
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FuQjMLLIBvLME-ysxxl3LFeTXIE.cer
File: FuQjMLLIBvLME-ysxxl3LFeTXIE.cer (raw, json)
Hash identifier: gw6BO01DekqonJGKuZVVjgMx2Sd+kMasLvUmHaTACqY=
Subject key identifier: 16:E4:23:30:B2:C8:06:F2:CC:13:EC:AC:C7:19:77:2C:57:93:5C:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B1477A0A9AD60F1262AEEFEA338B665
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/213/16E42330B2C806F2CC13ECACC719772C57935C81.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/213
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 02:06:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.106.72.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:14:77:a0:a9:ad:60:f1:26:2a:ee:fe:a3:38:b6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16e42330b2c806f2cc13ecacc719772c57935c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:a8:bb:2d:6c:38:8e:95:64:de:d7:bc:7b:
10:a9:00:e1:f4:99:6f:a8:2c:22:c5:24:fe:fe:13:
8c:42:85:ff:da:57:e9:7e:e0:e2:85:65:6e:65:a6:
c8:33:b7:a9:1e:b8:f3:cf:1b:41:d9:69:88:72:f0:
39:4e:e6:7f:26:76:37:11:52:ab:90:c8:2d:07:8b:
21:ee:00:1f:85:8e:c3:a0:ca:17:fc:0f:6d:78:ff:
76:22:9e:e9:71:93:75:ff:75:97:b5:c1:1c:64:71:
c3:b3:22:41:d1:3b:f0:ad:9b:0b:ea:09:85:63:a1:
64:9c:1c:1a:e8:f1:05:15:fa:90:19:3c:b2:6c:6e:
12:49:b4:ed:fe:88:2e:5a:54:97:42:1b:2a:5d:31:
d2:97:d3:d9:48:c2:69:09:20:b0:ad:e8:cd:8f:04:
a6:9f:c9:b9:89:5f:5b:04:41:53:91:c5:e7:31:45:
02:bf:4e:c2:4c:23:42:ba:0c:f1:9a:3b:66:ba:8d:
37:c0:50:90:35:d3:4f:0d:2b:aa:de:43:56:13:da:
19:b4:84:72:7c:80:69:95:55:da:82:5e:91:1f:e5:
bf:f6:12:9d:7f:d8:4a:3f:27:ff:93:2f:5c:7d:ce:
0b:7d:bb:c3:a1:02:56:6c:2c:45:05:ea:64:c3:1a:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E4:23:30:B2:C8:06:F2:CC:13:EC:AC:C7:19:77:2C:57:93:5C:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/213
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/213/16E42330B2C806F2CC13ECACC719772C57935C81.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.72.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:11:8f:eb:0d:c8:39:f5:01:8a:bd:1d:76:76:e3:80:fc:79:
38:9e:48:e6:ed:f0:d3:67:f1:33:a4:72:01:a4:9e:89:b6:86:
5f:67:45:1d:ee:ee:f9:79:1e:28:62:0e:2f:29:fc:a1:d9:b3:
c5:fa:67:ae:6a:70:1f:a9:48:7f:64:0c:f7:1a:d3:97:af:37:
df:7f:da:55:12:69:8f:9c:1e:47:b2:31:98:18:d8:ac:37:93:
c4:a8:f5:59:16:b8:2b:5b:71:73:a4:69:c9:a0:c6:54:d8:ba:
d3:66:c9:f8:fa:c5:6e:52:df:6a:5a:c3:3d:03:46:4f:31:dd:
70:ad:17:83:b2:d4:c2:26:d3:a4:f6:0e:b3:67:eb:a3:ef:cf:
b2:7a:66:05:30:69:f6:3f:6a:49:bf:46:f9:f9:5e:a1:e5:62:
a0:be:4a:f1:c5:ab:06:df:32:bc:aa:63:90:73:fc:1b:41:d0:
00:10:5a:d6:be:a2:4a:41:bf:d2:44:c2:56:19:0b:c6:cc:ef:
e0:c0:6e:a9:d0:e0:a3:20:06:16:33:3d:08:37:ab:83:1c:3c:
cf:65:da:df:ae:be:be:72:90:75:5b:6f:ee:0d:f3:06:75:e3:
23:6c:00:93:3c:bd:f7:64:e8:41:3d:31:e7:4f:81:26:8a:4f:
70:36:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:16 2023 by rpki-client on console.sobornost.net