Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vq0i1TCtLl-opRJL0FqAPBh2rM0.cer
File: vq0i1TCtLl-opRJL0FqAPBh2rM0.cer (raw, json)
Hash identifier: XbF5qj8nnXaPbRP4hSIPlEICiLgSKo+YhaAqWrW2OhE=
Subject key identifier: BE:AD:22:D5:30:AD:2E:5F:A8:A5:12:4B:D0:5A:80:3C:18:76:AC:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9947F511E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/vq0i1TCtLl-opRJL0FqAPBh2rM0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:55:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.173.28.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658337239522 (0x9947f511e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bead22d530ad2e5fa8a5124bd05a803c1876accd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:a2:51:fb:ba:0f:25:a0:a4:b0:e9:f7:8e:
8e:15:cc:21:6e:f8:c9:bd:47:91:d0:96:d8:00:8c:
52:12:b7:53:95:c0:55:27:5c:5a:c2:65:43:5a:44:
e1:f4:9b:a9:c7:26:d6:81:2b:45:ac:06:9d:ae:2c:
8d:a2:be:fa:0f:49:78:a7:62:72:ea:67:b6:e4:a3:
a8:31:39:71:d8:73:bc:dd:dc:44:11:8c:27:04:d9:
e4:ff:26:69:82:b5:46:ec:c8:cd:16:bb:85:c8:c9:
c1:1c:d9:e9:98:a7:54:6b:95:67:51:8b:f4:0e:f2:
a6:ad:a4:a0:57:3e:20:f7:9c:0c:66:69:20:27:02:
b2:91:7e:78:6e:2d:d5:ee:c1:26:c3:75:15:43:b3:
27:ac:66:32:29:82:12:49:3f:20:e5:06:b9:5d:63:
2f:a0:5d:a9:74:56:55:46:01:97:2b:1b:7f:99:32:
39:4c:2e:91:06:af:f7:9a:4e:2b:a8:26:fd:1b:3c:
a9:88:c6:9b:af:7a:ea:41:93:cb:a2:c1:ef:e8:03:
4a:b1:ad:18:06:07:61:17:f1:90:fc:b4:af:a1:50:
e8:62:b3:a2:2c:13:20:c9:c9:d1:61:d0:ab:37:f8:
60:b3:52:0b:61:a2:75:54:20:c2:1b:9c:aa:d7:b9:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AD:22:D5:30:AD:2E:5F:A8:A5:12:4B:D0:5A:80:3C:18:76:AC:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/vq0i1TCtLl-opRJL0FqAPBh2rM0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:2c:30:30:45:e6:98:b3:ac:15:ab:0b:5e:4e:1e:e6:ec:8a:
5c:2e:8b:83:ec:c7:82:6b:06:f7:49:62:03:91:e9:36:64:d2:
fa:0d:82:2d:18:33:8b:14:8f:4a:38:22:52:a7:0a:e2:df:8e:
a1:05:3b:98:17:6b:53:c2:63:43:c7:c1:7b:e2:8b:b0:dd:af:
59:6f:ba:d5:80:09:51:0e:db:c1:1a:5c:00:d0:16:cc:1c:35:
9d:70:41:cb:d6:79:f5:e7:04:f2:4f:31:8a:60:7d:77:d6:e1:
b1:1d:09:76:b9:b6:c8:be:d8:f0:c0:2e:98:75:0a:83:6e:9f:
b2:04:b3:2f:4d:a4:d5:e5:83:48:73:6c:27:82:7c:70:1b:4e:
f2:85:93:b5:85:9d:40:00:a9:83:05:bf:9f:c3:a1:9c:a0:d7:
34:d8:59:37:4d:c8:8f:28:f3:a6:b8:4c:11:a1:f6:1c:72:90:
0b:19:e6:60:0a:fd:85:b1:10:10:e7:a9:ba:05:31:e0:4e:b4:
9f:3c:5e:53:bf:05:5b:92:3c:6b:b6:47:d5:2e:9e:0e:fd:40:
a6:3c:11:b7:50:81:96:14:5d:7a:e5:0f:fb:c4:c2:8a:81:09:
fe:87:3e:9a:d9:d4:63:16:01:7c:8e:24:d4:6b:c7:cf:43:20:
9d:a2:ca:e1
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJlH9RHiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDA1NTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiZWFkMjJkNTMw
YWQyZTVmYThhNTEyNGJkMDVhODAzYzE4NzZhY2NkMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAqAKiUfu6DyWgpLDp946OFcwhbvjJvUeR0JbYAIxSErdT
lcBVJ1xawmVDWkTh9JupxybWgStFrAadriyNor76D0l4p2Jy6me25KOoMTlx2HO8
3dxEEYwnBNnk/yZpgrVG7MjNFruFyMnBHNnpmKdUa5VnUYv0DvKmraSgVz4g95wM
ZmkgJwKykX54bi3V7sEmw3UVQ7MnrGYyKYISST8g5Qa5XWMvoF2pdFZVRgGXKxt/
mTI5TC6RBq/3mk4rqCb9GzypiMabr3rqQZPLosHv6ANKsa0YBgdhF/GQ/LSvoVDo
YrOiLBMgycnRYdCrN/hgs1ILYaJ1VCDCG5yq17ni5QIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFL6tItUwrS5fqKUSS9BagDwYdqzNMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzJjMDNkYy1kOTAyLTRiODEt
YjE2MC0yYWJhY2Y3NTIyODIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvMmMwM2RjLWQ5MDItNGI4MS1i
MTYwLTJhYmFjZjc1MjI4Mi8xL3ZxMGkxVEN0TGwtb3BSSkwwRnFBUEJoMnJNMC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCua0cMA0GCSqGSIb3DQEBCwUAA4IBAQBtLDAwReaYs6wVqwteTh7m
7IpcLouD7MeCawb3SWIDkek2ZNL6DYItGDOLFI9KOCJSpwri346hBTuYF2tTwmND
x8F74ouw3a9Zb7rVgAlRDtvBGlwA0BbMHDWdcEHL1nn15wTyTzGKYH131uGxHQl2
ubbIvtjwwC6YdQqDbp+yBLMvTaTV5YNIc2wngnxwG07yhZO1hZ1AAKmDBb+fw6Gc
oNc02Fk3TciPKPOmuEwRofYccpALGeZgCv2FsRAQ56m6BTHgTrSfPF5TvwVbkjxr
tkfVLp4O/UCmPBG3UIGWFF165Q/7xMKKgQn+hz6a2dRjFgF8jiTUa8fPQyCdosrh
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:01:06 2025 by rpki-client