Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iyiVvqrabS-VfH7UMP-Ea3682xs.cer
File: iyiVvqrabS-VfH7UMP-Ea3682xs.cer (raw, json)
Hash identifier: B0+1xHpLnnVO6z/fcarEpWz4KINwUwK4cSfj/N7e4a8=
Subject key identifier: 8B:28:95:BE:AA:DA:6D:2F:95:7C:7E:D4:30:FF:84:6B:7E:BC:DB:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B48A419A03E5694A9F6552EC07E91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/iyiVvqrabS-VfH7UMP-Ea3682xs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:02 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.213.175.0/24
IP: 91.220.101.0/24
IP: 91.223.77.0/24
IP: 91.237.250.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:48:a4:19:a0:3e:56:94:a9:f6:55:2e:c0:7e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b2895beaada6d2f957c7ed430ff846b7ebcdb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:7a:f2:64:3a:2c:ac:90:22:1e:45:77:6f:
85:74:72:0a:e8:61:a5:c9:47:62:f7:84:17:79:d7:
9b:5e:ed:40:9a:13:ad:48:f2:a3:51:21:44:e0:7f:
06:c3:03:76:ac:a1:4f:3b:d2:8c:83:c1:92:ff:ac:
aa:b2:12:e3:8c:b1:e3:3e:bf:b4:38:05:b6:47:86:
90:cb:b7:7a:87:3c:85:6f:fe:ff:02:b2:95:4e:29:
62:22:fe:d7:af:24:d6:0c:60:66:4d:8b:ef:e7:32:
4d:ac:0e:a6:3e:72:06:61:c1:d4:81:de:33:24:f0:
e0:d8:2b:10:d2:75:74:77:1e:87:96:30:2c:f8:5b:
9c:1d:83:7a:df:b3:17:f2:91:fd:c6:68:8f:f1:bc:
80:36:3a:b2:fd:80:19:0d:40:d5:bd:9f:ae:59:76:
5f:94:82:a7:74:2c:6d:2d:7c:2f:b2:ca:b7:df:3a:
c9:04:bf:bc:5d:25:d8:9b:57:a1:2a:46:94:0e:f9:
df:0e:b7:14:a5:92:0c:68:5b:4a:c3:3f:f8:b4:f0:
41:fd:88:35:2b:18:c5:27:c6:55:a3:10:92:26:25:
b0:30:6c:b6:b7:e3:23:7f:d0:c5:9e:d6:3b:d3:24:
5c:f7:08:d2:32:02:61:84:1c:40:7b:2f:b7:b6:49:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:28:95:BE:AA:DA:6D:2F:95:7C:7E:D4:30:FF:84:6B:7E:BC:DB:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/iyiVvqrabS-VfH7UMP-Ea3682xs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.175.0/24
91.220.101.0/24
91.223.77.0/24
91.237.250.0/24
Signature Algorithm: sha256WithRSAEncryption
73:83:33:67:0e:1f:1d:e5:ad:0b:c9:ed:5a:cb:db:76:4a:bd:
f5:3d:51:c1:ac:80:af:74:89:e1:92:60:eb:5d:1a:c2:3a:0f:
6d:46:7d:a7:e0:5f:67:ba:63:91:af:d4:24:7f:14:fa:59:2c:
48:b2:b8:c5:6f:7f:02:e7:cd:bd:88:09:84:77:ac:57:76:7d:
e5:6a:27:ba:73:e2:79:14:3e:8c:3a:a2:a9:cd:1f:87:e5:43:
66:1e:f3:bb:53:39:e9:11:8f:82:6c:f8:3b:b6:55:18:79:a7:
a6:40:2c:32:10:65:a1:a2:3f:ee:cc:1b:2a:61:bc:b0:61:b7:
48:77:48:4b:b8:e5:20:a0:d2:cb:fd:7b:56:87:0f:ac:de:5e:
43:e3:13:f1:1c:ec:14:a0:a1:e3:d7:d8:ac:90:0d:ac:16:c2:
ae:e6:2a:75:29:a8:db:af:ed:85:65:43:ee:32:30:85:dd:86:
4a:71:e5:96:f4:18:e8:64:af:7f:32:47:66:89:2e:a7:2c:6c:
43:03:5d:68:2c:5e:3e:75:ba:ba:b0:4c:a8:72:60:19:81:43:
1d:34:ae:7e:17:96:61:52:c1:d0:3f:d3:44:42:61:53:40:d0:
5b:09:4d:11:45:87:e1:b4:b1:eb:bc:23:99:bd:15:a3:e4:1a:
fb:b0:ac:55
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAYVtG0ikGaA+VpSp9lUuwH6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMzAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjI4OTViZWFhZGE2ZDJmOTU3YzdlZDQzMGZmODQ2YjdlYmNkYjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY568mQ6LKyQIh5Fd2+FdHIK6GGl
yUdi94QXedebXu1AmhOtSPKjUSFE4H8GwwN2rKFPO9KMg8GS/6yqshLjjLHjPr+0
OAW2R4aQy7d6hzyFb/7/ArKVTiliIv7XryTWDGBmTYvv5zJNrA6mPnIGYcHUgd4z
JPDg2CsQ0nV0dx6HljAs+FucHYN637MX8pH9xmiP8byANjqy/YAZDUDVvZ+uWXZf
lIKndCxtLXwvssq33zrJBL+8XSXYm1ehKkaUDvnfDrcUpZIMaFtKwz/4tPBB/Yg1
KxjFJ8ZVoxCSJiWwMGy2t+Mjf9DFntY70yRc9wjSMgJhhBxAey+3tklJZwIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFIsolb6q2m0vlXx+1DD/hGt+vNsbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2RlODJk
YS1iMDg2LTQyZWEtOGM0My01ZTQ5OTQ2OGNjMmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZGU4MmRh
LWIwODYtNDJlYS04YzQzLTVlNDk5NDY4Y2MyZi8xL2l5aVZ2cXJhYlMtVmZIN1VN
UC1FYTM2ODJ4cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF
BwEHAQH/BCIwIDAeBAIAATAYAwQAW9WvAwQAW9xlAwQAW99NAwQAW+36MA0GCSqG
SIb3DQEBCwUAA4IBAQBzgzNnDh8d5a0Lye1ay9t2Sr31PVHBrICvdInhkmDrXRrC
Og9tRn2n4F9numORr9QkfxT6WSxIsrjFb38C5829iAmEd6xXdn3laie6c+J5FD6M
OqKpzR+H5UNmHvO7UznpEY+CbPg7tlUYeaemQCwyEGWhoj/uzBsqYbywYbdId0hL
uOUgoNLL/XtWhw+s3l5D4xPxHOwUoKHj19iskA2sFsKu5ip1Kajbr+2FZUPuMjCF
3YZKceWW9BjoZK9/MkdmiS6nLGxDA11oLF4+dbq6sEyocmAZgUMdNK5+F5ZhUsHQ
P9NEQmFTQNBbCU0RRYfhtLHrvCOZvRWj5Br7sKxV
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:28:55 2025 by rpki-client