Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vbAAF1kqR-V8_iEwxqIuVzSVyT8.cer
File: vbAAF1kqR-V8_iEwxqIuVzSVyT8.cer (raw, json)
Hash identifier: bMSQfISyLBchoKbcQbqsS7su18YVEEtebASb9mxrbq8=
Subject key identifier: BD:B0:00:17:59:2A:47:E5:7C:FE:21:30:C6:A2:2E:57:34:95:C9:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185724507F651B8552F0D78722013485E24
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/befe3a-bea0-45b4-b6e9-19ce82fd85b7/1/vbAAF1kqR-V8_iEwxqIuVzSVyT8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/befe3a-bea0-45b4-b6e9-19ce82fd85b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:36:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.145.240.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:07:f6:51:b8:55:2f:0d:78:72:20:13:48:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:36:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdb00017592a47e57cfe2130c6a22e573495c93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:c4:73:e8:c6:cb:ca:56:ca:a2:38:1c:dc:
36:2a:07:8a:60:8b:67:b4:d4:76:2f:d6:51:17:c3:
1a:a8:75:ee:df:f9:80:10:fd:df:9e:5e:19:4a:61:
0d:a7:56:8b:64:39:ce:41:ce:c2:ac:16:16:23:82:
19:28:47:4d:75:9d:56:4f:08:de:42:26:61:01:66:
d2:4c:1d:80:bf:30:44:89:9c:dc:98:f3:5e:c6:bf:
34:6c:d6:09:8e:c7:07:b7:b3:65:e3:f7:c5:d9:3f:
ad:91:19:35:cb:ef:ce:b1:ed:61:1a:d9:31:3e:68:
7e:6c:8d:bd:51:f4:d8:56:1c:a4:c4:e0:90:5b:91:
ee:28:cd:de:42:f1:7a:95:2d:a3:b9:47:80:10:df:
b4:a7:15:20:b3:cc:2a:14:ec:4b:06:90:61:c4:83:
77:f4:88:6e:19:39:b9:af:2d:40:9e:06:4c:fb:75:
51:ef:23:76:9b:06:43:67:56:20:a6:ec:7d:bc:96:
28:b9:a2:10:07:bc:96:dc:dd:f1:d0:5c:9d:9c:c2:
1b:18:b4:76:ef:73:7a:28:14:fc:34:81:80:ae:7a:
ee:e3:8c:51:2b:ca:30:21:c8:f9:42:c3:58:b3:d5:
5f:73:39:9e:58:32:16:ac:1a:3d:f2:b8:d7:b2:b5:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:00:17:59:2A:47:E5:7C:FE:21:30:C6:A2:2E:57:34:95:C9:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/befe3a-bea0-45b4-b6e9-19ce82fd85b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/befe3a-bea0-45b4-b6e9-19ce82fd85b7/1/vbAAF1kqR-V8_iEwxqIuVzSVyT8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/22
Signature Algorithm: sha256WithRSAEncryption
13:e0:ac:f4:7a:75:42:2f:d6:fd:de:78:ce:41:a2:41:36:e9:
a8:99:2f:53:46:e9:fe:cb:21:08:c2:7c:0b:69:ca:01:19:92:
7b:2a:04:93:87:f6:d9:18:35:1c:b8:69:42:3d:7f:8d:e9:cb:
05:4f:04:51:c4:7d:a1:19:9f:5b:b5:90:64:1d:fe:08:99:d6:
cd:57:f8:bb:49:cb:3e:8a:e2:04:7a:06:d7:0b:2e:7f:b5:26:
c3:df:ab:71:53:de:29:b0:05:a5:95:ca:17:fc:ab:6c:bb:aa:
ac:1c:8f:5c:d1:14:2d:3e:5d:9a:10:e6:73:bb:b7:5e:5d:78:
73:bf:b5:08:fc:0d:bf:d5:8d:db:aa:a3:c1:c5:2c:2c:5d:7a:
99:e6:ce:e4:c1:7f:c2:57:29:74:53:b9:6c:a5:74:fb:aa:7a:
6b:0c:b3:fa:d0:f7:5a:92:78:4d:56:87:6e:a7:4a:34:32:43:
55:97:60:7a:6f:3b:d6:8a:35:05:37:0d:94:de:62:54:97:d0:
a3:ac:e3:07:1c:1b:81:11:11:4a:aa:5d:85:29:97:0b:c9:aa:
be:e8:21:78:39:ef:88:ee:2e:c8:c8:af:8b:d0:26:3d:44:b8:
6b:bd:b4:db:ad:3f:22:61:08:7e:6d:fe:ee:88:3f:1b:b2:85:
cd:f3:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:29 2025 by rpki-client