Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O8YZdJaXH0yjxeV20joA9iiPgvI.cer
File: O8YZdJaXH0yjxeV20joA9iiPgvI.cer (raw, json)
Hash identifier: /KUJRbhOIndO71WzH5WUjmz+eyqQ+28IGYdOo+ctasg=
Subject key identifier: 3B:C6:19:74:96:97:1F:4C:A3:C5:E5:76:D2:3A:00:F6:28:8F:82:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B0078F7A09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/3d7fc8-b4d6-4433-8d5c-2fdce854f10f/1/O8YZdJaXH0yjxeV20joA9iiPgvI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/3d7fc8-b4d6-4433-8d5c-2fdce854f10f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 13 Apr 2022 07:36:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 15594
IP: 82.116.96.0/19
IP: 95.174.128.0/19
IP: 212.9.32.0/19
IP: 217.10.64.0/20
IP: 217.116.112.0/20
IP: 2001:ab0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756041087497 (0xb0078f7a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 13 07:36:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bc6197496971f4ca3c5e576d23a00f6288f82f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:dd:f6:0b:0f:a7:24:54:5a:d5:0b:b6:0f:8f:
cb:7c:24:d5:86:d1:36:fc:88:d0:bb:96:f7:07:ef:
c7:77:c5:d4:f1:69:b0:98:b1:c2:6e:fa:db:93:de:
fe:af:4c:cc:3b:68:d1:55:3e:53:ec:88:d1:f0:18:
c2:9b:79:1c:c7:98:66:71:28:85:31:e3:21:bd:67:
b6:50:bd:8e:ce:2b:30:07:e6:c5:8e:ba:26:2f:02:
50:73:85:e6:bb:7d:ac:fb:8e:04:91:8e:97:b3:fa:
31:79:f0:7d:5b:06:aa:85:be:d5:65:6f:15:44:ee:
d8:67:21:4a:4a:02:9e:01:85:07:d4:14:f5:31:ab:
b7:e3:e5:b9:b2:a9:f1:45:bf:54:da:78:91:8e:a8:
fd:36:cf:e8:24:00:2e:fa:82:23:70:17:5a:13:44:
5c:08:fd:80:30:af:cb:a2:eb:b9:cb:82:6d:49:57:
4f:53:a2:12:1a:82:16:69:3f:ba:6e:d4:4b:b3:1f:
ce:57:51:1c:5a:59:73:54:6e:2f:78:ee:a5:ac:65:
e8:9f:69:fe:2f:ba:34:95:f4:0f:9a:97:6e:8a:60:
d8:76:ed:50:ed:f5:2a:22:ad:0f:b9:a5:a3:e8:80:
a7:90:1c:c1:34:90:a8:0a:9b:b3:f0:f7:ec:1e:04:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C6:19:74:96:97:1F:4C:A3:C5:E5:76:D2:3A:00:F6:28:8F:82:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3d7fc8-b4d6-4433-8d5c-2fdce854f10f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3d7fc8-b4d6-4433-8d5c-2fdce854f10f/1/O8YZdJaXH0yjxeV20joA9iiPgvI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.96.0/19
95.174.128.0/19
212.9.32.0/19
217.10.64.0/20
217.116.112.0/20
IPv6:
2001:ab0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15594
