Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VDN6yT_wSO2DfdVDoJFZs-oDoNk.cer
File: VDN6yT_wSO2DfdVDoJFZs-oDoNk.cer (raw, json)
Hash identifier: a93se7i7eiN05mMTzcNAsZ4guUQd21DQK0sG2f1VwAQ=
Subject key identifier: 54:33:7A:C9:3F:F0:48:ED:83:7D:D5:43:A0:91:59:B3:EA:03:A0:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A37F913DFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/88ed70-ce1d-407e-87f9-1d3ac04f7282/1/VDN6yT_wSO2DfdVDoJFZs-oDoNk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/88ed70-ce1d-407e-87f9-1d3ac04f7282/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:54:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 197040
IP: 195.206.224.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702219894268 (0xa37f913dfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54337ac93ff048ed837dd543a09159b3ea03a0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:08:00:92:0c:f2:2c:29:b5:95:ce:92:47:
91:5c:ed:6d:55:93:4f:7c:46:4d:c4:30:25:25:7f:
2e:05:8d:d5:3f:75:ac:f4:75:28:84:93:64:0a:42:
ab:b8:ad:1a:18:46:93:af:62:de:33:19:a6:0a:ac:
9b:7f:3a:51:63:53:ee:19:c8:85:fa:32:be:88:ea:
80:33:5e:84:3c:ae:79:16:30:a9:0d:d7:23:7d:ed:
bf:92:00:65:00:9c:b3:aa:d7:08:fb:29:15:06:96:
7e:6f:29:89:0d:1f:e1:2e:19:0b:49:c7:1b:f2:cb:
70:de:ae:58:0c:48:78:89:6b:b8:2f:a4:a4:b6:db:
b2:cf:fb:51:7e:f0:ff:63:b6:60:b4:a0:90:b8:e4:
55:8d:c1:a9:51:d2:e2:b7:d4:93:3b:fd:23:36:91:
ef:14:11:36:b2:94:7e:bf:07:f4:f5:2f:63:6f:ac:
32:2f:60:35:33:2f:0b:5c:40:a3:ab:3a:94:7a:fe:
0b:14:5b:3e:81:43:4a:68:aa:d1:1f:57:3c:c6:30:
03:f1:46:6c:48:0c:5a:29:7c:8f:35:b4:36:df:60:
06:9a:05:ce:c0:31:80:19:32:46:63:c1:74:45:69:
54:9e:a8:cc:09:f5:f5:d7:65:39:8e:f6:cb:d3:a2:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:33:7A:C9:3F:F0:48:ED:83:7D:D5:43:A0:91:59:B3:EA:03:A0:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/88ed70-ce1d-407e-87f9-1d3ac04f7282/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/88ed70-ce1d-407e-87f9-1d3ac04f7282/1/VDN6yT_wSO2DfdVDoJFZs-oDoNk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.224.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197040
Signature Algorithm: sha256WithRSAEncryption
ac:de:06:7c:cc:89:d7:f0:67:6c:59:aa:be:2e:ea:50:96:74:
b8:ba:24:78:d1:25:97:03:dc:63:a0:46:e1:f9:fc:19:d7:aa:
f0:3a:16:da:4d:60:a9:b2:a9:89:46:a5:ff:2f:33:b0:2f:f1:
f6:27:ee:87:75:31:8e:e9:f6:e0:fb:e3:59:60:b0:f1:7d:cb:
f4:f5:a9:b6:3f:df:fb:f2:7a:a9:4d:1a:c4:d6:2e:09:31:57:
90:f8:71:37:95:48:a0:c6:63:5a:b8:d9:93:ba:f0:24:df:92:
af:b6:6a:d7:65:ae:5a:b8:9d:34:f9:75:62:9b:f4:11:fc:71:
57:36:38:57:a8:46:f2:c6:db:f9:1d:67:33:ec:2d:c0:d3:2b:
e4:b6:66:5b:14:2e:86:34:2f:3c:3e:2b:79:35:e1:81:4d:4b:
d4:64:0b:34:c1:63:05:b9:12:a4:5a:1f:63:d1:98:e7:dd:b0:
28:a2:b0:53:1a:93:03:41:6c:2c:fa:c4:cf:f8:74:d6:7c:23:
8b:59:89:44:d8:36:54:f4:62:f4:b0:8a:e9:f9:18:ec:b4:ae:
c8:0e:95:85:7b:01:20:12:78:c4:3e:25:ea:d8:52:02:46:e4:
19:72:10:b8:f1:a1:74:a4:f7:9c:d1:2d:a6:21:b2:52:3a:05:
a3:ee:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:41 2025 by rpki-client