Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oW00nz0_0hLvn-fQR-STmaDzdZM.cer
File: oW00nz0_0hLvn-fQR-STmaDzdZM.cer (raw, json)
Hash identifier: e1NWFScw2iYJsOTbH9JrSQ6NtYy76XUTBjRcZgNUkEI=
Subject key identifier: A1:6D:34:9F:3D:3F:D2:12:EF:9F:E7:D0:47:E4:93:99:A0:F3:75:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A4FFCC6E78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/4fb5fe-bb16-488d-bd75-0729a1d97a3f/1/oW00nz0_0hLvn-fQR-STmaDzdZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/4fb5fe-bb16-488d-bd75-0729a1d97a3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:57:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.105.100.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708666224248 (0xa4ffcc6e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a16d349f3d3fd212ef9fe7d047e49399a0f37593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:93:35:d1:38:d4:e4:0f:66:30:65:99:c9:
1e:bd:7d:9b:e9:67:43:7b:c0:70:43:51:f4:3d:04:
fd:30:6e:b2:3d:c0:2c:a9:56:b8:49:19:9a:22:fa:
cf:33:40:63:a9:0f:57:42:94:94:80:8b:ed:89:d4:
76:f4:5e:a5:88:72:33:87:e3:a3:6e:19:86:99:70:
e1:ea:6a:20:df:ea:b0:53:1a:d1:ea:8c:cd:ea:b5:
ae:65:3b:50:a1:0d:6c:aa:11:c5:fd:bd:74:68:88:
aa:a6:1f:28:4b:8c:ad:62:b7:fa:9b:15:44:73:4a:
41:24:c6:df:6b:5d:cb:f9:75:32:42:fa:76:b0:8b:
48:3a:9b:37:02:55:cf:dd:bc:42:ce:e7:b0:f3:9a:
4d:e1:8e:98:92:97:2e:27:f8:81:03:57:32:60:48:
1c:aa:5c:90:10:df:c4:9d:7d:6d:d7:46:91:71:7b:
e6:1c:7c:09:f6:fd:9f:8b:35:37:44:75:5d:79:35:
f3:21:d2:84:27:40:b6:7d:10:d2:46:de:a1:74:83:
39:3b:fb:a2:ff:fc:c5:77:dd:87:68:6e:ed:e7:69:
ae:08:52:0f:c9:5b:ef:52:32:c7:9e:f6:01:ef:c2:
38:22:2f:c1:af:33:ba:fd:75:27:a8:ac:f7:b4:08:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6D:34:9F:3D:3F:D2:12:EF:9F:E7:D0:47:E4:93:99:A0:F3:75:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4fb5fe-bb16-488d-bd75-0729a1d97a3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4fb5fe-bb16-488d-bd75-0729a1d97a3f/1/oW00nz0_0hLvn-fQR-STmaDzdZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.100.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cc:a5:3e:e6:da:54:f1:24:e9:1c:75:92:70:ce:74:29:27:
63:b2:98:8d:10:7c:43:f0:7c:32:5d:22:96:34:03:af:8a:e6:
bf:e8:d4:1f:c5:35:bf:db:2c:c0:37:8f:48:02:a4:5e:5e:63:
dd:cb:f4:f0:3a:cb:be:d0:59:9b:c0:d7:f9:fd:99:0e:66:87:
e5:2e:ce:be:80:14:2f:65:e7:5a:bc:67:1a:d7:7a:2a:38:68:
a6:8a:3c:9d:43:50:da:9a:d0:79:8e:ad:17:c9:5a:87:9a:9d:
3a:ff:52:ae:76:d8:38:f7:8b:c8:d5:eb:98:8b:c0:50:2c:ec:
49:e4:4e:2b:eb:66:d4:25:9b:39:14:4d:6b:57:e8:6e:e3:07:
b1:0a:44:02:1d:93:85:b3:2c:cd:6b:0e:f9:6e:cb:30:77:f2:
69:26:2e:5c:72:6f:2b:8c:e9:4e:e4:3e:70:6c:c7:d9:04:cf:
cf:ad:d2:76:b5:8d:ec:45:89:b8:d8:62:5a:1e:8d:53:b7:b2:
7e:7e:e4:06:e1:f9:49:0a:43:5c:d6:c3:b3:9f:c7:e5:17:ba:
c4:41:a3:a2:d2:ea:07:82:f5:6a:67:bb:cd:1b:b1:94:a8:0e:
9c:9f:9b:a2:7a:02:a8:09:40:76:eb:40:c2:3b:2f:f7:1f:2b:
16:7f:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:46 2024 by rpki-client on console-ams.rpki-client.org