Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9ma9mcRv8Mad-eF9roG5qEbL4Sg.cer
File: 9ma9mcRv8Mad-eF9roG5qEbL4Sg.cer (raw, json)
Hash identifier: FsMnXjwfUF1njGf/bfuRLcrw7BB0d/qelKcjtbrsea4=
Subject key identifier: F6:66:BD:99:C4:6F:F0:C6:9D:F9:E1:7D:AE:81:B9:A8:46:CB:E1:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF5E1DB5CD52290F6FFB75CCC344BB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/200/F666BD99C46FF0C69DF9E17DAE81B9A846CBE128.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/200
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.25.0/24
IP: 2a12:c600::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:e1:db:5c:d5:22:90:f6:ff:b7:5c:cc:34:4b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f666bd99c46ff0c69df9e17dae81b9a846cbe128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:18:31:48:db:54:c7:ac:48:02:50:85:ae:
15:5a:e9:1d:ec:51:b6:c9:84:43:57:ac:64:b1:30:
06:8f:e2:c1:1f:fd:1d:32:ac:d6:cf:95:2c:d9:1d:
63:7b:d3:98:e7:b4:13:6e:b6:54:30:a2:56:e8:8b:
98:61:39:5b:bb:83:07:c4:b1:c3:56:ca:e7:93:4a:
50:b0:d7:a1:74:47:b4:bb:f7:99:63:6f:b1:73:8c:
d8:61:cf:db:d3:c0:f1:58:b5:4f:e7:cc:72:c2:fe:
f2:a9:a7:19:13:2f:01:d4:33:ad:29:a1:a2:25:c2:
35:d1:79:d2:fc:49:03:72:46:f2:dd:de:b1:51:47:
62:c4:bd:e0:9a:a3:91:6e:d3:69:a4:2f:75:30:3f:
76:a9:23:82:7c:22:43:19:7e:7c:c0:7a:40:d6:30:
fd:f9:27:dd:8d:6b:00:aa:81:57:ef:1a:1f:5e:12:
bc:65:a6:1d:c2:b4:3b:5b:8e:29:8d:93:04:8e:53:
39:e0:08:bb:47:4b:70:a8:4e:ad:3e:98:94:ee:6d:
41:c2:c9:7e:7e:13:95:d9:d2:67:16:70:21:eb:42:
5d:3f:2b:05:52:94:7b:b0:11:48:a0:e2:ed:a9:a3:
25:43:c7:53:53:83:50:d5:74:e4:44:69:3e:3d:55:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:66:BD:99:C4:6F:F0:C6:9D:F9:E1:7D:AE:81:B9:A8:46:CB:E1:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/200
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/200/F666BD99C46FF0C69DF9E17DAE81B9A846CBE128.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.25.0/24
IPv6:
2a12:c600::/29
Signature Algorithm: sha256WithRSAEncryption
44:d7:2e:db:94:3f:df:a4:fe:3d:94:71:21:07:83:38:50:e4:
4c:ba:79:f3:1f:8d:7b:7a:ff:61:47:0e:b2:46:8e:61:26:8c:
4e:2e:b1:d1:02:50:5c:82:13:16:e6:ea:88:26:04:f1:36:0e:
df:70:67:70:77:a2:79:10:44:9b:e0:be:f4:8f:3a:b9:f3:26:
73:59:47:41:ac:ea:7b:26:52:82:b2:d1:57:cf:60:12:27:39:
82:97:cb:3f:4a:58:ae:69:77:b2:c7:96:1f:72:ec:28:31:4c:
3d:c5:55:43:4f:ab:ca:36:55:e6:3d:2f:cc:6d:41:03:00:b2:
69:43:50:10:bc:8f:0b:d2:d5:9b:b9:4c:bb:72:f9:a1:a8:bb:
6d:55:65:c6:25:ed:be:ef:a8:49:87:bf:eb:47:51:07:e2:69:
ba:6c:9d:dd:ef:3a:f8:ab:eb:c2:95:e8:25:2d:d4:50:d2:49:
5d:54:24:8b:a2:8f:5a:7a:eb:62:8f:08:6e:44:b8:90:da:45:
54:0d:b5:22:8f:4d:3a:cb:05:e0:e8:ae:78:c4:92:c8:71:9e:
11:cf:fe:34:1b:81:08:54:69:1d:15:23:be:20:c5:7d:2a:4b:
3f:c8:22:2e:51:1e:85:b6:37:02:64:0d:cb:28:64:ca:0e:84:
85:5a:36:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net