Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vI_d8RrziPBy3f7RTmrIGcYUq2w.cer
File: vI_d8RrziPBy3f7RTmrIGcYUq2w.cer (raw, json)
Hash identifier: XRaa3OvLICvpmBhMCYjYt2ko2McmxLY6vLcdW8Z5K3o=
Subject key identifier: BC:8F:DD:F1:1A:F3:88:F0:72:DD:FE:D1:4E:6A:C8:19:C6:14:AB:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AE65ECE478
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/aa88d7-3d7d-424a-b996-ef68977efaf8/1/vI_d8RrziPBy3f7RTmrIGcYUq2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/aa88d7-3d7d-424a-b996-ef68977efaf8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 09 Mar 2022 14:10:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 199781
IP: 185.40.184.0/22
IP: 2a00:d820::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749034333304 (0xae65ece478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 9 14:10:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc8fddf11af388f072ddfed14e6ac819c614ab6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b4:c6:14:b1:9e:72:ee:cb:e8:ad:e7:bf:b2:
ba:92:f5:2f:c1:12:1a:64:42:f3:80:f2:51:ce:d6:
40:72:b0:ce:7f:bb:91:c0:db:ba:51:ff:ae:d5:34:
16:bc:59:c1:e0:3e:0c:d0:6c:a1:89:99:3e:99:c0:
22:1e:6a:f6:7c:cf:69:44:7d:e0:7d:2e:4f:a5:f9:
79:c3:3d:c9:28:9e:30:5a:18:72:01:73:f0:d0:33:
b3:b3:80:42:3d:bb:0b:79:2c:74:56:f2:3b:10:fc:
4d:25:0e:0e:f3:8b:62:19:17:67:34:fd:0b:93:a6:
af:7d:de:63:f3:c4:b8:75:22:69:9f:2d:c2:11:35:
53:5b:51:c8:54:ec:1f:cc:e8:85:77:73:48:7b:e9:
59:52:b3:83:41:04:b3:41:10:37:b5:5b:23:ff:92:
4e:b4:54:e5:78:df:2e:38:a6:72:f7:89:a2:33:87:
11:43:09:15:3a:58:8c:87:59:84:e7:6b:db:ce:d6:
7b:8d:25:7a:a6:2f:79:3f:4c:53:df:ac:1c:d1:d1:
46:7f:64:fe:42:7f:8e:d3:f7:68:d5:bb:82:57:43:
fe:34:88:09:30:07:5b:a6:54:a4:75:fc:8b:46:0a:
ae:e7:bf:e1:dc:95:61:06:c1:ac:3b:00:80:d5:17:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8F:DD:F1:1A:F3:88:F0:72:DD:FE:D1:4E:6A:C8:19:C6:14:AB:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/aa88d7-3d7d-424a-b996-ef68977efaf8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/aa88d7-3d7d-424a-b996-ef68977efaf8/1/vI_d8RrziPBy3f7RTmrIGcYUq2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.184.0/22
IPv6:
2a00:d820::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199781
Signature Algorithm: sha256WithRSAEncryption
a5:50:fd:15:68:34:08:54:68:ec:ad:52:b1:c7:43:35:4b:dd:
ae:49:cb:86:1c:43:2a:48:36:97:63:8d:55:af:2d:09:1d:1c:
8c:c9:29:63:04:60:b6:8a:39:3b:6f:65:2b:c0:9c:7d:e0:37:
32:e3:58:db:c4:00:60:87:4e:8c:01:e8:10:bd:44:57:5b:59:
8c:e8:a7:ff:df:20:ea:25:ec:26:75:3e:3e:f2:46:d9:fb:ce:
5b:5b:79:3b:c5:24:c7:0f:fb:68:a0:d0:f5:8f:55:9e:66:2b:
f0:2a:07:0d:fa:eb:c4:47:bb:f2:a0:6b:66:e7:f8:51:2f:b3:
19:fb:03:fa:9c:d0:e2:5e:d9:85:b4:c4:20:c3:bd:2a:9a:c8:
02:31:1f:ec:e8:cc:e5:49:70:53:eb:05:68:db:bf:be:e8:71:
48:a0:a2:bd:7e:7f:f8:12:bb:65:82:a4:c6:65:72:1f:ac:f9:
f1:e4:f1:81:f9:3f:16:24:b2:31:a5:ee:d4:19:69:2a:fe:a8:
b6:77:24:e0:f3:1f:b7:80:df:a9:61:2b:a3:68:29:0c:bf:eb:
02:fb:3e:65:1b:6e:5c:6d:00:b8:10:1d:08:3e:b9:8a:24:86:
87:33:9d:ee:13:6b:02:7b:10:19:b4:63:0d:8b:c0:aa:ff:85:
24:1b:b6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:27:58 2025 by rpki-client