:bc:0a:5d:e0:1f:50:cc:b7:83:04:df:88:
18:76:d0:a6:fb:f9:35:ee:f7:ce:71:c6:23:8c:73:93:b0:50:
44:12:e0:50:f2:8d:d4:ee:0d:a9:e6:ab:ed:05:cc:0a:77:cc:
39:c5:e3:49:1c:89:ba:83:5e:d6:f1:ca:54:9c:0e:11:07:19:
1f:2a:c1:06:4a:99:20:18:2f:46:ba:97:7b:61:7c:c1:a3:62:
e2:40:e8:65:d1:a4:03:92:ef:46:2b:5f:1f:3b:37:12:f9:59:
30:7c:98:ed:29:e0:53:a4:de:c5:df:a3:eb:bc:9d:2d:0f:86:
98:85:39:9f:53:69:3a:b9:65:aa:bc:a7:54:3a:10:30:3f:b8:
b4:9c:18:2b:cb:c1:c0:3e:52:ed:ab:60:fb:23:da:4f:6a:08:
61:21:e1:6f:4a:29:2d:70:02:0a:2e:6c:ec:19:26:29:c0:88:
08:e1:f8:5d:69:e4:3b:78:ad:89:9a:bb:93:07:ed:fc:29:f9:
40:90:44:d3:3e:1d:14:f7:51:7a:44:e6:22:66:9b:38:36:5e:
70:3f:4e:f8:78:a5:e9:af:22:33:e9:51:0d:f8:97:66:8c:5e:
8b:89:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:10:15 2025 by rpki-client