Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ORcntQMyzq6mqUyDmDhZJIK72Ow.cer
File: ORcntQMyzq6mqUyDmDhZJIK72Ow.cer (raw, json)
Hash identifier: BDnQlzQpXx2safOhiG9o/+meKXw3YV2MFlTpWs5pGnA=
Subject key identifier: 39:17:27:B5:03:32:CE:AE:A6:A9:4C:83:98:38:59:24:82:BB:D8:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01878EAC21AE35A0577B9874625CD9721663
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/c182f1-6ddf-4bf3-bfd8-a40f6414bb82/1/ORcntQMyzq6mqUyDmDhZJIK72Ow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/c182f1-6ddf-4bf3-bfd8-a40f6414bb82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Apr 2023 10:04:18 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.176.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:ac:21:ae:35:a0:57:7b:98:74:62:5c:d9:72:16:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 10:04:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=391727b50332ceaea6a94c839838592482bbd8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:42:d9:cf:a2:ef:8e:22:e5:3c:7f:ab:fb:bf:
04:2d:4f:4b:fe:97:12:34:96:d3:9b:52:c2:cd:4d:
cc:b9:af:d4:47:78:5b:66:0d:1e:8c:0c:09:ef:6f:
5c:1f:d9:d6:4e:91:fd:00:98:1f:a5:fa:53:0e:0b:
dc:d5:0d:ce:85:d6:e5:4d:fd:f8:f3:8b:fc:af:27:
d6:73:46:5d:46:42:ac:26:0c:d8:ce:d5:b9:3d:44:
00:5c:f7:d1:05:cc:17:4f:1d:2c:53:33:b8:b7:0d:
4e:85:c9:06:67:e3:1f:52:c7:5e:7a:f1:4e:b2:9a:
a0:4d:fa:d8:64:58:9c:4e:d8:aa:df:1d:51:79:06:
cb:4b:f7:89:39:1b:22:88:c0:b4:99:f3:d0:47:61:
f1:e1:11:2b:d5:30:dd:a3:d8:e6:31:45:a2:e1:18:
65:06:a9:81:3a:16:1a:ab:53:d6:2e:21:88:ff:82:
0b:ff:51:f5:7a:01:e4:4f:cb:df:f2:69:3d:71:04:
25:ff:e7:d1:3b:a7:a6:76:b3:52:36:b4:9a:54:14:
cd:da:f3:9d:29:73:56:ef:5d:49:f6:48:fb:b1:23:
39:5f:51:90:97:b4:f9:26:bb:a5:c5:b6:c9:cc:e7:
ba:a5:79:2a:27:58:c7:ae:b7:a9:2d:fc:d6:3a:79:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:17:27:B5:03:32:CE:AE:A6:A9:4C:83:98:38:59:24:82:BB:D8:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c182f1-6ddf-4bf3-bfd8-a40f6414bb82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c182f1-6ddf-4bf3-bfd8-a40f6414bb82/1/ORcntQMyzq6mqUyDmDhZJIK72Ow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.176.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:01:f9:08:38:57:d7:74:82:d6:a9:15:4c:01:fc:0f:ce:44:
96:4b:64:ea:2f:d2:2e:b7:f8:b0:8c:03:e0:d7:68:ec:93:a6:
37:c0:80:f8:74:52:9d:bb:70:7d:d0:30:f9:9b:29:f8:6c:28:
e7:e9:81:cd:c3:22:63:7c:70:52:95:03:52:85:50:aa:e2:26:
84:d2:80:19:36:52:42:cd:e5:67:a9:dd:b4:ed:95:6c:f8:e2:
a8:96:80:0e:17:e3:c9:91:2d:a1:21:d8:e8:15:a4:19:64:33:
ce:bd:b3:35:fa:d9:e0:04:51:b9:96:d7:36:fe:e4:cf:b9:bb:
84:55:2d:1e:03:8b:1f:c5:89:95:b9:dd:7e:0f:cc:b7:42:68:
82:0d:e7:ac:1d:12:ea:60:ec:f1:fa:13:3f:26:e2:bc:d5:0b:
de:3a:e0:ed:15:c7:70:89:69:01:3e:8a:a1:c7:f5:50:04:c9:
a4:b2:68:d3:37:3e:4a:5e:8d:dc:30:85:17:e1:00:5d:14:ff:
1d:cc:33:e6:1d:0c:5b:19:49:3f:26:6a:24:a5:f1:30:89:fa:
02:34:fa:fb:ec:ff:53:89:bf:23:e8:4e:42:ce:c9:67:c9:15:
5a:6c:f8:b7:c3:c2:ab:71:ef:7d:37:c5:7d:c9:82:47:71:96:
2c:b8:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:12:40 2025 by rpki-client