Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xUMARrcFq8q2_wnk3Jh9vHOibdc.cer
File: xUMARrcFq8q2_wnk3Jh9vHOibdc.cer (raw, json)
Hash identifier: YImsTqyLqVKhcWH6UdVPnKTuIGW5tuqFm21pzE9vdBA=
Subject key identifier: C5:43:00:46:B7:05:AB:CA:B6:FF:09:E4:DC:98:7D:BC:73:A2:6D:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AE92F5F89D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/1359ca-c087-42e9-bb71-3d26bd06a664/1/xUMARrcFq8q2_wnk3Jh9vHOibdc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/1359ca-c087-42e9-bb71-3d26bd06a664/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Mar 2022 08:55:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 44220
IP: 2a09:a380::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749789903005 (0xae92f5f89d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 08:55:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5430046b705abcab6ff09e4dc987dbc73a26dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:4d:30:53:28:cf:db:a3:ca:25:e8:81:b0:
3a:06:8b:40:05:87:17:7c:5e:93:92:4d:1c:01:19:
a8:c3:92:d1:cc:95:eb:f3:d1:8e:43:d2:11:3d:4e:
d3:25:6c:d0:cb:17:54:3c:88:12:7e:5e:67:56:2b:
35:1f:0a:2f:91:bb:3e:ff:30:9d:9c:65:e3:66:07:
8a:d7:86:d4:35:75:a3:68:88:c4:4b:77:46:bf:b9:
01:e7:9c:69:f2:41:fa:91:38:b6:f1:9a:4a:b8:0d:
27:6e:cd:74:a4:32:27:4f:cf:90:c7:fc:bd:5e:ca:
9e:5c:7b:e9:0c:d7:bd:48:15:7f:c6:24:3b:fe:33:
2f:9d:1f:f0:50:9d:7b:76:6f:b3:a5:b4:ce:ba:61:
99:7b:47:56:d7:37:a5:ed:ac:db:c5:7e:90:de:51:
f0:15:59:de:59:38:83:06:43:e3:90:2c:fd:e5:fd:
34:ea:9a:cd:0a:a7:e1:48:27:d8:29:61:4c:d2:65:
f7:bc:0b:51:10:a1:cb:7e:80:38:15:c4:64:6a:fb:
d8:87:0b:42:97:a4:55:50:cb:dd:02:98:93:00:91:
60:1b:ee:cb:05:db:b4:29:10:7c:d4:a5:7a:2d:1b:
27:68:bf:3c:55:4f:73:21:ab:ad:b2:41:d7:ad:fc:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:43:00:46:B7:05:AB:CA:B6:FF:09:E4:DC:98:7D:BC:73:A2:6D:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1359ca-c087-42e9-bb71-3d26bd06a664/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1359ca-c087-42e9-bb71-3d26bd06a664/1/xUMARrcFq8q2_wnk3Jh9vHOibdc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44220
Signature Algorithm: sha256WithRSAEncryption
84:30:b4:bf:73:be:13:d2:2d:b7:af:a9:52:c1:9e:da:96:78:
59:60:ce:4b:79:fd:99:96:6f:70:76:72:9f:97:d7:08:c2:ae:
89:66:d2:7f:6b:dd:73:41:1d:55:36:91:9d:8e:1d:1a:30:d2:
1d:83:e9:3c:50:a6:c8:05:a2:df:4b:b9:83:96:3f:88:c3:01:
aa:11:13:65:78:e9:bc:05:38:6f:9e:5c:f2:92:f3:70:87:0c:
9c:66:4f:81:ae:c3:96:08:23:36:8e:38:5f:06:29:55:51:39:
5b:84:f6:23:dd:fb:86:ff:0a:c2:8f:1f:26:b3:0d:30:2f:26:
0c:6f:19:48:85:ee:71:45:3c:4c:6c:71:fc:09:31:7f:d2:91:
aa:6d:ba:2e:13:c3:f6:66:00:5b:cf:42:9f:51:31:0a:9e:46:
f6:e9:be:35:17:e6:b4:24:4f:e9:02:f5:f9:99:0a:8f:44:1b:
6e:4d:07:01:a9:79:51:88:f2:84:ae:0e:20:89:04:ce:e3:9a:
40:37:9c:1b:ae:d4:a8:cb:dc:98:7c:85:c4:cb:72:82:37:a0:
88:5f:75:0e:19:9d:36:f2:2f:39:63:f2:b9:b2:8e:46:8d:9e:
4b:3c:5a:42:79:8e:dd:c4:bb:94:94:8d:5d:39:87:7a:d1:42:
40:8a:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:23 2025 by rpki-client