Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vbsrBPZU2EsfPzBXEmwVZuKpt8w.cer
File: vbsrBPZU2EsfPzBXEmwVZuKpt8w.cer (raw, json)
Hash identifier: zf45OJLBqrVXjEm21U4Wx4agihCIzhqTybmURmLDXS4=
Subject key identifier: BD:BB:2B:04:F6:54:D8:4B:1F:3F:30:57:12:6C:15:66:E2:A9:B7:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571687237135229ADB6B9D5885B28E1D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/18f607-2909-42d3-8110-793fc7f2f5a1/1/vbsrBPZU2EsfPzBXEmwVZuKpt8w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/18f607-2909-42d3-8110-793fc7f2f5a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 197514
IP: 91.220.240.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:72:37:13:52:29:ad:b6:b9:d5:88:5b:28:e1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdbb2b04f654d84b1f3f3057126c1566e2a9b7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:71:14:1d:3b:f8:b4:bd:81:30:53:03:d5:
ad:ae:fc:54:4b:8c:7f:23:ec:3b:e3:52:2b:dc:4c:
73:b2:f5:2f:6b:2b:76:be:af:2a:8e:89:7a:88:e2:
4f:8e:9e:60:1e:81:28:87:96:eb:79:e8:16:48:28:
4b:ea:ae:6d:c6:93:e5:b9:ef:50:ff:a5:ed:c7:5a:
f5:e2:50:03:ab:a0:97:db:a1:29:1e:b1:1e:a2:80:
24:e3:6c:bc:75:c1:86:8d:dd:13:f1:04:8d:e4:5a:
4e:aa:52:dc:21:5a:ab:c7:53:e9:59:8b:48:64:d0:
bf:03:2c:47:25:23:41:9c:54:7e:0b:4f:49:32:70:
91:36:a2:fa:b6:1d:d0:9e:be:e7:c7:e4:95:84:6f:
c8:ec:b1:bd:56:c2:7f:a9:52:b9:0e:58:3d:cf:05:
3d:53:66:3a:b3:92:56:4c:67:92:1f:99:28:0a:22:
3d:98:86:05:1c:de:7e:7a:8d:e2:e5:75:84:9d:1a:
fc:a5:ea:b7:e3:f8:e3:6d:f6:4a:5b:de:bc:b9:32:
a4:af:72:b5:47:50:97:80:d6:9c:10:6b:93:48:04:
2e:70:8c:58:8b:12:f8:c7:d5:cb:35:22:a1:c2:46:
45:30:5e:67:8e:cd:db:15:9a:30:48:44:22:c3:5d:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BB:2B:04:F6:54:D8:4B:1F:3F:30:57:12:6C:15:66:E2:A9:B7:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/18f607-2909-42d3-8110-793fc7f2f5a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/18f607-2909-42d3-8110-793fc7f2f5a1/1/vbsrBPZU2EsfPzBXEmwVZuKpt8w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.240.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197514
Signature Algorithm: sha256WithRSAEncryption
93:74:7b:5d:b7:8f:13:db:bb:d5:69:11:c5:d0:24:e3:11:1a:
e1:73:39:87:94:db:dd:f5:d6:bd:18:6f:9a:3f:61:67:f0:4a:
f4:94:7d:a3:e5:f0:cf:c1:89:ae:ac:18:db:15:01:f7:6f:97:
0e:3c:8b:ee:32:7e:e1:3c:30:3b:11:04:10:b0:f5:dc:ac:8b:
9e:4b:c4:42:85:5f:76:eb:36:ee:85:25:0b:11:46:6f:21:38:
e7:66:7a:10:48:19:ae:83:49:f9:f4:3a:8f:45:92:8b:36:b7:
b8:5a:9b:22:4d:76:71:3f:1c:b9:fa:fc:4f:49:27:8a:61:d3:
b7:dc:14:57:cc:37:33:84:0e:d5:6e:f3:20:f5:48:57:4b:72:
8d:ee:c3:26:00:4f:e6:19:51:60:c8:29:de:60:43:6f:6a:46:
86:2c:62:64:ba:b9:9f:f5:0d:79:3e:f2:da:00:71:37:99:68:
33:23:10:fc:3f:f4:b0:76:29:af:a1:4f:51:1e:c5:e3:b0:45:
e8:9f:59:7f:ab:72:58:a6:b9:6e:da:1b:ef:23:fc:f1:b7:6a:
5c:a7:62:17:89:63:20:fa:fe:51:20:79:5e:47:f3:24:72:1d:
f8:86:77:1a:da:f0:58:20:8d:dd:cd:4e:ff:56:7e:6a:0d:4e:
dc:1f:a5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:16 2025 by rpki-client