Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vFr8wqdE-sIaNF1ddZkKggAQo9I.cer
File: vFr8wqdE-sIaNF1ddZkKggAQo9I.cer (raw, json)
Hash identifier: mHnEOqXpTZ6+XkjqsvRT01Z55/i9Ofl4S69Syt2eX1k=
Subject key identifier: BC:5A:FC:C2:A7:44:FA:C2:1A:34:5D:5D:75:99:0A:82:00:10:A3:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B0E8C52CAD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/36cff2-2ea6-4777-85c4-66c81b1e9b34/1/vFr8wqdE-sIaNF1ddZkKggAQo9I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/36cff2-2ea6-4777-85c4-66c81b1e9b34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 28 Apr 2022 12:14:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.223.154.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759819480237 (0xb0e8c52cad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 12:14:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc5afcc2a744fac21a345d5d75990a820010a3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:aa:f0:74:27:33:c5:6f:9c:f6:04:fe:37:
86:77:22:97:2a:b7:74:37:37:56:02:c5:bd:11:de:
55:ee:c2:36:3a:55:70:0a:1e:fd:4a:e3:bf:12:d6:
c9:b7:56:5f:8f:bf:9a:a5:e0:1c:f3:8b:70:50:e8:
81:c4:ea:c6:ef:3a:48:6b:95:ad:0b:2f:50:3d:3c:
42:51:ae:dc:07:3d:16:05:01:37:62:37:41:b0:bb:
ae:ba:de:f0:97:ea:d1:c5:2f:0b:ff:8d:7e:68:ec:
89:b9:1b:48:24:e9:65:ad:42:37:58:ce:46:f8:93:
d3:f7:53:eb:f8:48:0d:1e:02:57:60:f6:86:8d:3c:
ae:22:fc:ae:f3:e8:70:c3:58:3e:dc:ef:84:1c:84:
44:a8:77:e6:dc:e8:57:67:42:15:d0:ed:e5:f4:c3:
bd:c7:54:6d:5d:21:1f:d2:07:eb:c8:12:15:99:89:
8f:d0:ab:44:0b:16:64:46:51:0a:a9:fa:57:04:76:
2b:99:7b:7b:36:73:9c:64:1d:ce:e6:35:cf:51:35:
cc:6c:64:eb:dc:59:b2:3d:98:30:03:0e:27:c5:48:
65:42:3d:f1:25:4e:08:1e:39:0e:32:f8:88:8a:6c:
93:4c:a6:02:eb:8e:b7:cd:7b:a3:e5:b3:7c:63:73:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5A:FC:C2:A7:44:FA:C2:1A:34:5D:5D:75:99:0A:82:00:10:A3:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/36cff2-2ea6-4777-85c4-66c81b1e9b34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/36cff2-2ea6-4777-85c4-66c81b1e9b34/1/vFr8wqdE-sIaNF1ddZkKggAQo9I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:04:f3:f3:18:dc:5e:de:d2:af:01:3c:8a:d0:e1:ca:19:b9:
a5:e2:f6:c1:d5:73:63:ae:82:a0:3a:27:b9:fa:f5:c0:56:ef:
af:01:67:d8:0b:9a:35:53:73:7e:e9:ee:a3:00:da:12:6e:a7:
d5:09:71:29:b7:11:db:96:20:cc:a4:94:5f:5b:9f:88:6c:72:
78:57:dd:f2:91:f3:3c:8b:8f:99:ad:93:45:bc:cf:4c:56:d0:
fb:5e:ba:ed:a8:c1:81:ea:60:b9:d9:40:e4:a9:e2:d9:74:ad:
c5:a1:3b:f1:af:5b:5f:bd:6d:66:7e:45:67:c6:6e:63:1b:aa:
3c:30:8a:ab:5a:d9:5f:ea:f1:36:11:07:62:33:85:89:40:21:
ce:2c:dc:6c:1d:2b:3a:98:a8:f3:03:fd:9b:35:7b:cd:fb:88:
0d:35:d1:50:1c:b4:41:18:dd:3b:90:db:c2:03:64:c7:5a:00:
62:d7:0c:b4:37:c0:3b:9d:1e:62:f6:8a:41:5c:05:01:a5:e0:
8c:db:67:db:97:60:26:33:35:e2:6a:54:98:16:74:f4:bc:f2:
17:8d:42:a9:60:3e:48:8e:18:a7:b5:10:3f:da:0f:84:b9:c8:
de:4a:35:0b:d7:19:b8:80:ca:c3:d6:88:3a:ba:21:19:53:a0:
f5:1e:9c:84
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGALDoxSytMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NDI4MTIxNDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiYzVhZmNjMmE3
NDRmYWMyMWEzNDVkNWQ3NTk5MGE4MjAwMTBhM2QyMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAq4qq8HQnM8VvnPYE/jeGdyKXKrd0NzdWAsW9Ed5V7sI2
OlVwCh79SuO/EtbJt1Zfj7+apeAc84twUOiBxOrG7zpIa5WtCy9QPTxCUa7cBz0W
BQE3YjdBsLuuut7wl+rRxS8L/41+aOyJuRtIJOllrUI3WM5G+JPT91Pr+EgNHgJX
YPaGjTyuIvyu8+hww1g+3O+EHIREqHfm3OhXZ0IV0O3l9MO9x1RtXSEf0gfryBIV
mYmP0KtECxZkRlEKqfpXBHYrmXt7NnOcZB3O5jXPUTXMbGTr3FmyPZgwAw4nxUhl
Qj3xJU4IHjkOMviIimyTTKYC6463zXuj5bN8Y3NLlwIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFLxa/MKnRPrCGjRdXXWZCoIAEKPSMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzM2Y2ZmMi0yZWE2LTQ3Nzct
ODVjNC02NmM4MWIxZTliMzQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvMzZjZmYyLTJlYTYtNDc3Ny04
NWM0LTY2YzgxYjFlOWIzNC8xL3ZGcjh3cWRFLXNJYU5GMWRkWmtLZ2dBUW85SS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAW9+aMA0GCSqGSIb3DQEBCwUAA4IBAQBdBPPzGNxe3tKvATyK0OHK
Gbml4vbB1XNjroKgOie5+vXAVu+vAWfYC5o1U3N+6e6jANoSbqfVCXEptxHbliDM
pJRfW5+IbHJ4V93ykfM8i4+ZrZNFvM9MVtD7XrrtqMGB6mC52UDkqeLZdK3FoTvx
r1tfvW1mfkVnxm5jG6o8MIqrWtlf6vE2EQdiM4WJQCHOLNxsHSs6mKjzA/2bNXvN
+4gNNdFQHLRBGN07kNvCA2THWgBi1wy0N8A7nR5i9opBXAUBpeCM22fbl2AmMzXi
alSYFnT0vPIXjUKpYD5IjhintRA/2g+EucjeSjUL1xm4gMrD1og6uiEZU6D1HpyE
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:13 2025 by rpki-client