Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OOqIC-SJbm6sF1SWdGPLy7Z1074.cer
File: OOqIC-SJbm6sF1SWdGPLy7Z1074.cer (raw, json)
Hash identifier: o+eGESi0NcbLghSmOp8625a3BzBUI7frilHIefC2tnE=
Subject key identifier: 38:EA:88:0B:E4:89:6E:6E:AC:17:54:96:74:63:CB:CB:B6:75:D3:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99F5B69E54
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f8274-a593-43e0-8e27-ea936516c7b5/1/OOqIC-SJbm6sF1SWdGPLy7Z1074.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f8274-a593-43e0-8e27-ea936516c7b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:50:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.155.144.0/22
IP: 2a0b:2480::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661252382292 (0x99f5b69e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:50:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38ea880be4896e6eac1754967463cbcbb675d3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:55:fc:1d:4d:86:ad:cc:d4:80:52:0d:6a:
29:6f:b5:ff:9c:35:6f:39:8e:c4:20:21:df:a3:77:
b6:76:68:4d:77:a9:a5:a3:81:2b:9e:e8:48:a3:b1:
a8:65:0b:74:e5:d4:37:8d:70:b0:29:64:c0:4b:b5:
25:4e:56:e4:a6:12:8d:9d:ea:6a:c3:e4:7a:83:5d:
61:f0:41:a7:e1:02:19:52:84:04:1a:c9:35:fb:7d:
91:ed:b6:af:12:fa:6b:21:2c:dd:2d:41:3f:36:be:
77:41:a6:7c:83:16:77:3d:6c:01:de:ae:5d:4b:89:
a8:b1:da:44:2c:91:f6:3b:ef:ea:a5:b5:9c:6d:14:
6a:37:7b:a9:cc:9a:ab:e4:24:39:5d:17:90:a5:4c:
4e:66:04:9e:47:97:f4:13:1c:d6:05:cd:de:13:e8:
d5:e6:70:7b:9f:5e:21:23:fc:0e:b2:e1:a1:77:e1:
36:7b:f8:2f:99:84:be:71:1c:13:7d:74:33:eb:ea:
71:a1:cd:24:8a:a1:f0:52:f9:64:06:8d:75:fc:e2:
93:72:fa:9b:25:1e:5c:b5:34:38:d5:f8:26:f5:3b:
63:31:11:bc:b1:12:8a:15:67:cc:2f:ba:61:07:a0:
a4:a8:3c:fd:bd:e0:19:6b:ee:5a:02:11:ad:25:d3:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EA:88:0B:E4:89:6E:6E:AC:17:54:96:74:63:CB:CB:B6:75:D3:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f8274-a593-43e0-8e27-ea936516c7b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f8274-a593-43e0-8e27-ea936516c7b5/1/OOqIC-SJbm6sF1SWdGPLy7Z1074.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.144.0/22
IPv6:
2a0b:2480::/32
Signature Algorithm: sha256WithRSAEncryption
1b:be:fd:44:7d:b3:9f:ce:1c:bc:f9:8e:ac:cf:78:d7:c8:57:
7b:96:cf:29:1f:cf:6f:4b:09:c2:0e:ed:1c:8c:58:56:2d:73:
e5:a8:4c:57:3f:e1:88:84:2a:51:be:0a:3d:da:e3:e4:f1:1b:
42:e9:42:5e:9a:2f:81:4e:ed:08:1c:fa:29:ee:40:15:38:38:
b1:3c:ab:ca:2b:01:45:b2:3f:0d:fd:1d:35:92:3a:b1:a5:96:
20:89:82:f3:b9:ae:97:6a:e4:37:4a:af:df:d5:53:1d:4c:a7:
6d:fd:7b:ad:62:dd:a7:4f:91:bf:cf:98:2e:6b:22:8c:1f:31:
4b:b2:c9:7a:9d:97:00:0a:2c:31:73:d9:62:88:5e:b0:b3:ba:
5c:c7:a7:61:e8:b1:d4:40:6d:e3:e7:95:72:88:c5:be:94:0f:
4e:7e:61:cc:2f:76:c5:43:c0:56:e5:ec:68:ff:2a:43:79:a1:
47:7e:a3:4f:2a:e4:6f:e2:d9:d4:21:19:2f:72:ec:cf:4d:e9:
04:df:23:ac:18:46:46:ad:32:02:c4:c7:40:1e:3d:6b:18:a6:
41:53:eb:52:b7:4b:33:2d:60:93:6f:8e:52:c4:e4:98:89:92:
b0:50:f2:9b:d5:0f:3a:a9:5f:e2:74:65:3e:da:56:f7:28:a9:
ff:94:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:11 2023 by rpki-client on console.sobornost.net