Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vJACH4-xhhia5aqbHybf9lV98SA.cer
File: vJACH4-xhhia5aqbHybf9lV98SA.cer (raw, json)
Hash identifier: UvAWbrii6/SsgDPKW+7w8Ou3PuxfvaevGIqf/X03KBk=
Subject key identifier: BC:90:02:1F:8F:B1:86:18:9A:E5:AA:9B:1F:26:DF:F6:55:7D:F1:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9CEBC1DBF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/2708d3-7122-496d-9e4b-2f398eb4a9b6/1/vJACH4-xhhia5aqbHybf9lV98SA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/2708d3-7122-496d-9e4b-2f398eb4a9b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:56:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.169.6.0/24
IP: 2a10:4340::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673970248692 (0x9cebc1dbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc90021f8fb186189ae5aa9b1f26dff6557df120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:d5:b9:92:0a:c9:61:4c:e1:b0:ea:0d:e7:
9b:0e:2d:92:26:ac:50:96:38:58:eb:cd:d3:c4:53:
9a:3e:13:e8:4a:f3:ec:6d:2b:da:40:5f:2a:32:7b:
bd:8f:7c:f7:c7:86:48:8a:7d:91:a6:2d:68:e7:e1:
ee:02:ef:5b:d9:88:ee:77:50:b2:d1:04:d4:cc:88:
a8:f7:50:27:be:b1:30:9c:88:1c:b4:3f:49:c9:59:
00:b4:35:c3:05:e5:30:52:27:7b:38:c4:df:5f:63:
01:8f:74:c5:80:ab:09:5b:79:2a:6d:ea:08:38:ec:
5f:1f:36:20:af:57:0f:e8:a1:22:da:7a:b2:e8:5b:
4f:cc:30:a2:8b:38:2a:04:a5:39:0e:3e:6c:c6:c4:
49:88:47:aa:b9:68:ad:21:cd:fb:89:10:93:83:49:
a1:a9:87:a2:13:2e:a7:b4:8c:2d:00:71:bf:a5:8c:
42:2d:41:12:11:ed:6c:44:9d:28:b1:86:8a:b2:24:
4f:ba:b9:25:03:d1:16:dc:62:42:1d:dd:12:46:76:
95:0b:3a:f3:0f:7d:3a:e6:59:7b:2e:1f:9c:0b:ca:
8b:8c:73:d2:03:cf:86:f5:74:17:06:73:43:10:20:
f1:cf:0a:ed:4c:3f:18:c3:73:81:6f:4b:4c:50:83:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:90:02:1F:8F:B1:86:18:9A:E5:AA:9B:1F:26:DF:F6:55:7D:F1:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2708d3-7122-496d-9e4b-2f398eb4a9b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2708d3-7122-496d-9e4b-2f398eb4a9b6/1/vJACH4-xhhia5aqbHybf9lV98SA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.6.0/24
IPv6:
2a10:4340::/29
Signature Algorithm: sha256WithRSAEncryption
04:d8:21:53:2d:fb:36:47:aa:68:87:28:f3:ae:75:95:79:2a:
3c:bc:f7:53:e1:ed:f0:39:b1:76:33:dc:1e:56:3d:cf:64:89:
cd:97:06:d0:11:7d:a1:64:a0:55:33:42:e8:c9:c6:aa:41:8c:
e6:f1:e4:95:e0:44:93:ca:a7:12:43:e4:7a:f2:5b:4f:e6:f2:
70:20:ca:6b:cd:de:aa:c9:80:78:a6:0b:19:8b:af:56:4b:fe:
f7:65:e4:66:3b:03:d3:57:b4:20:3c:27:40:65:23:32:4a:50:
bd:01:42:d0:d1:5c:7f:f3:0e:af:00:4d:e6:e8:26:3c:5f:f6:
86:e3:d4:6e:f5:75:00:81:70:65:49:e6:75:5d:e8:fb:e9:3d:
a0:32:2e:cd:47:ea:7f:69:e8:41:e6:c9:7c:3e:af:b6:78:ff:
a7:8a:d0:f2:bf:0b:5b:ec:17:72:f1:03:f0:29:ad:e3:92:66:
74:17:7d:36:cc:6a:e3:66:21:7e:f4:b5:bb:dd:3e:6f:67:92:
b9:35:41:61:12:02:ad:9c:39:63:0c:32:76:85:77:77:2e:bd:
1b:33:f9:a3:31:ee:af:ae:10:c7:b7:8e:2d:b9:ca:ab:06:87:
7a:a8:9b:21:53:4d:df:42:3f:ad:00:4a:98:e6:e6:91:2d:6a:
89:d7:d3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:35:01 2025 by rpki-client