Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AaLx4xGXhVAMM8Adlm1v_GP1a-U.cer
File: AaLx4xGXhVAMM8Adlm1v_GP1a-U.cer (raw, json)
Hash identifier: cLyrTPpk//i291/mFD/NTed8yF8yQZVz0tVUiNC44qM=
Subject key identifier: 01:A2:F1:E3:11:97:85:50:0C:33:C0:1D:96:6D:6F:FC:63:F5:6B:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 75C1E97223
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/45/01A2F1E3119785500C33C01D966D6FFC63F56BE5.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/45/
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:12:24 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 147.78.48.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505764475427 (0x75c1e97223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:12:24 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=01a2f1e3119785500c33c01d966d6ffc63f56be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:2b:68:07:86:98:44:da:21:df:18:23:90:
31:22:8d:98:7c:ed:ec:d8:72:fe:63:77:16:23:95:
0e:46:72:e6:db:2d:af:06:69:f3:c4:89:a6:8b:16:
75:c8:cc:1e:18:5e:cd:89:b4:2c:6d:c9:47:d5:8c:
fa:1e:91:ba:24:cc:3d:95:96:e1:1e:ac:ef:16:1b:
57:79:98:a5:b5:03:8c:43:ff:75:da:22:8f:53:37:
e0:db:44:9f:15:73:8d:49:f6:fa:84:8e:93:61:6d:
5a:fb:97:13:72:5f:75:28:2a:f0:79:b3:4f:af:d6:
8a:04:7c:58:5c:96:98:74:7d:0f:fc:d5:b9:43:44:
22:88:b9:b7:11:db:e1:d3:3b:80:b2:1f:f5:90:4b:
10:1d:8f:78:6d:27:1e:cb:40:3a:bb:0b:2c:c2:8f:
f7:52:dc:41:80:0d:8e:2f:b9:2d:b6:98:b6:38:71:
5f:43:5c:da:d4:4b:ae:c1:71:aa:44:de:6c:4a:d6:
be:6c:8a:dc:5c:f8:c9:46:0b:34:c2:3b:09:57:b9:
b2:0b:a0:b8:02:07:9e:0b:4c:41:9d:ad:9f:7a:2a:
95:c4:00:7d:cd:bf:2e:57:cb:26:32:a8:e8:41:7f:
54:f4:d7:c2:1b:81:67:17:26:ad:fc:a2:37:12:73:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A2:F1:E3:11:97:85:50:0C:33:C0:1D:96:6D:6F:FC:63:F5:6B:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/45/
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/45/01A2F1E3119785500C33C01D966D6FFC63F56BE5.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:1c:1f:c3:70:2f:8e:f2:28:5f:d5:59:70:da:dc:a3:82:f0:
2b:d3:cd:e0:91:2d:c1:60:7a:81:08:f7:f2:96:80:ff:17:60:
48:58:23:dc:8d:63:57:c8:f7:68:32:d2:e8:0f:9e:e3:6a:e7:
ee:4b:b6:5b:e1:5c:e1:c3:d5:e1:70:2b:77:ed:25:d1:c0:97:
72:19:e0:4e:c3:ed:d8:77:7a:2c:55:0d:7d:9c:6c:50:b8:42:
28:9b:86:97:a5:3e:66:e9:c2:8c:03:71:5f:b2:fc:a8:61:69:
0b:f2:65:47:ce:62:b7:5b:77:85:2a:5c:d0:a5:d3:58:24:56:
de:7d:c8:ef:f5:6d:b1:e1:98:71:cb:16:9b:66:57:67:bd:bf:
7d:5e:6a:d2:29:4e:81:6b:d8:15:a6:6c:95:68:40:e0:14:e7:
bd:a1:e4:49:71:58:73:57:f5:cb:c4:b7:6d:1c:89:38:31:60:
d5:07:94:a4:31:b7:75:b3:29:17:99:59:dc:59:7f:6f:32:61:
c0:cb:5b:b4:33:d6:a8:0d:8b:ad:78:e9:96:a8:b7:3c:58:5f:
8e:d1:44:03:f5:72:2a:5c:40:ee:7e:1c:89:96:58:5b:53:9e:
99:29:cd:6c:98:f5:3a:f1:a7:69:88:13:15:e9:4f:00:ab:48:
88:92:64:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:12 2023 by rpki-client on console.sobornost.net