Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BVLYSIq9A_dmj3L7x9V_djDNK88.cer
File: BVLYSIq9A_dmj3L7x9V_djDNK88.cer (raw, json)
Hash identifier: k/N4r2eQAss2j3UZlNAPs/jxi+C3vgvXGaUT/eEim20=
Subject key identifier: 05:52:D8:48:8A:BD:03:F7:66:8F:72:FB:C7:D5:7F:76:30:CD:2B:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B09AFFD339
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/db7d7e-a904-4bf7-8a15-48ce6b571309/1/BVLYSIq9A_dmj3L7x9V_djDNK88.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/db7d7e-a904-4bf7-8a15-48ce6b571309/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 Apr 2022 09:00:15 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210238
IP: 81.22.224.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758514701113 (0xb09affd339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 26 09:00:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0552d8488abd03f7668f72fbc7d57f7630cd2bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:12:b0:eb:c2:b7:61:74:81:9e:93:d8:60:
b0:96:b3:d5:b6:2b:d4:65:28:db:f2:c5:fb:72:f1:
fd:b8:19:0d:26:92:d2:02:84:e7:62:ea:86:9e:e4:
e0:49:ab:a2:2d:b5:c7:90:b4:9f:d9:23:fc:07:64:
60:7d:67:75:be:cb:0d:66:f2:33:72:1a:d4:36:24:
e4:da:a5:cb:88:ab:9f:32:1c:e6:0a:bc:00:b1:f9:
08:d3:2c:0e:c7:aa:89:35:07:ac:a9:79:e3:60:1a:
6e:ba:88:0b:16:40:92:06:01:34:78:41:34:ff:bf:
11:47:5e:a2:e4:4e:26:3b:a0:bd:79:87:d8:46:be:
94:c1:73:ef:bb:ff:87:ee:53:4f:12:e7:c7:3b:7d:
30:f1:5e:cc:46:3f:d0:ee:a4:8b:e1:05:89:4a:9a:
47:82:4f:41:f2:d2:a3:e4:56:5a:d5:52:40:27:91:
b8:03:71:fb:6e:69:92:a1:f5:13:ab:d8:a1:74:53:
60:73:fc:ae:99:ea:40:bd:4e:bd:64:9d:e7:c6:8a:
34:92:8e:b3:cd:5f:11:10:8c:d0:65:70:04:fb:3d:
23:06:59:7f:5b:94:19:2c:f1:c4:77:d3:ab:a7:95:
13:f5:8c:ef:b3:c8:60:ef:4c:ff:0e:4a:b1:9c:e6:
19:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:D8:48:8A:BD:03:F7:66:8F:72:FB:C7:D5:7F:76:30:CD:2B:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db7d7e-a904-4bf7-8a15-48ce6b571309/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db7d7e-a904-4bf7-8a15-48ce6b571309/1/BVLYSIq9A_dmj3L7x9V_djDNK88.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.224.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210238
Signature Algorithm: sha256WithRSAEncryption
55:9f:bc:b7:0c:b7:61:b7:1e:6c:1f:a5:68:65:55:7a:e5:3f:
83:14:db:aa:7d:3e:a4:7b:ab:e0:9e:f5:8c:e3:6e:d0:b2:03:
c1:95:2a:98:b8:4f:43:77:83:ca:da:c5:ef:64:bc:9e:c6:39:
ab:6f:63:1a:21:4d:c1:05:be:0e:d8:3f:96:f1:e9:b6:e3:6a:
0b:a9:a1:8e:aa:35:91:cc:6c:b0:7c:1f:6c:4e:5d:6a:30:dc:
e1:56:d3:9b:e5:0e:a7:3e:7b:ff:c5:36:92:5a:8c:ee:88:eb:
b5:36:5c:15:c5:01:53:08:95:48:70:4d:ee:61:40:47:af:2d:
c0:95:d5:4d:64:9d:86:5d:82:0f:23:63:57:5f:2d:cf:dc:f4:
f0:84:64:70:d8:8c:13:97:40:ba:a1:f1:fd:81:80:22:9f:bb:
18:89:68:54:2b:ea:77:b5:2d:33:95:86:61:24:75:5b:47:d5:
cd:f3:e7:af:dc:43:0b:72:51:4b:60:74:ea:d3:b1:02:57:ce:
79:24:1c:57:94:d7:b0:58:3a:4d:5e:af:d4:89:20:96:f8:cf:
3b:58:a3:84:f5:52:0b:14:d5:5a:ad:26:4e:f2:3a:d3:92:8e:
b8:40:f6:e7:88:95:8e:b5:7d:4f:1d:39:35:58:90:96:04:e4:
25:a7:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:46:36 2025 by rpki-client