Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oe5llaLG0UzqBkW0jCGPJNSR4xg.cer
File: oe5llaLG0UzqBkW0jCGPJNSR4xg.cer (raw, json)
Hash identifier: 21rEJRqfmw7hBMCyDQLA7CI9VGXo9iX9MJA15fkZ4hg=
Subject key identifier: A1:EE:65:95:A2:C6:D1:4C:EA:06:45:B4:8C:21:8F:24:D4:91:E3:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C32906864
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/5a19a2-230e-467c-8e37-266540e30e5b/1/oe5llaLG0UzqBkW0jCGPJNSR4xg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/5a19a2-230e-467c-8e37-266540e30e5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:00:54 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.144.116.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670863222884 (0x9c32906864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:00:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1ee6595a2c6d14cea0645b48c218f24d491e318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:44:51:ea:a6:80:86:37:1b:d5:ef:41:9d:
b4:53:e0:d8:dc:90:88:f0:91:53:a6:c1:ba:25:94:
b3:4d:54:5b:a7:9c:b0:f2:dc:53:56:25:b6:7d:ec:
23:16:d6:44:ce:bb:84:12:52:6a:e2:72:f3:69:8e:
ec:b6:ec:c1:62:25:24:64:e9:29:44:55:69:55:8e:
15:aa:d4:51:26:a6:0f:92:29:74:e7:52:42:24:63:
75:05:e0:bf:33:48:5b:59:cd:64:56:f9:29:ba:47:
09:11:1e:c3:00:5b:09:a2:76:ca:14:5b:98:a4:05:
e0:55:d4:a6:c7:bc:31:07:a9:51:b5:ad:be:c8:49:
46:f5:51:8f:65:f5:f4:4c:a2:dc:12:c9:c7:00:ee:
f4:fc:9b:d8:5b:d8:e6:ee:09:9b:dc:fc:d6:a0:ac:
1f:f0:ec:62:6a:06:55:12:db:d8:70:29:a8:ac:55:
5e:a4:53:11:67:3d:f0:dc:8f:04:19:74:4d:7e:3b:
5a:a4:a2:d6:e2:c3:89:a3:1d:61:89:8a:e8:84:c0:
aa:a3:8e:91:75:00:2c:8b:c8:25:33:6e:7b:85:f8:
7a:2f:ea:09:c5:86:90:94:97:cf:29:9e:95:3f:a3:
c9:1c:1f:3b:11:a8:4f:20:5a:13:46:80:e2:b2:06:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EE:65:95:A2:C6:D1:4C:EA:06:45:B4:8C:21:8F:24:D4:91:E3:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a19a2-230e-467c-8e37-266540e30e5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a19a2-230e-467c-8e37-266540e30e5b/1/oe5llaLG0UzqBkW0jCGPJNSR4xg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.116.0/22
Signature Algorithm: sha256WithRSAEncryption
20:74:c6:3b:03:74:bd:26:f8:2a:8c:bc:28:18:1c:61:af:9e:
9d:05:fe:e8:64:a6:fc:c5:5a:99:d5:8a:23:dc:7b:b3:bb:20:
aa:24:80:7b:5c:56:8b:64:20:ca:e6:4f:d1:31:5d:8d:f2:af:
c4:4d:28:45:c3:67:19:f4:81:76:1c:b0:3a:1f:74:ad:43:d6:
a5:b6:ad:e0:02:53:5e:10:09:c8:32:a4:ab:c7:d7:43:75:56:
b6:08:6d:a9:08:65:0d:ea:e7:8e:52:44:04:37:fe:e9:6f:cd:
e5:b2:50:0c:a7:c1:d5:de:6b:ea:d1:7f:a0:c3:d8:e4:74:e8:
a5:cb:4b:5a:a9:f3:66:b4:37:5d:4b:c5:1b:00:bb:4b:ac:de:
49:eb:80:93:4b:e1:a8:8f:6d:76:75:fe:25:1e:77:db:e9:29:
28:e1:c7:f8:7a:83:36:50:6f:05:26:3f:9a:f9:41:5d:26:09:
4a:e0:c5:48:33:ef:df:5c:45:b3:ea:ce:9c:22:c2:2a:0e:59:
76:f0:54:a7:14:aa:d0:f1:63:b8:82:49:8e:07:a0:ce:f5:ec:
0c:e0:f1:5a:a7:5a:d3:4a:c3:c7:63:7d:31:b6:ce:ff:22:5a:
5c:35:4d:4e:48:e1:fa:21:7f:5e:16:5f:10:5c:bb:7c:2e:2f:
a5:96:84:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:27 2025 by rpki-client