Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GnGJW_aaJ0IxhYz2cri1KtFnNg8.cer
File: GnGJW_aaJ0IxhYz2cri1KtFnNg8.cer (raw, json)
Hash identifier: O1N9D4EvN0t9XAft+5CxbuVCn+6l7iNAaWx/8ocLflo=
Subject key identifier: 1A:71:89:5B:F6:9A:27:42:31:85:8C:F6:72:B8:B5:2A:D1:67:36:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B0978C23012E9FC44DCF69D9EE63400
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/198/1A71895BF69A274231858CF672B8B52AD167360F.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/198
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 01:54:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.63.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:09:78:c2:30:12:e9:fc:44:dc:f6:9d:9e:e6:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:54:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a71895bf69a274231858cf672b8b52ad167360f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f4:3a:d8:b4:b1:08:0f:f1:4f:1d:22:3d:4c:
29:9d:e2:c4:f6:44:a5:a5:40:d5:ee:ea:69:80:23:
0c:1c:36:d4:70:98:03:0b:b8:db:3d:52:81:c1:75:
c7:07:22:7e:60:1a:c3:00:a7:26:93:74:4c:7c:a7:
cf:c9:34:b9:04:13:e2:f3:d6:3c:79:71:12:10:51:
55:24:56:8f:0d:eb:27:d2:4d:e5:5d:3b:0e:b2:c8:
41:dd:d3:d4:d4:70:2d:4d:01:e1:00:c9:f1:2a:c9:
69:58:3d:72:04:f0:92:78:36:17:c0:6e:3b:9c:be:
f1:59:48:5f:3a:e6:da:31:1c:ef:5f:35:eb:9e:a7:
b9:52:39:fd:96:a9:d1:86:7e:0e:33:a0:1d:42:b5:
ff:52:b5:ac:e1:87:a4:fc:e3:a4:74:f0:39:67:98:
42:ad:b6:dc:a1:44:f5:55:42:59:ca:68:b7:0b:0c:
39:df:9a:0a:1f:91:7e:15:95:ec:02:09:b9:8d:23:
7e:0d:0d:63:8c:6e:4e:4c:71:43:c2:1a:6c:89:de:
aa:5f:98:6b:df:bb:85:84:48:15:90:e0:3d:04:84:
09:35:7b:63:41:91:c5:30:9c:a7:41:11:e4:a0:62:
f0:7a:ab:f9:66:74:5e:4b:0e:c5:bf:8b:4f:46:58:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:71:89:5B:F6:9A:27:42:31:85:8C:F6:72:B8:B5:2A:D1:67:36:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/198
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/198/1A71895BF69A274231858CF672B8B52AD167360F.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.63.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e5:3b:bf:1d:13:49:5a:b4:89:ae:f9:6d:29:f8:69:c8:53:
bb:50:86:fc:c7:a3:47:46:ec:77:c2:33:60:3f:14:46:b4:30:
71:2c:52:2f:c6:5e:c7:40:bf:44:0f:a3:e2:c4:d3:41:3e:07:
91:d3:7f:b6:60:77:2a:9e:f3:b0:11:7c:46:17:38:0f:75:6d:
d1:79:0c:e4:b6:2d:78:bc:8e:bd:12:35:0d:df:fb:39:e3:38:
49:35:70:0f:c9:32:f2:6c:dd:ba:de:69:20:5a:7d:76:b8:06:
84:29:d4:32:3c:a1:83:7a:7f:b2:ec:3d:4d:a8:7c:04:8e:78:
55:01:89:d7:18:a2:40:d0:ed:8b:0c:56:65:e7:4f:54:56:30:
25:3e:f1:09:95:98:08:36:a8:74:0e:78:94:99:9a:93:1b:52:
1f:e3:e0:c6:f8:d9:5d:1b:df:e3:b9:98:bb:05:2f:a9:ed:4d:
0c:a2:f9:1d:67:ee:44:d0:92:eb:a9:a8:94:b1:f0:b9:f7:a0:
36:d2:56:16:e0:f4:b9:09:05:99:ed:34:2c:71:4f:6b:4d:f2:
58:a9:67:6b:96:71:02:d1:69:d4:7b:f4:54:78:17:9f:a3:95:
b3:8c:40:bb:eb:9f:42:9b:b4:99:6a:6d:d6:49:30:f6:ca:a5:
5a:3e:09:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net