Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vor0hT6b71MDtQc9F-U4TmZNNFE.cer
File: Vor0hT6b71MDtQc9F-U4TmZNNFE.cer (raw, json)
Hash identifier: /no0055NsLzt9vk3L1Q/PR+O2RuX3d77ycoxBVi7Rjg=
Subject key identifier: 56:8A:F4:85:3E:9B:EF:53:03:B5:07:3D:17:E5:38:4E:66:4D:34:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F3A1EE056AE7BA49578B4E4AF997F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/8a8feb-b462-487d-b7fe-b7371a0bae26/1/Vor0hT6b71MDtQc9F-U4TmZNNFE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/8a8feb-b462-487d-b7fe-b7371a0bae26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.6.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:3a:1e:e0:56:ae:7b:a4:95:78:b4:e4:af:99:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=568af4853e9bef5303b5073d17e5384e664d3451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:dc:a6:d6:44:a3:d2:2f:36:c8:c5:30:33:
67:7d:f4:3c:14:e4:cb:5e:bf:ee:5f:b5:b8:5b:5a:
81:6b:8b:3e:8e:62:0c:82:4d:fa:ea:20:82:35:5c:
6d:44:70:55:c6:bb:cd:13:1a:07:fc:32:a3:07:1b:
fa:b4:4f:cc:b3:b4:1a:81:7f:33:5d:f9:d9:5d:3d:
9d:72:62:ba:4d:71:9b:ba:84:60:d8:f9:4f:a8:c9:
57:41:33:08:c9:ee:73:71:09:fc:91:e6:c4:32:11:
be:5b:0e:7d:48:1f:9f:16:6e:75:7e:07:f1:74:66:
60:19:3a:cd:ab:ed:9f:7d:41:88:cb:7a:52:bb:bb:
f1:15:3c:bb:b2:d6:36:9a:93:e5:ef:8a:62:4e:ea:
9a:19:62:e5:c3:9f:fd:3b:71:0c:42:b1:ef:47:63:
f5:c9:79:0d:cf:44:f7:8c:46:41:0d:30:b3:ce:09:
b2:a4:96:37:14:92:43:68:fb:2f:3d:bb:e2:a8:c5:
1c:6a:a7:06:9f:2f:67:a0:7e:d7:b1:f7:c9:31:e4:
75:b5:1f:4a:2a:40:ae:e1:5e:92:bf:ae:33:fe:69:
f0:79:20:b6:01:e6:47:ab:27:f8:1f:a9:f9:0d:7f:
54:b6:1d:21:21:d1:38:1a:75:d5:af:15:60:29:37:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8A:F4:85:3E:9B:EF:53:03:B5:07:3D:17:E5:38:4E:66:4D:34:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8a8feb-b462-487d-b7fe-b7371a0bae26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8a8feb-b462-487d-b7fe-b7371a0bae26/1/Vor0hT6b71MDtQc9F-U4TmZNNFE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.6.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c1:5d:48:2a:68:28:47:e3:97:b2:65:f4:ca:9b:32:8e:04:
7a:0e:e5:4c:37:e1:1a:c4:8b:45:71:74:6a:eb:44:f2:b3:03:
b9:11:ba:3c:18:b6:51:94:a4:e5:81:f7:db:6a:46:1a:01:11:
bd:d4:27:7b:e8:e2:c4:93:d8:16:f9:97:e4:7c:b4:e8:d8:1c:
78:0c:72:f3:01:de:ab:41:eb:58:ba:1f:2b:3f:9d:58:b9:51:
be:85:ee:8b:c6:f4:18:fc:93:18:ed:fe:80:6b:06:36:97:4d:
b9:2c:63:b3:a4:5c:8e:8b:7a:54:1b:7f:71:68:a6:87:fe:32:
39:ad:e4:c4:24:a1:20:a5:36:c4:fe:71:38:f6:55:fb:e1:35:
05:5e:d1:22:e8:22:c9:79:b3:37:dd:e2:a0:2a:37:23:8d:ed:
4a:86:e9:33:b0:d0:66:b0:79:72:b1:4a:5e:b5:9a:72:40:a9:
77:84:9f:e0:7a:7e:de:1a:8f:89:17:bf:2b:dd:09:04:f8:06:
a8:f9:09:61:b2:40:18:65:a9:ea:fc:9a:a2:ad:9f:e6:e9:28:
81:ec:ea:8d:40:b4:59:54:a6:7f:4f:98:45:fe:0a:a5:3f:24:
df:7e:3a:dc:36:0a:24:5c:cf:c2:25:ef:9c:f9:ac:86:f7:e2:
4f:32:77:1f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVsPzoe4Faue6SVeLTkr5l/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDczMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjhhZjQ4NTNlOWJlZjUzMDNiNTA3M2QxN2U1Mzg0ZTY2NGQzNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RXcptZEo9IvNsjFMDNnffQ8FOTL
Xr/uX7W4W1qBa4s+jmIMgk366iCCNVxtRHBVxrvNExoH/DKjBxv6tE/Ms7QagX8z
XfnZXT2dcmK6TXGbuoRg2PlPqMlXQTMIye5zcQn8kebEMhG+Ww59SB+fFm51fgfx
dGZgGTrNq+2ffUGIy3pSu7vxFTy7stY2mpPl74piTuqaGWLlw5/9O3EMQrHvR2P1
yXkNz0T3jEZBDTCzzgmypJY3FJJDaPsvPbviqMUcaqcGny9noH7XsffJMeR1tR9K
KkCu4V6Sv64z/mnweSC2AeZHqyf4H6n5DX9Uth0hIdE4GnXVrxVgKTfRBQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFaK9IU+m+9TA7UHPRflOE5mTTRRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5LzhhOGZl
Yi1iNDYyLTQ4N2QtYjdmZS1iNzM3MWEwYmFlMjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvOGE4ZmVi
LWI0NjItNDg3ZC1iN2ZlLWI3MzcxYTBiYWUyNi8xL1ZvcjBoVDZiNzFNRHRRYzlG
LVU0VG1aTk5GRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAPgMGMA0GCSqGSIb3DQEBCwUAA4IBAQA1wV1I
KmgoR+OXsmX0ypsyjgR6DuVMN+EaxItFcXRq60TyswO5Ebo8GLZRlKTlgffbakYa
ARG91Cd76OLEk9gW+ZfkfLTo2Bx4DHLzAd6rQetYuh8rP51YuVG+he6LxvQY/JMY
7f6AawY2l025LGOzpFyOi3pUG39xaKaH/jI5reTEJKEgpTbE/nE49lX74TUFXtEi
6CLJebM33eKgKjcjje1KhukzsNBmsHlysUpetZpyQKl3hJ/gen7eGo+JF78r3QkE
+Aao+QlhskAYZanq/JqirZ/m6SiB7OqNQLRZVKZ/T5hF/gqlPyTffjrcNgokXM/C
Je+c+ayG9+JPMncf
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:12 2025 by rpki-client