Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0Sj77h204BJE92Pm-GXcDQfCCBg.cer
File: 0Sj77h204BJE92Pm-GXcDQfCCBg.cer (raw, json)
Hash identifier: Ow7DD9Q8IjYLftthgLHeEanjNwyX20EbR527HMqoZr0=
Subject key identifier: D1:28:FB:EE:1D:B4:E0:12:44:F7:63:E6:F8:65:DC:0D:07:C2:08:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AC46145D1D4FABC5C081E3EBEC0B76B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/204/D128FBEE1DB4E01244F763E6F865DC0D07C20818.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/204
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 00:38:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.97.209.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:c4:61:45:d1:d4:fa:bc:5c:08:1e:3e:be:c0:b7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:38:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d128fbee1db4e01244f763e6f865dc0d07c20818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:69:da:0b:e5:e8:50:5c:e0:99:6d:0b:a0:32:
de:35:bb:2a:ce:ec:2a:61:ab:f4:66:f4:0f:96:9a:
bd:72:a6:fd:3c:3a:1a:f7:75:a7:e3:bb:7b:d3:0a:
6c:94:9e:53:fb:b6:c1:16:4c:4b:15:3e:f0:ab:75:
89:f2:1a:d7:1f:3a:9d:21:da:ea:e0:91:b8:83:73:
98:4c:90:17:2e:f0:a5:2b:11:5d:91:0f:18:5d:3d:
66:ad:dd:aa:ec:ec:9b:44:3c:4f:b6:be:be:99:b2:
54:aa:fc:06:9f:33:57:15:47:12:31:39:c4:bc:f0:
2b:cd:a2:b4:27:6f:f4:73:cd:48:7c:25:08:9c:95:
30:f3:03:3b:28:c5:ec:1a:88:d7:ab:e2:8b:a5:f7:
a9:40:85:a5:27:30:06:da:ac:e2:ec:cc:f9:d1:aa:
c7:51:b7:7a:31:c5:92:52:14:45:b8:5f:14:ab:a1:
6d:70:20:e1:19:98:a8:b6:c2:fb:6f:d7:35:b5:3c:
a0:aa:51:5e:77:e2:c8:19:6a:18:ac:26:0a:71:d0:
bc:18:72:0b:46:25:1f:32:06:c1:94:1e:98:63:c4:
7a:55:5e:51:39:f7:48:1b:6b:b1:30:0e:fb:69:90:
0d:97:8c:36:14:66:69:da:ea:47:6c:cc:20:ea:b3:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:28:FB:EE:1D:B4:E0:12:44:F7:63:E6:F8:65:DC:0D:07:C2:08:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/204
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/204/D128FBEE1DB4E01244F763E6F865DC0D07C20818.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.209.0/24
Signature Algorithm: sha256WithRSAEncryption
20:47:ea:fa:ae:a0:81:6b:9c:9e:86:06:8b:2e:5f:a6:4b:15:
7b:b1:9e:a9:45:df:cb:23:8f:19:8a:d5:26:97:a9:0f:af:83:
3a:e9:ca:37:64:cd:dc:7e:dc:bb:8e:94:48:7f:ab:f8:ea:62:
89:39:f1:f9:98:e8:e6:74:16:0e:38:a0:d2:22:1d:94:e8:51:
4a:c4:1e:cf:9d:ff:50:fc:e1:da:ef:43:f5:a1:35:6d:8f:75:
a9:20:83:73:20:4c:b1:04:14:f1:75:71:24:71:1b:d2:d3:20:
56:50:28:a7:90:79:a0:55:f3:14:9d:85:7b:6c:03:21:8b:37:
09:ae:d4:44:88:12:53:01:0c:bd:2c:da:d2:cd:ac:2b:39:dd:
02:a0:22:cd:0c:62:fb:4e:8e:07:fa:42:2b:6d:37:a9:ea:98:
53:eb:54:e0:fb:68:c3:bd:7b:3c:fd:89:3a:4b:40:74:7f:c2:
9c:a1:27:50:29:b2:b8:83:eb:e4:1e:7f:c5:eb:4a:e5:a4:86:
8f:a6:21:48:92:9a:d5:67:0a:0b:13:20:3f:2b:21:0d:80:cc:
01:f0:3b:d7:5d:4a:70:f1:a7:47:49:fd:96:8f:11:cc:e6:64:
6e:e3:3f:20:6c:12:29:d0:37:29:7e:cb:89:08:87:19:41:72:
46:42:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:21 2023 by rpki-client on console.sobornost.net