Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VvViklmp4LoJg205_MetDU_G2Bk.cer
File: VvViklmp4LoJg205_MetDU_G2Bk.cer (raw, json)
Hash identifier: nriZItnjkV3zRCXchkZHEl5kspkDDmtXdxH3FlV6FBw=
Subject key identifier: 56:F5:62:92:59:A9:E0:BA:09:83:6D:39:FC:C7:AD:0D:4F:C6:D8:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F83FC57DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/1cd650-97ef-4e8b-856d-0572953955fd/1/VvViklmp4LoJg205_MetDU_G2Bk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/1cd650-97ef-4e8b-856d-0572953955fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:02:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 40996
IP: 185.216.216.0/22
IP: 2a0b:bd40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685114152922 (0x9f83fc57da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56f5629259a9e0ba09836d39fcc7ad0d4fc6d819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:02:ce:24:cd:1e:67:e1:8d:25:dc:3b:5a:
8b:aa:a2:6b:aa:c2:04:7f:35:e7:14:98:e7:4d:91:
62:92:c8:55:cf:77:52:29:e3:2b:aa:1b:fc:df:ca:
a6:79:d8:e8:53:a3:5a:c8:d7:c5:e9:3c:d1:b6:fc:
09:62:a1:05:0c:a8:e6:f6:d3:21:c8:7b:a2:35:01:
ac:c5:b7:14:d4:e2:17:68:54:44:5a:28:44:eb:0c:
6f:a4:ff:36:49:92:fa:28:92:86:1a:6d:8a:99:1d:
7a:3d:a1:0f:1d:e1:dd:5f:98:94:b7:4d:33:22:21:
0d:3b:15:85:0b:79:e1:20:b6:50:2a:84:b4:8a:14:
37:8d:a2:19:25:1f:94:49:da:ee:c6:27:93:05:d3:
da:38:e2:b1:ef:a3:e4:4b:ec:5b:4f:63:53:a6:a2:
2b:51:66:c7:9e:85:4e:cf:06:30:6b:b1:67:e3:e4:
87:42:a9:79:63:b7:bc:36:98:9f:b5:aa:f7:72:8d:
31:1e:c2:3c:ee:58:b7:33:99:df:8c:2e:e8:77:65:
c1:5f:da:da:fb:81:71:79:2b:e9:62:11:79:17:82:
91:a0:08:0f:e7:93:20:57:63:02:44:c3:77:92:70:
29:17:f8:b3:42:78:4f:75:b2:13:3d:99:70:dd:74:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F5:62:92:59:A9:E0:BA:09:83:6D:39:FC:C7:AD:0D:4F:C6:D8:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1cd650-97ef-4e8b-856d-0572953955fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1cd650-97ef-4e8b-856d-0572953955fd/1/VvViklmp4LoJg205_MetDU_G2Bk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.216.0/22
IPv6:
2a0b:bd40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40996
Signature Algorithm: sha256WithRSAEncryption
72:7c:f8:14:28:00:93:ac:fb:f1:92:08:c0:ca:5c:07:75:99:
df:80:ed:99:5a:c8:be:32:49:1f:87:1f:54:1a:94:98:55:8a:
b5:3e:66:7d:6a:f5:44:f8:f8:e8:10:da:7b:c3:9e:68:9f:4f:
37:d7:76:e4:31:ff:eb:68:80:a0:12:d9:f9:c1:39:d9:0c:53:
c0:e6:6f:09:89:19:77:db:1b:f1:11:75:ed:5c:88:1b:d6:d1:
11:b2:74:9d:4a:0a:e5:93:4b:f8:c5:87:2a:e5:ab:33:52:fa:
8d:d7:31:e9:00:a3:4e:aa:4b:d6:54:b3:39:62:68:a3:77:2a:
23:02:27:05:a4:eb:b6:09:71:0a:32:f9:c7:e2:d8:de:31:d8:
99:11:0e:33:52:04:9d:ee:d5:0c:31:29:37:3b:c7:97:bf:1d:
00:ff:08:d4:6c:75:f3:ab:50:59:78:db:d2:e7:42:97:0c:3f:
9c:1a:31:e5:c2:b8:be:35:a1:a9:7d:09:2c:91:03:f6:e2:70:
f0:be:cd:40:e7:13:37:c8:87:84:0a:5c:b8:6a:20:6e:b5:42:
e8:50:15:ff:83:4c:7b:ef:4a:dc:8c:dd:e1:1e:a5:ac:b0:06:
31:12:70:5f:00:d1:e1:77:41:90:2a:a3:43:2f:25:8a:84:8c:
39:60:fc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-fra.rpki-client.org