Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DME_fe2euXwXkGZiSgiSKxOtD8w.cer
File: DME_fe2euXwXkGZiSgiSKxOtD8w.cer (raw, json)
Hash identifier: tm6csiDI+EFVNh2bcMNLcx+jwxXuAeD4AOBW15ok7JQ=
Subject key identifier: 0C:C1:3F:7D:ED:9E:B9:7C:17:90:66:62:4A:08:92:2B:13:AD:0F:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A09B20726E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/e44a3e-207b-4f0c-ab04-f3056901f73f/1/DME_fe2euXwXkGZiSgiSKxOtD8w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/e44a3e-207b-4f0c-ab04-f3056901f73f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:59:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.194.142.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689797362286 (0xa09b20726e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cc13f7ded9eb97c179066624a08922b13ad0fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:37:4f:35:3d:ca:6e:25:30:58:df:f0:63:
45:7f:d0:d9:47:28:c8:20:88:a9:10:99:df:33:0a:
84:6c:d8:b1:05:a4:a8:17:4e:cf:fb:d1:e3:9c:32:
cc:36:85:36:91:3e:6e:fb:2e:0d:78:af:35:6a:4e:
e6:37:9f:da:57:6f:e9:04:bf:83:d3:4c:1c:d7:9b:
b1:c9:68:22:a4:f9:48:1f:52:a8:c2:4c:17:ab:bd:
a8:92:62:e9:50:16:ed:de:26:3b:6b:e1:8e:12:60:
72:cf:08:d6:f4:a1:17:6e:6c:b5:bd:02:62:e4:09:
6e:75:55:9c:7a:46:33:86:c8:45:2c:f1:d2:e0:c4:
49:6e:46:7d:27:af:43:e9:74:5b:6b:7a:2c:31:09:
6a:8a:db:bd:ac:1c:2c:5f:24:ae:28:cd:55:52:cd:
30:33:e7:9a:9a:83:64:3c:3f:62:7e:e6:8d:8f:5f:
fa:25:a3:3f:ec:ab:33:3e:ef:53:29:9a:3e:9d:ab:
f8:7c:fe:37:df:e5:8a:a0:1e:31:19:bb:e3:6f:0f:
01:51:2a:57:94:32:72:b6:d7:d6:f1:5b:c9:c6:93:
ab:47:d1:88:90:b6:7d:3b:b4:5b:36:ee:8b:81:cf:
5b:77:c5:e9:c8:db:ba:55:22:85:ab:7a:42:8a:78:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C1:3F:7D:ED:9E:B9:7C:17:90:66:62:4A:08:92:2B:13:AD:0F:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e44a3e-207b-4f0c-ab04-f3056901f73f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e44a3e-207b-4f0c-ab04-f3056901f73f/1/DME_fe2euXwXkGZiSgiSKxOtD8w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.142.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:1c:04:03:de:59:74:01:44:c6:16:ed:d3:d3:f9:82:45:ea:
da:9e:40:64:1b:34:58:f7:f1:1c:fd:32:1e:2e:4e:c4:e7:5f:
cf:9a:1a:cd:0d:9b:f7:ee:be:19:54:81:d6:c9:7c:8b:08:b0:
7e:d3:8e:9d:99:f3:5f:61:bd:04:c7:27:fd:fc:e0:89:4c:86:
81:af:5e:12:d2:46:7f:2b:25:7f:23:4a:59:ab:0c:56:b9:2e:
e6:d4:fb:27:20:70:52:bc:b6:41:21:57:76:43:3e:f1:ac:0d:
2c:11:84:f0:9a:45:0a:f8:38:1b:66:23:dd:90:28:6b:9d:ac:
a9:96:e4:eb:82:eb:4d:df:87:30:97:c8:88:6e:e7:55:d6:f7:
b0:9c:76:b1:c5:3f:c1:00:57:77:4e:48:49:22:4b:0b:1b:bb:
c6:28:24:61:74:06:37:7a:ab:c6:42:02:4d:73:81:63:9b:d2:
da:a1:88:bf:e2:65:b9:5a:bc:bf:ff:40:8b:35:23:9e:c0:54:
27:09:43:e0:ff:c5:ac:f6:a0:7b:68:d9:17:87:ed:84:ad:44:
49:42:5a:af:74:27:6e:23:07:be:fa:6e:a9:50:98:4a:cb:b2:
7c:a7:be:7d:48:47:d1:3e:da:3b:29:5b:e0:c1:d8:10:1e:3b:
ff:a8:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:02 2023 by rpki-client on console.sobornost.net