Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1IwhjNM5DZHoJIaff_MAZqHpT4I.cer
File: 1IwhjNM5DZHoJIaff_MAZqHpT4I.cer (raw, json)
Hash identifier: aT7umaISAUqQrs+2/IrzoAyR4HvhXqk7U3kyMCJNtgQ=
Subject key identifier: D4:8C:21:8C:D3:39:0D:91:E8:24:86:9F:7F:F3:00:66:A1:E9:4F:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AABF1D7952B79FCAC99FA7CD6CE5D26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/206/D48C218CD3390D91E824869F7FF30066A1E94F82.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/206
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 00:12:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.246.42.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:ab:f1:d7:95:2b:79:fc:ac:99:fa:7c:d6:ce:5d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:12:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d48c218cd3390d91e824869f7ff30066a1e94f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:8e:4f:87:2a:eb:e9:b2:f2:ce:4b:c9:aa:
f6:b9:a9:3e:83:de:c6:37:b1:43:e4:5b:5c:32:aa:
e2:19:99:69:b9:5b:06:6d:6b:ad:df:a8:b7:83:3d:
07:ce:18:0d:e3:04:00:87:71:df:91:45:15:18:90:
16:7e:66:f7:df:c5:24:96:6b:2f:9d:d9:4a:cb:1f:
a2:2f:a7:6c:d9:32:f0:87:80:32:c0:b4:c1:64:a8:
88:9e:8b:d0:63:0b:fa:ec:a1:fd:80:19:2a:5f:c6:
eb:7d:7f:42:e1:49:20:a6:d6:4b:b3:b1:e9:ea:ee:
68:ba:ca:fb:bd:2b:a6:5d:85:72:6d:1c:bd:b9:89:
ee:41:09:6c:34:b1:49:42:77:5a:b3:de:9b:6d:5e:
1d:f7:39:e6:9e:b8:70:d9:68:e4:0e:68:3c:a2:d4:
94:cc:6d:3f:ca:ce:66:8b:e8:12:e0:4c:70:a3:68:
d7:a9:bb:37:72:89:cc:9c:9a:14:09:45:05:f7:e7:
22:12:68:9a:24:ee:68:bf:40:be:11:cc:29:58:0f:
7c:e8:dd:86:d5:c7:58:5e:22:9a:f4:01:ec:47:79:
5d:9d:f6:fb:6d:9a:8b:f3:e5:5c:ed:81:b1:0d:95:
e1:97:f6:6a:f2:19:8d:6f:69:58:8a:f4:fb:1d:e0:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:21:8C:D3:39:0D:91:E8:24:86:9F:7F:F3:00:66:A1:E9:4F:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/206
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/206/D48C218CD3390D91E824869F7FF30066A1E94F82.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.42.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8b:9e:03:38:d3:c7:3e:2d:13:01:ae:a1:b8:e1:69:29:d8:
cf:99:ea:3a:c4:72:d2:b1:de:c0:61:e3:dd:94:6d:68:10:b7:
80:be:e7:98:c6:2c:48:bf:89:56:7f:ff:d7:5c:a8:af:1c:31:
df:a4:8f:b0:71:89:81:15:7c:5a:2f:2c:92:01:60:65:e1:bb:
8c:a2:8b:00:c7:4c:1f:55:e3:15:9a:34:3c:01:5f:80:08:e0:
bc:c4:68:13:db:c7:5e:49:67:29:88:5c:3c:ef:fa:8c:43:ea:
a2:c9:82:1a:71:ef:99:a8:ee:dc:90:9b:a3:00:69:e0:1f:af:
98:51:b2:31:c6:71:94:d0:f9:e5:5c:e8:81:15:b9:49:e3:72:
d2:79:e4:dc:de:8a:dc:5c:55:6e:d8:c8:7f:4b:29:af:0c:fd:
4b:c5:45:e0:21:93:16:6e:76:d2:83:7c:89:67:8f:8e:61:74:
9b:cd:a1:d2:74:5d:69:09:4c:e9:f0:24:f0:1d:f6:54:1b:e1:
be:9a:04:dc:43:4d:55:35:0b:06:98:2a:e0:a4:49:e1:cc:d0:
d8:7b:af:1d:43:8d:f0:05:1e:44:b6:4f:73:28:29:77:e3:c3:
d9:ab:95:4d:f5:08:04:ad:55:43:55:e7:92:ec:85:25:99:3a:
8e:ae:6c:66
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAYVqq/HXlSt5/KyZ+nzWzl0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDAxMjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDhjMjE4Y2QzMzkwZDkxZTgyNDg2OWY3ZmYzMDA2NmExZTk0ZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH2OT4cq6+my8s5Lyar2uak+g97G
N7FD5FtcMqriGZlpuVsGbWut36i3gz0HzhgN4wQAh3HfkUUVGJAWfmb338Uklmsv
ndlKyx+iL6ds2TLwh4AywLTBZKiInovQYwv67KH9gBkqX8brfX9C4UkgptZLs7Hp
6u5ousr7vSumXYVybRy9uYnuQQlsNLFJQndas96bbV4d9znmnrhw2WjkDmg8otSU
zG0/ys5mi+gS4Exwo2jXqbs3conMnJoUCUUF9+ciEmiaJO5ov0C+EcwpWA986N2G
1cdYXiKa9AHsR3ldnfb7bZqL8+Vc7YGxDZXhl/Zq8hmNb2lYivT7HeCcmwIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFNSMIYzTOQ2R6CSGn3/zAGah6U+CMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEABggrBgEFBQcBCwSB8zCB8DA/BggrBgEFBQcwBYYzcnN5
bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMjA2
MGwGCCsGAQUFBzAKhmByc3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBv
L1RlcnJhVHJhbnNpdC8yMDYvRDQ4QzIxOENEMzM5MEQ5MUU4MjQ4NjlGN0ZGMzAw
NjZBMUU5NEY4Mi5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBK
hkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28z
VlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFv2KjANBgkqhkiG9w0B
AQsFAAOCAQEAWYueAzjTxz4tEwGuobjhaSnYz5nqOsRy0rHewGHj3ZRtaBC3gL7n
mMYsSL+JVn//11yorxwx36SPsHGJgRV8Wi8skgFgZeG7jKKLAMdMH1XjFZo0PAFf
gAjgvMRoE9vHXklnKYhcPO/6jEPqosmCGnHvmaju3JCbowBp4B+vmFGyMcZxlND5
5VzogRW5SeNy0nnk3N6K3FxVbtjIf0sprwz9S8VF4CGTFm520oN8iWePjmF0m82h
0nRdaQlM6fAk8B32VBvhvpoE3ENNVTULBpgq4KRJ4czQ2HuvHUON8AUeRLZPcygp
d+PD2auVTfUIBK1VQ1XnkuyFJZk6jq5sZg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:32 2023 by rpki-client on console.sobornost.net