Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oV65oAwvlMtO_UG680FJmsC87G8.cer
File: oV65oAwvlMtO_UG680FJmsC87G8.cer (raw, json)
Hash identifier: m8dcdqU2iOrX5jS7tjtfYAIfHdm27LLYcPNjsPtCuVs=
Subject key identifier: A1:5E:B9:A0:0C:2F:94:CB:4E:FD:41:BA:F3:41:49:9A:C0:BC:EC:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3EFE12E07B6533EA9611A89DA60B79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/74527f-fa08-40cb-995d-b9de7a77bffe/1/oV65oAwvlMtO_UG680FJmsC87G8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/74527f-fa08-40cb-995d-b9de7a77bffe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 209567
IP: 194.2.75.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3e:fe:12:e0:7b:65:33:ea:96:11:a8:9d:a6:0b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a15eb9a00c2f94cb4efd41baf341499ac0bcec6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:b3:af:0a:75:08:2b:1f:a8:f0:d6:0c:2e:
41:48:5e:2a:38:fc:27:16:92:96:af:61:be:ac:d5:
4f:94:8d:57:18:9c:8c:86:34:53:b2:64:ac:50:e2:
0b:c0:25:8f:e6:18:2b:d4:1a:fa:bc:fb:d0:1a:71:
c2:f7:3e:50:4a:4c:8c:bf:02:79:49:c4:41:39:f4:
80:43:f5:86:ba:d5:80:2a:c2:68:d7:78:7c:d5:71:
2e:8f:09:19:be:b7:a6:d1:f9:a1:9d:4c:4d:2f:7b:
cd:b2:74:ba:4c:ba:ef:e8:9d:c5:70:84:e3:26:67:
8e:34:00:51:5e:36:48:03:8d:f8:33:76:b9:ea:ed:
61:31:78:fe:12:a0:82:c3:6e:15:99:82:49:db:c1:
4d:a0:11:ff:e3:5b:3f:2c:52:65:ec:7a:1e:30:e7:
66:66:ce:ad:29:ca:e6:a7:64:31:e9:53:0e:18:f5:
c3:23:ae:9b:50:a4:21:71:07:58:48:f7:54:20:72:
09:88:c3:a9:e1:98:ce:40:6a:11:e2:29:ec:e5:9a:
14:15:1c:bc:26:1f:27:8a:e1:d5:3a:64:4d:2a:71:
35:99:e3:b6:56:ac:66:56:6d:cd:0a:79:90:38:b9:
6c:35:e4:41:a0:f2:de:a2:24:6a:ec:39:5e:6e:34:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5E:B9:A0:0C:2F:94:CB:4E:FD:41:BA:F3:41:49:9A:C0:BC:EC:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/74527f-fa08-40cb-995d-b9de7a77bffe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/74527f-fa08-40cb-995d-b9de7a77bffe/1/oV65oAwvlMtO_UG680FJmsC87G8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.2.75.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209567
Signature Algorithm: sha256WithRSAEncryption
16:8c:2f:28:8f:30:be:a4:4e:68:ab:b1:84:8f:9b:11:38:84:
0b:a2:2e:68:d0:b6:03:7c:96:d3:5f:33:a9:7f:87:65:c1:96:
55:ec:f3:47:8b:11:8e:24:1d:c2:d2:67:dd:0d:29:e5:6d:2d:
ef:9a:0f:f2:cd:63:83:79:8c:27:0f:e0:29:18:d4:f1:3d:e5:
83:f3:50:6c:85:e9:c5:4f:a9:18:09:d0:49:8e:91:28:42:cb:
95:1c:18:f4:65:3a:c5:18:29:25:f0:81:8c:2e:dd:10:36:e0:
ac:b0:fb:b8:7c:0d:bd:91:9b:94:15:e0:63:42:d3:43:53:a7:
2b:fd:b0:9c:4e:97:8c:69:f6:32:39:95:af:ac:a4:31:ff:a0:
55:8d:8a:c2:8b:e7:35:46:72:65:b6:16:2e:95:4e:d1:fd:d6:
10:b7:d6:ad:e8:72:f4:ee:68:fd:cb:ca:36:bf:44:02:be:3c:
15:16:9a:92:34:e7:a8:35:4b:2c:a8:9f:4b:1e:44:71:16:ee:
b3:34:6e:9e:c8:e5:55:a9:0f:bc:e6:9c:7e:04:f7:7d:4c:2c:
86:5a:b5:0c:f0:4a:91:da:d9:a7:b7:37:90:10:12:fa:8c:01:
02:6b:d7:30:ac:e0:79:61:41:7b:3e:59:88:84:95:f9:2a:ca:
83:ed:84:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:00:37 2025 by rpki-client