Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vcdiqvWtwATa043IAm1gPaI1eNw.cer
File: vcdiqvWtwATa043IAm1gPaI1eNw.cer (raw, json)
Hash identifier: /iNkJHS6M5fNefzXPRLgYL76OMX8mWnwKSdJEcR17Ew=
Subject key identifier: BD:C7:62:AA:F5:AD:C0:04:DA:D3:8D:C8:02:6D:60:3D:A2:35:78:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708AE17DC35024D23BDE6252C3EA029C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/49c802-d942-478f-86b5-fe84ade5b686/1/vcdiqvWtwATa043IAm1gPaI1eNw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/49c802-d942-478f-86b5-fe84ade5b686/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:33:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.191.98.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8a:e1:7d:c3:50:24:d2:3b:de:62:52:c3:ea:02:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:33:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdc762aaf5adc004dad38dc8026d603da23578dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:25:1e:e4:4c:14:a1:05:73:b3:7c:15:22:
7a:4e:80:6f:58:b8:51:10:13:1c:29:15:24:50:c6:
d3:27:ee:8a:ba:ad:82:f5:d3:4d:43:ea:b8:10:f7:
ab:8a:73:b4:24:66:6b:27:01:79:a6:e6:6f:57:92:
94:cc:6c:8a:c4:b6:20:08:b1:f3:40:0f:5a:41:5d:
42:ce:4c:b7:aa:ba:6c:09:65:9f:4b:c5:16:28:cc:
80:15:1e:82:28:15:20:54:a3:83:3d:78:af:2b:be:
8c:09:c6:d8:37:5e:33:c4:1c:73:7e:1e:95:5e:bc:
ef:77:23:70:7a:2c:79:fa:ce:1b:fc:e7:64:92:23:
5c:65:5d:30:b5:84:e4:5d:72:50:c0:c6:59:7c:ec:
7c:8b:90:e9:14:85:df:12:1b:bc:4b:d1:7f:7e:96:
4d:d3:42:8d:79:1c:fe:5e:10:54:27:11:84:c0:e6:
42:a7:e1:46:be:9f:28:15:4c:69:4d:4f:a8:02:bc:
94:9c:7a:91:e1:f8:87:95:eb:ed:1a:12:f9:f5:73:
4d:ca:2f:0d:69:79:45:e8:54:95:62:b1:53:6a:5b:
29:4f:f6:ff:5a:fc:d9:bc:10:6d:39:3e:0f:8e:27:
2f:3b:3a:39:84:30:7e:b9:5e:90:26:fc:14:e3:06:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C7:62:AA:F5:AD:C0:04:DA:D3:8D:C8:02:6D:60:3D:A2:35:78:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/49c802-d942-478f-86b5-fe84ade5b686/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/49c802-d942-478f-86b5-fe84ade5b686/1/vcdiqvWtwATa043IAm1gPaI1eNw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.98.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fc:f7:0d:ad:6d:94:a8:2a:d8:4f:24:08:6a:22:fb:7e:18:
01:27:fd:be:0e:f0:e0:53:86:c9:46:ae:b7:1f:29:0f:62:d6:
2c:6e:a7:f8:82:68:2a:d1:e9:0e:96:3d:ed:80:01:33:0f:e3:
ab:d9:81:c6:da:4d:76:5d:9b:d3:80:d2:8c:6f:e3:04:39:26:
3c:2e:a5:44:c8:8c:ca:86:c9:9a:be:0c:e1:16:ee:12:8c:a9:
8a:95:6d:1a:2f:ba:f1:ac:44:22:3d:d1:a5:34:44:09:2d:d4:
e5:6b:26:d6:f1:42:a7:52:ed:6c:c1:24:b6:b7:12:4b:06:c4:
b7:e0:7f:e6:73:86:22:c4:08:2f:87:73:81:df:7c:13:4d:0a:
20:09:45:e3:43:03:f3:95:6f:8d:74:45:a9:7b:5e:a0:62:72:
4e:d4:92:b2:db:f5:ef:6d:5d:7e:ad:e1:8c:93:ae:b5:58:0e:
1e:bd:9c:07:41:b0:1f:8b:53:dd:97:2b:17:70:83:93:c9:53:
b9:34:e0:9c:ec:e7:cb:2c:da:f8:22:cc:07:19:40:0a:82:a3:
9b:f8:a5:44:57:09:b1:09:64:ad:2d:80:b5:fe:ce:d2:90:d8:
1d:26:ac:f0:13:43:72:75:e7:a5:d9:0b:78:73:b0:fa:17:f7:
74:8f:9a:19
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVwiuF9w1Ak0jveYlLD6gKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzMzQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGM3NjJhYWY1YWRjMDA0ZGFkMzhkYzgwMjZkNjAzZGEyMzU3OGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/YlHuRMFKEFc7N8FSJ6ToBvWLhR
EBMcKRUkUMbTJ+6Kuq2C9dNNQ+q4EPerinO0JGZrJwF5puZvV5KUzGyKxLYgCLHz
QA9aQV1Czky3qrpsCWWfS8UWKMyAFR6CKBUgVKODPXivK76MCcbYN14zxBxzfh6V
XrzvdyNweix5+s4b/OdkkiNcZV0wtYTkXXJQwMZZfOx8i5DpFIXfEhu8S9F/fpZN
00KNeRz+XhBUJxGEwOZCp+FGvp8oFUxpTU+oAryUnHqR4fiHlevtGhL59XNNyi8N
aXlF6FSVYrFTalspT/b/WvzZvBBtOT4PjicvOzo5hDB+uV6QJvwU4waeXwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFL3HYqr1rcAE2tONyAJtYD2iNXjcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzQ5Yzgw
Mi1kOTQyLTQ3OGYtODZiNS1mZTg0YWRlNWI2ODYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvNDljODAy
LWQ5NDItNDc4Zi04NmI1LWZlODRhZGU1YjY4Ni8xL3ZjZGlxdld0d0FUYTA0M0lB
bTFnUGFJMWVOdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw79iMA0GCSqGSIb3DQEBCwUAA4IBAQBJ/PcN
rW2UqCrYTyQIaiL7fhgBJ/2+DvDgU4bJRq63HykPYtYsbqf4gmgq0ekOlj3tgAEz
D+Or2YHG2k12XZvTgNKMb+MEOSY8LqVEyIzKhsmavgzhFu4SjKmKlW0aL7rxrEQi
PdGlNEQJLdTlaybW8UKnUu1swSS2txJLBsS34H/mc4YixAgvh3OB33wTTQogCUXj
QwPzlW+NdEWpe16gYnJO1JKy2/XvbV1+reGMk661WA4evZwHQbAfi1PdlysXcIOT
yVO5NOCc7OfLLNr4IswHGUAKgqOb+KVEVwmxCWStLYC1/s7SkNgdJqzwE0Nydeel
2Qt4c7D6F/d0j5oZ
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:50:09 2025 by rpki-client