Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vftfrav7_H6qj3ZbIyy2xygqgDc.cer
File: vftfrav7_H6qj3ZbIyy2xygqgDc.cer (raw, json)
Hash identifier: /vLI7iS7cIs+AfjKdBvGwoHsEFOf8+zczPkASmYeliQ=
Subject key identifier: BD:FB:5F:AD:AB:FB:FC:7E:AA:8F:76:5B:23:2C:B6:C7:28:2A:80:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A148150B6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/a6fd5a-ca71-4b82-90e4-c6629aedd9b8/1/vftfrav7_H6qj3ZbIyy2xygqgDc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/a6fd5a-ca71-4b82-90e4-c6629aedd9b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:54:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.234.184.0/22
IP: 2a0d:2500::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692699073386 (0xa148150b6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdfb5fadabfbfc7eaa8f765b232cb6c7282a8037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:00:23:d9:11:ee:85:f6:9a:41:a8:d5:41:
ec:82:3f:10:33:fa:9b:74:a0:d8:a6:85:18:bd:59:
6e:c1:a5:4b:cd:e2:f2:63:b3:e4:7e:33:96:62:42:
dc:16:ab:78:98:4a:03:b2:d7:82:f4:f0:f1:79:bc:
fa:ba:c4:6f:75:53:9b:4c:00:04:07:cc:d0:45:97:
ec:86:47:10:c7:05:27:e8:88:ce:eb:59:38:8a:7b:
94:b1:b0:72:f3:63:9d:19:6a:82:96:b3:c5:cd:14:
ac:1b:5d:fb:f9:41:90:0b:0b:2c:83:3e:32:69:c8:
7b:d8:39:38:92:df:b1:2e:83:48:e4:ca:69:a4:a8:
74:21:cb:90:ec:c0:43:b9:37:87:ee:3a:2e:01:92:
3d:b1:72:11:00:e0:46:e3:88:23:49:2d:96:6b:24:
c5:16:4a:29:ad:95:52:1f:10:49:19:01:a9:b9:0f:
c2:cc:c0:03:fe:03:a1:ee:c1:8c:c5:82:05:54:ca:
8e:45:43:2d:96:41:0f:19:56:2e:42:fb:1a:ec:e4:
44:2e:66:7c:8b:fd:1c:a3:98:2b:54:88:d9:e5:4b:
67:56:fc:24:0f:cd:72:a6:2f:b3:85:fa:27:ad:69:
fe:b7:50:d9:83:fa:c9:e0:61:bc:45:f7:71:1e:d5:
ea:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:5F:AD:AB:FB:FC:7E:AA:8F:76:5B:23:2C:B6:C7:28:2A:80:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a6fd5a-ca71-4b82-90e4-c6629aedd9b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a6fd5a-ca71-4b82-90e4-c6629aedd9b8/1/vftfrav7_H6qj3ZbIyy2xygqgDc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.184.0/22
IPv6:
2a0d:2500::/29
Signature Algorithm: sha256WithRSAEncryption
6a:fc:22:59:47:d1:26:ed:da:98:83:62:f4:a4:67:97:2b:fe:
b6:84:2d:67:f3:5a:1e:23:28:89:b5:2e:6a:71:c2:2a:8a:ac:
ac:1a:e0:73:dc:36:5b:a9:20:be:ff:0e:59:c6:54:10:fe:26:
da:aa:93:c6:2a:43:73:b0:f1:44:9d:21:3c:40:b0:bf:ec:2a:
42:45:0a:9d:cc:cb:bb:29:9e:a1:28:f1:f8:af:c4:54:ad:b1:
70:7f:d7:56:0d:05:b5:12:27:81:54:cf:d0:fa:7c:f3:24:d0:
87:6c:68:84:75:10:e8:7d:ad:e2:09:22:d5:f7:34:2e:b5:0d:
43:9b:c6:76:a9:0e:69:40:07:68:e7:d0:8f:cc:e7:71:e6:85:
99:21:12:19:0b:36:e2:cc:18:63:c1:99:fc:7e:a3:65:32:4b:
2b:2b:78:87:b8:7f:1b:f9:50:9e:56:06:39:9f:3c:7d:5b:08:
27:87:21:47:1d:72:4b:9e:07:e7:f2:dc:dc:ab:bf:8f:c5:a1:
c6:53:eb:fb:7f:f0:bd:cf:5b:01:34:bf:a8:92:8d:80:c1:32:
c5:4e:09:f5:10:0f:f1:70:06:35:02:49:4f:57:b9:cf:b6:75:
1f:43:51:6c:36:2e:b5:66:cf:73:d7:9c:8b:9e:d7:58:98:28:
ea:c8:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:49:12 2025 by rpki-client