Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vaaLP_Ac20OJb5PB6Qxp2ZNPQo0.cer
File: vaaLP_Ac20OJb5PB6Qxp2ZNPQo0.cer (raw, json)
Hash identifier: 7JA/R/NLT6l1DJGTWTmkSLzCsr35g9RM2XnZ1pt1AMs=
Subject key identifier: BD:A6:8B:3F:F0:1C:DB:43:89:6F:93:C1:E9:0C:69:D9:93:4F:42:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9CAF79A5BA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/b32547-b440-441e-b6ce-03cd5a1c207c/1/vaaLP_Ac20OJb5PB6Qxp2ZNPQo0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/b32547-b440-441e-b6ce-03cd5a1c207c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:54:16 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.146.112.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672958883258 (0x9caf79a5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:54:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bda68b3ff01cdb43896f93c1e90c69d9934f428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:b3:d1:5b:eb:82:e6:23:ee:31:ef:29:54:
fa:69:65:a9:af:a0:6a:77:10:41:06:be:83:9d:00:
65:36:15:a5:b3:1d:65:72:da:7e:87:aa:b9:5d:c2:
53:2e:99:18:7f:86:a2:1f:6b:b9:0a:c4:18:c2:6a:
9f:26:ec:ec:46:62:79:65:4c:89:af:39:27:1e:d3:
5e:f9:d8:bb:39:aa:d3:bb:e6:33:15:d1:30:95:63:
1d:73:c7:df:13:b3:ca:6f:61:30:71:5c:12:ca:ce:
85:f7:2e:bf:87:e8:aa:1a:74:cd:66:d1:79:e0:a8:
8a:77:e7:11:80:0a:84:2d:fe:21:dc:69:08:5a:19:
20:42:4f:64:0c:91:fb:a3:a9:e1:df:06:da:de:83:
6a:36:74:b4:e3:6c:8e:e9:a4:47:df:06:61:db:2b:
a9:34:16:8b:f4:7d:f8:9e:92:59:c2:46:1e:90:e7:
46:21:b2:59:49:81:60:62:64:7c:6c:f4:cd:d4:1f:
34:93:a1:a5:aa:c0:04:48:9a:66:71:7b:76:23:4e:
a5:c3:86:e0:2f:3f:f7:21:5a:97:59:95:de:cc:12:
30:c6:ce:f8:05:ab:33:ba:6e:ad:fb:0f:ce:c7:c1:
fa:68:98:15:2e:98:8f:2f:f9:ea:8a:aa:78:bb:41:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A6:8B:3F:F0:1C:DB:43:89:6F:93:C1:E9:0C:69:D9:93:4F:42:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b32547-b440-441e-b6ce-03cd5a1c207c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b32547-b440-441e-b6ce-03cd5a1c207c/1/vaaLP_Ac20OJb5PB6Qxp2ZNPQo0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.112.0/22
Signature Algorithm: sha256WithRSAEncryption
87:2b:b4:6d:78:28:82:9a:63:05:11:93:d9:a8:2e:c2:d2:5f:
bd:e3:b3:6d:8f:aa:2a:a5:3c:79:67:66:7c:2b:79:50:60:c6:
4a:a5:77:f8:22:cd:af:4f:b3:42:c5:c3:cc:a6:7d:b1:2f:f4:
a4:53:09:f0:b3:c8:df:44:5f:e7:16:5e:3d:73:25:7b:56:e3:
51:7e:87:61:9c:ed:54:f7:d5:97:17:c6:14:6e:16:1f:bc:04:
dd:72:a5:ca:a7:22:79:74:24:73:fa:89:ce:4b:1a:bb:20:e9:
4f:00:35:41:f9:7d:09:23:94:42:61:da:a6:5f:ff:41:e8:50:
3b:7e:c6:85:20:27:14:b7:25:fd:fe:ae:00:e8:2f:9a:21:be:
56:b5:af:cd:f2:ba:e7:0a:6e:c9:cb:c4:87:64:30:a8:0f:15:
7a:d0:f4:d5:e5:ba:62:9b:e4:3d:7d:78:6b:d7:98:bb:47:a4:
47:8f:6e:a1:73:d2:3b:bb:93:b6:a4:c5:8a:fe:2b:a3:bc:2c:
ef:6a:57:8d:3d:6c:6b:04:a5:d1:d9:dd:f7:88:8b:02:3b:8d:
2e:ee:d0:28:5b:47:e1:0e:81:d5:02:aa:7d:54:f2:68:e3:77:
d0:6f:26:9e:df:6e:32:4c:41:d8:25:1b:7d:3f:39:da:ad:61:
cd:83:d5:bb
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJyveaW6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDM1NDE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiZGE2OGIzZmYw
MWNkYjQzODk2ZjkzYzFlOTBjNjlkOTkzNGY0MjhkMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA2g6z0VvrguYj7jHvKVT6aWWpr6BqdxBBBr6DnQBlNhWl
sx1lctp+h6q5XcJTLpkYf4aiH2u5CsQYwmqfJuzsRmJ5ZUyJrzknHtNe+di7OarT
u+YzFdEwlWMdc8ffE7PKb2EwcVwSys6F9y6/h+iqGnTNZtF54KiKd+cRgAqELf4h
3GkIWhkgQk9kDJH7o6nh3wba3oNqNnS042yO6aRH3wZh2yupNBaL9H34npJZwkYe
kOdGIbJZSYFgYmR8bPTN1B80k6GlqsAESJpmcXt2I06lw4bgLz/3IVqXWZXezBIw
xs74Baszum6t+w/Ox8H6aJgVLpiPL/nqiqp4u0HFHQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFL2miz/wHNtDiW+TwekMadmTT0KNMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwL2IzMjU0Ny1iNDQwLTQ0MWUt
YjZjZS0wM2NkNWExYzIwN2MvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvYjMyNTQ3LWI0NDAtNDQxZS1i
NmNlLTAzY2Q1YTFjMjA3Yy8xL3ZhYUxQX0FjMjBPSmI1UEI2UXhwMlpOUFFvMC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLZJwMA0GCSqGSIb3DQEBCwUAA4IBAQCHK7RteCiCmmMFEZPZqC7C
0l+947Ntj6oqpTx5Z2Z8K3lQYMZKpXf4Is2vT7NCxcPMpn2xL/SkUwnws8jfRF/n
Fl49cyV7VuNRfodhnO1U99WXF8YUbhYfvATdcqXKpyJ5dCRz+onOSxq7IOlPADVB
+X0JI5RCYdqmX/9B6FA7fsaFICcUtyX9/q4A6C+aIb5Wta/N8rrnCm7Jy8SHZDCo
DxV60PTV5bpim+Q9fXhr15i7R6RHj26hc9I7u5O2pMWK/iujvCzvaleNPWxrBKXR
2d33iIsCO40u7tAoW0fhDoHVAqp9VPJo43fQbyae324yTEHYJRt9PznarWHNg9W7
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-fra.rpki-client.org