Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VbHxKtLEcNivNyxY9JBOTJ-2hLU.cer
File: VbHxKtLEcNivNyxY9JBOTJ-2hLU.cer (raw, json)
Hash identifier: hRhaZzrsPi9KP3pXhUitRwGuoCxoQzZLhP6Pac84myY=
Subject key identifier: 55:B1:F1:2A:D2:C4:70:D8:AF:37:2C:58:F4:90:4E:4C:9F:B6:84:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1A964EE3E1C4CD2393391F52EC8809
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/218311-4443-416f-99b6-badd619cf342/1/VbHxKtLEcNivNyxY9JBOTJ-2hLU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/218311-4443-416f-99b6-badd619cf342/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 5.1.43.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:96:4e:e3:e1:c4:cd:23:93:39:1f:52:ec:88:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55b1f12ad2c470d8af372c58f4904e4c9fb684b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:5e:60:25:ac:c2:a1:0b:51:d6:ff:fd:31:
9d:57:fa:8b:a8:d4:34:12:ad:05:8a:df:a4:ac:21:
ed:e7:c8:19:92:3a:ae:d1:b8:d1:2e:03:46:9e:90:
e2:38:6f:2a:2a:38:1d:c4:e6:ce:72:4d:a6:7b:08:
00:6e:43:d9:1a:18:ef:7a:60:ff:1c:f4:ea:73:57:
03:7b:21:6b:48:1f:24:19:e7:59:73:9a:49:48:d5:
26:5b:c6:24:4f:23:8c:84:1a:35:a7:c1:cc:c7:12:
d4:a3:f2:ec:fe:38:b6:34:63:2e:5b:34:56:56:fe:
26:d6:5c:7b:d3:49:c2:d7:ce:00:11:4c:53:0c:39:
49:f3:3f:52:4a:9d:19:f6:41:ed:2d:c4:f4:81:42:
c5:db:97:0a:f6:04:2c:c2:53:d9:ca:19:b2:63:4c:
7e:ea:1d:23:5e:1d:50:91:c0:66:60:9f:07:30:95:
f1:8a:9c:4e:0d:4c:12:df:b1:e5:13:29:47:28:18:
7e:3d:6d:b2:a7:2b:dd:07:80:fd:ab:eb:ad:5e:77:
b7:33:03:cc:1d:4a:01:97:9d:09:4b:c1:ac:a9:77:
cf:d3:8e:7f:d4:36:8e:52:af:0b:d2:a2:34:ac:79:
58:b5:2f:39:57:18:4e:8d:ac:94:99:5f:95:ca:b8:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B1:F1:2A:D2:C4:70:D8:AF:37:2C:58:F4:90:4E:4C:9F:B6:84:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/218311-4443-416f-99b6-badd619cf342/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/218311-4443-416f-99b6-badd619cf342/1/VbHxKtLEcNivNyxY9JBOTJ-2hLU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.43.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7e:7d:c6:f0:0a:8a:21:20:82:02:ec:92:ed:1d:64:c5:02:
1e:60:45:09:1d:9e:a4:ca:93:d8:66:c9:98:41:8b:7d:b0:fe:
bf:95:68:89:92:bf:77:08:b0:55:2c:41:41:54:54:39:a5:a8:
97:6b:69:e8:7a:9c:3f:17:0d:f4:44:4d:5d:ea:e4:13:37:ba:
cc:2d:9a:ee:a8:88:fa:f7:e3:09:e5:32:bc:1e:c5:f0:f4:ec:
06:b4:a9:d6:e6:02:9c:49:e5:c1:07:56:c7:0d:4a:96:c5:af:
c7:ff:c5:b4:ed:e8:84:4a:dd:86:03:1c:0d:d8:d0:11:46:e0:
63:0a:f8:c4:74:45:87:6c:0f:7c:e2:8c:71:24:96:d5:b7:1a:
97:e3:6d:1a:b9:76:b4:54:c5:aa:d4:2e:3f:ab:58:1e:34:41:
ba:2b:76:de:f6:be:22:f5:ec:10:e8:15:87:ed:83:00:ac:25:
6c:66:91:7d:35:a6:59:cc:4a:1d:b0:72:6c:ec:be:46:19:e0:
88:f6:15:8d:55:b7:1f:85:2d:e4:b3:45:af:9f:77:18:e2:03:
e5:9c:4f:19:e2:10:24:4b:c1:b0:13:2b:27:28:85:e0:d7:9f:
91:69:b3:7d:f6:c3:30:03:25:91:d9:7c:fb:4f:41:c2:07:d7:
7f:5c:b9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:47:14 2025 by rpki-client