Signature Algorithm: sha256WithRSAEncryption
2b:f0:ba:8a:b7:3c:2c:d5:57:f8:d8:cb:4e:70:72:fe:bd:f6:
63:7d:a6:ed:7a:cb:dd:cb:36:ba:7b:e1:c9:d8:85:37:db:92:
03:0d:67:75:ba:b2:8d:68:c7:5c:ac:80:61:19:2d:a3:29:67:
fe:82:51:b2:0c:a0:59:ab:f0:75:22:21:e0:4a:9f:82:08:94:
39:4a:25:3a:39:50:80:46:5d:78:4b:a5:28:17:2f:b6:9d:5e:
8d:5b:78:de:66:4c:66:15:36:0d:5c:ad:39:67:c1:e8:4e:8c:
19:0c:f5:ea:d2:6e:38:8c:d5:8a:d2:62:09:e2:1e:a2:78:72:
96:25:0e:4d:d4:c6:e3:89:d3:45:00:7b:9f:94:54:6e:59:72:
16:4a:46:72:b2:c8:97:7b:8b:50:c8:5a:bb:12:51:a2:f7:47:
9f:7a:93:7b:9f:72:45:b3:4f:3d:b7:d9:b2:bf:00:f5:ba:f2:
d4:9d:73:a9:00:bf:15:d3:9f:95:90:81:b9:ae:7e:09:fb:ed:
e0:be:b0:85:3b:b3:24:b7:48:55:59:de:36:f9:78:5a:aa:4c:
87:4f:3c:0a:b3:2e:96:38:c4:b5:1c:0a:a6:4b:4a:b5:55:fb:
67:39:fd:54:ed:1f:32:f1:1b:c2:e1:c0:21:52:65:60:ec:96:
b8:2e:b6:32
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIGALAHj3oJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NDEzMDczNjU5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzYmM2MTk3NDk2
OTcxZjRjYTNjNWU1NzZkMjNhMDBmNjI4OGY4MmYyMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA+932Cw+nJFRa1Qu2D4/LfCTVhtE2/IjQu5b3B+/Hd8XU
8WmwmLHCbvrbk97+r0zMO2jRVT5T7IjR8BjCm3kcx5hmcSiFMeMhvWe2UL2Ozisw
B+bFjromLwJQc4Xmu32s+44EkY6Xs/oxefB9Wwaqhb7VZW8VRO7YZyFKSgKeAYUH
1BT1Mau34+W5sqnxRb9U2niRjqj9Ns/oJAAu+oIjcBdaE0RcCP2AMK/Louu5y4Jt
SVdPU6ISGoIWaT+6btRLsx/OV1EcWllzVG4veO6lrGXon2n+L7o0lfQPmpduimDY
du1Q7fUqIq0PuaWj6ICnkBzBNJCoCpuz8PfsHgQ8vwIDAQABo4ICxjCCAsIwHQYD
VR0OBBYEFDvGGXSWlx9Mo8XldtI6APYoj4LyMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzNkN2ZjOC1iNGQ2LTQ0MzMt
OGQ1Yy0yZmRjZTg1NGYxMGYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvM2Q3ZmM4LWI0ZDYtNDQzMy04
ZDVjLTJmZGNlODU0ZjEwZi8xL084WVpkSmFYSDB5anhlVjIwam9BOWlpUGd2SS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAk
BAIAATAeAwQFUnRgAwQFX66AAwQF1AkgAwQE2QpAAwQE2XRwMA0EAgACMAcDBQMg
AQqwMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjzqMA0GCSqGSIb3DQEBCwUAA4IB
AQAr8LqKtzws1Vf42MtOcHL+vfZjfabtesvdyza6e+HJ2IU325IDDWd1urKNaMdc
rIBhGS2jKWf+glGyDKBZq/B1IiHgSp+CCJQ5SiU6OVCARl14S6UoFy+2nV6NW3je
ZkxmFTYNXK05Z8HoTowZDPXq0m44jNWK0mIJ4h6ieHKWJQ5N1MbjidNFAHuflFRu
WXIWSkZyssiXe4tQyFq7ElGi90efepN7n3JFs089t9myvwD1uvLUnXOpAL8V05+V
kIG5rn4J++3gvrCFO7Mkt0hVWd42+XhaqkyHTzwKsy6WOMS1HAqmS0q1VftnOf1U
7R8y8RvC4cAhUmVg7Ja4LrYy
-----END CERTIFICATE-----
Generated at Fri May 2 04:07:10 2025 by rpki-client