Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ANvEMEf408wv27RhSnTa8uTokcM.cer
File: ANvEMEf408wv27RhSnTa8uTokcM.cer (raw, json)
Hash identifier: 2BZNlwgBgWHxNjkTYVYPHlYnfgNkNjCK/K1x6bBDgZ8=
Subject key identifier: 00:DB:C4:30:47:F8:D3:CC:2F:DB:B4:61:4A:74:DA:F2:E4:E8:91:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B32B2381E915B29831411FB83C2CB90
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/184/00DBC43047F8D3CC2FDBB4614A74DAF2E4E891C3.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/184
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 02:39:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.107.150.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:32:b2:38:1e:91:5b:29:83:14:11:fb:83:c2:cb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:39:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00dbc43047f8d3cc2fdbb4614a74daf2e4e891c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:36:1a:2d:50:5f:2f:e0:2f:3f:78:5b:27:
fe:e4:88:c4:7a:e1:4a:fd:c4:14:6c:e1:5b:77:d2:
53:58:30:3c:2f:17:3d:6d:44:26:1c:f4:c3:bd:e3:
e3:d8:ef:19:7f:2f:16:0d:e2:a9:d4:83:70:01:cd:
61:1f:10:83:1f:d7:ce:1f:62:38:11:cd:ac:5f:94:
ca:78:e2:63:24:94:32:3c:d9:2d:e5:43:70:6c:64:
7f:eb:e2:a6:25:01:4c:d7:d1:03:ee:9f:87:b1:c7:
09:a1:d0:e5:bb:2d:48:0b:1e:6f:51:ea:c1:c6:f4:
95:de:05:af:d3:d2:25:56:6a:67:1f:da:ec:31:df:
a2:b9:91:31:2f:62:f6:c8:06:ec:91:0f:ed:63:10:
66:19:64:86:d0:c9:dc:99:2c:17:1a:d6:64:09:f2:
4a:36:46:9f:ff:3d:5e:4c:83:d4:b9:f2:c8:80:8c:
2c:cc:72:c8:c9:e0:86:a1:8d:d8:1b:ad:b1:d7:55:
05:f8:85:ee:e8:b4:79:d5:13:34:2f:a5:d1:9f:f5:
21:2d:6f:83:e8:67:26:88:f3:13:88:20:35:a9:39:
eb:b9:eb:15:37:78:02:1b:25:55:7e:4e:dc:b4:eb:
a2:7c:ca:14:64:b2:82:84:e7:01:92:7e:02:9a:bb:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DB:C4:30:47:F8:D3:CC:2F:DB:B4:61:4A:74:DA:F2:E4:E8:91:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/184
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/184/00DBC43047F8D3CC2FDBB4614A74DAF2E4E891C3.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.150.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a5:89:7c:f8:14:9a:79:e5:68:38:a7:4d:c7:ca:3d:73:b8:
2f:d9:70:df:b1:e5:53:6f:07:22:b2:58:33:0d:e4:a0:aa:8f:
54:5a:80:f3:4c:f7:40:4f:33:f3:92:0a:54:53:7c:26:50:cf:
56:10:86:e5:45:5e:9f:f1:01:ff:8e:8b:4a:6c:b4:8e:a2:bf:
ca:3d:87:7a:e2:37:33:df:58:50:2e:a8:c1:aa:a4:09:30:47:
dd:3b:4e:19:5b:dc:45:b2:f4:f8:35:63:d7:da:70:7f:45:a9:
c8:36:cb:d7:6f:48:dc:93:7b:c0:35:3e:f0:57:8b:af:c1:8e:
23:17:56:3f:12:6b:3d:5c:00:4c:c4:cd:2c:29:08:cd:d8:53:
d7:10:6a:af:ab:a5:79:50:e3:93:10:c0:21:2e:f1:4c:22:31:
e9:40:7a:fe:42:ce:06:a0:f2:ac:0d:4e:8d:e6:06:b6:d8:a3:
79:94:0e:7f:4d:01:c9:28:98:c1:af:51:11:34:3f:b3:93:58:
8f:56:2c:e7:7f:ca:c6:1b:2d:e8:df:ee:03:64:9e:dd:81:b1:
1d:27:b5:cd:c8:01:29:4b:06:60:ec:28:5d:e7:f5:e7:0a:c9:
bd:d3:a5:33:de:3a:cb:a8:d0:88:f8:f8:40:d8:c3:d7:d9:2a:
5d:02:7b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:11 2023 by rpki-client on console.sobornost.net