Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vvXOSh87d09Kv60911eDyp5rmMI.cer
File: vvXOSh87d09Kv60911eDyp5rmMI.cer (raw, json)
Hash identifier: f7cDjVfvaxk2WqQUjDZWY22KJNpmEsUc4ARW995IkB4=
Subject key identifier: BE:F5:CE:4A:1F:3B:77:4F:4A:BF:AD:3D:D7:57:83:CA:9E:6B:98:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B638561C9F279A13046F681A540866E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/28bef5-75d6-421e-a323-47b7c2bc3d02/1/vvXOSh87d09Kv60911eDyp5rmMI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/28bef5-75d6-421e-a323-47b7c2bc3d02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.240.72.0/22
IP: 2a0c:7580::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:85:61:c9:f2:79:a1:30:46:f6:81:a5:40:86:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bef5ce4a1f3b774f4abfad3dd75783ca9e6b98c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:0c:dc:22:5a:b9:8d:44:c7:d5:0d:70:db:
0b:10:3b:60:e3:41:f4:16:a9:a4:00:2a:41:4c:b9:
f9:03:40:40:1b:1c:bd:fb:18:b7:dc:6a:47:cb:b9:
19:3a:b0:61:18:39:7f:b3:8d:8d:3d:2c:dd:23:1b:
d6:bf:f9:14:6e:5f:fb:37:8a:87:06:4c:25:c1:46:
94:52:ff:98:27:65:63:cf:36:e3:24:e3:6d:7f:1e:
2a:0f:a9:9f:27:22:41:06:9e:f5:17:ef:e6:25:75:
56:1d:bd:5a:67:b4:74:d3:1c:07:77:71:18:0f:7d:
fd:12:c3:ab:b7:73:c4:d5:d6:02:0e:1b:06:7d:d6:
cf:5a:9b:cd:a1:40:bf:33:04:b8:24:9b:e4:bf:a9:
55:a7:93:e9:46:30:a4:63:db:7c:5c:fb:a7:08:02:
2f:9c:c0:33:7b:fb:06:ee:31:ec:d2:09:4a:e4:60:
3b:de:5f:75:60:a7:b0:f8:80:ee:6f:3b:22:ca:0e:
6c:25:a6:d4:68:6d:9d:a8:44:bf:e4:2e:14:44:6e:
80:78:41:63:57:8a:31:56:79:ea:b6:42:04:03:b6:
93:35:10:5c:01:1f:ad:dd:17:ca:3b:8f:19:d3:03:
27:69:79:11:10:85:1c:2c:77:bc:2d:e7:dd:79:97:
e5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F5:CE:4A:1F:3B:77:4F:4A:BF:AD:3D:D7:57:83:CA:9E:6B:98:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/28bef5-75d6-421e-a323-47b7c2bc3d02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/28bef5-75d6-421e-a323-47b7c2bc3d02/1/vvXOSh87d09Kv60911eDyp5rmMI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.72.0/22
IPv6:
2a0c:7580::/29
Signature Algorithm: sha256WithRSAEncryption
53:3c:6b:34:aa:95:ca:1d:0c:cf:50:db:30:d2:81:a0:d6:dd:
00:23:39:a5:a6:bd:17:19:75:81:a5:38:a8:79:f8:54:33:cf:
54:ca:07:ae:1a:7a:f9:c0:d5:fd:90:be:b5:6b:ac:d8:33:a4:
92:55:5f:3d:81:55:79:72:07:db:79:81:37:fa:e1:44:20:2f:
f3:a7:bd:53:b8:70:68:4d:53:47:24:22:d9:3d:58:88:a3:67:
40:f3:26:e2:97:56:40:d5:8e:9b:ab:19:ec:c7:1e:4a:b3:06:
8f:c7:a3:06:0a:54:24:c6:0f:19:2f:26:51:b5:f0:77:fc:e5:
6c:19:74:ca:5f:3d:bb:90:2e:44:bf:f8:f8:11:17:d4:e8:c5:
ff:7b:28:fd:82:aa:f4:33:e0:f8:c5:a9:ca:db:9e:71:e5:3b:
0d:e1:5f:f4:ec:02:41:37:0b:76:13:9b:d0:d8:73:29:60:01:
62:9e:fd:68:a3:69:92:8c:1a:7e:17:3b:10:42:cd:ad:38:9d:
3e:20:8d:f4:fa:5f:b8:e9:c3:a4:8e:70:20:46:1f:0f:f5:11:
3b:cc:dd:af:5f:f0:57:87:1c:94:21:56:de:3f:f6:b5:a8:1f:
8b:be:93:a1:c9:7f:ac:b4:16:ff:bb:7f:36:83:89:67:37:3b:
e8:ac:75:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:12:41 2025 by rpki-client