Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
File: VJFFQf0blefAr8h1--94eU9VOGs.cer (raw, json)
Hash identifier: vrrUWSXiYsJyiwY2/tOjjlH9AUoDRM/dS0/LLeU28Sw=
Subject key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F4AFF93E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:58:57 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 61138
AS: 200681
AS: 203033
AS: 203856 -- 203858
IP: 5.253.84.0/22
IP: 185.90.60.0/22
IP: 185.99.132.0/22
IP: 185.121.160.0/22
IP: 185.121.168.0/22
IP: 185.121.176.0/22
IP: 185.147.32.0/22
IP: 185.195.236.0/22
IP: 185.214.172.0/22
IP: 185.236.212.0/22
IP: 2a05:dfc0::/29
IP: 2a06:1280::/29
IP: 2a06:9f40::/29
IP: 2a06:9f80::/29
IP: 2a06:a000::/29
IP: 2a07:54c0::/29
IP: 2a09:54c0::/29
IP: 2a0a:6040::/29
IP: 2a0b:9e40::/29
IP: 2a0d:d900::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684158063584 (0x9f4aff93e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:58:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:bb:f6:e1:12:ed:6b:5a:40:37:36:78:61:
24:a3:d0:6c:97:37:78:68:63:f7:00:cf:0c:9a:14:
f9:8f:dd:42:bf:86:e4:a8:ca:19:87:1d:68:e1:b0:
8f:0c:d0:4d:4b:66:75:fa:f0:69:ac:eb:f5:9b:95:
79:7d:c8:20:36:f7:1b:16:06:f5:5d:2b:c1:2a:c4:
86:c1:92:b6:60:8f:0b:22:82:2e:1f:12:f3:4e:bf:
a3:41:42:d4:27:82:14:7e:1b:ff:3f:87:36:72:1a:
42:2e:0c:4b:61:4b:4d:dd:ee:39:e1:84:a9:e0:b8:
d5:e6:99:d0:53:cb:5e:fc:09:91:d2:72:3e:56:1b:
db:2d:6b:82:c3:21:a2:bb:95:09:c4:85:54:60:1e:
57:cd:39:b2:66:3f:4b:98:98:45:7b:c4:14:81:3e:
75:d2:23:96:46:54:7a:08:1c:94:4f:97:2a:53:e9:
69:c9:b5:f8:e1:1a:2c:68:7a:d3:dd:75:9f:ad:bd:
ad:35:f0:cb:15:56:4d:60:29:3b:d5:5a:01:32:c7:
2a:5d:ff:26:15:4f:de:63:2a:56:57:27:aa:f5:78:
e4:5f:b4:0f:20:da:7d:8f:5a:61:58:1a:28:90:e0:
33:51:aa:ba:e9:4e:5f:2f:26:e3:d1:23:cc:fa:16:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
185.90.60.0/22
185.99.132.0/22
185.121.160.0/22
185.121.168.0/22
185.121.176.0/22
185.147.32.0/22
185.195.236.0/22
185.214.172.0/22
185.236.212.0/22
IPv6:
2a05:dfc0::/29
2a06:1280::/29
2a06:9f40::/29
2a06:9f80::/29
2a06:a000::/29
2a07:54c0::/29
2a09:54c0::/29
2a0a:6040::/29
2a0b:9e40::/29
2a0d:d900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61138
200681
203033
203856-203858
Signature Algorithm: sha256WithRSAEncryption
5c:73:f4:6e:b9:16:82:f7:c1:cc:4a:52:94:28:b6:af:df:44:
56:3a:b2:51:5b:f7:37:75:1d:b3:44:cb:82:70:9c:c8:a6:0b:
6c:61:36:3b:eb:e2:e1:46:d1:c3:38:75:32:b5:26:3a:e2:1a:
f8:6d:1a:16:73:e4:b0:9b:b7:b5:9a:bc:fb:bd:e6:7a:97:a3:
66:f2:61:06:66:56:2a:8e:66:66:9b:85:0f:57:12:76:c9:2b:
8f:b1:65:60:04:59:4e:e0:c8:7c:6a:4e:30:00:85:63:c8:95:
ab:c6:27:6e:80:74:8f:b4:19:60:15:88:7e:18:95:bb:3a:c1:
69:6a:79:d8:79:30:b6:73:f3:a4:13:38:04:37:df:43:4d:82:
e4:e0:f8:4f:73:96:8e:cf:c9:69:b9:c0:93:a8:79:5c:1b:84:
32:8f:36:8f:4f:1b:71:9f:c2:00:01:c2:7e:69:79:52:5d:a6:
6c:86:76:ce:f7:00:ec:e8:bc:33:e1:e2:bf:fe:32:4e:4d:b6:
eb:1a:0a:89:b2:5c:bd:24:cd:54:ec:04:b3:8e:f7:a7:1f:bf:
9b:71:13:ad:21:ec:5b:f9:61:5c:01:bb:82:84:5c:60:9c:16:
1e:ba:e9:50:46:54:f1:c5:87:fa:0c:2f:67:f9:3c:08:e6:92:
c8:4d:84:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:04:18 2025 by rpki-client