
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HfG_bs7yXA7gpSHfkleuPueiTbs.cer
File: HfG_bs7yXA7gpSHfkleuPueiTbs.cer (raw, json)
Hash identifier: 7q5OEPV9v62tFIqji82xzotFnkrIuxgnV/+jf47m3C0=
Subject key identifier: 1D:F1:BF:6E:CE:F2:5C:0E:E0:A5:21:DF:92:57:AE:3E:E7:A2:4D:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 763FF1E758
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/47/1DF1BF6ECEF25C0EE0A521DF9257AE3EE7A24DBB.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/47/
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:23:34 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.67.216.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507878958936 (0x763ff1e758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:23:34 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=1df1bf6ecef25c0ee0a521df9257ae3ee7a24dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:78:3c:b7:d7:c8:7f:00:21:a6:e0:87:a6:
28:c4:d9:c4:ba:1f:c8:ab:2e:fe:a9:2b:70:ac:99:
6e:2a:1f:e0:ee:d5:69:07:c1:e9:66:39:cb:b4:c5:
8c:f6:ce:bf:8f:a5:08:78:eb:2b:45:c2:bb:2e:ad:
0a:aa:d6:0c:f5:4f:68:1b:9a:49:56:0a:f3:0b:e9:
89:e6:ae:02:52:d4:33:c5:db:ea:ec:38:e1:3a:f4:
ce:cd:e1:2b:b3:3e:48:24:1b:88:47:8f:eb:3f:5d:
84:ed:f3:7a:48:fa:24:39:ba:90:9c:02:3a:4f:64:
1f:1a:ca:7e:0b:0d:2c:39:d4:92:c9:aa:8d:6f:74:
0c:92:48:d7:6d:d7:b3:da:3f:ed:21:9e:61:da:f1:
d4:28:2c:ef:4f:3b:fd:b2:b3:cb:04:6e:aa:2c:8e:
d8:85:02:9a:ed:15:53:ef:15:7b:ee:62:04:4f:08:
eb:1e:ef:a9:5b:0d:7d:5c:da:ef:e3:20:8b:a4:fa:
d9:3e:29:a8:eb:7c:7d:32:c3:84:d8:df:4b:56:49:
00:61:a9:d5:f2:25:36:32:a7:76:47:0d:a1:da:93:
a4:9e:c9:82:39:d1:48:43:47:e7:43:77:88:41:4a:
4b:86:90:02:87:8e:d3:da:2b:65:19:fc:05:02:08:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F1:BF:6E:CE:F2:5C:0E:E0:A5:21:DF:92:57:AE:3E:E7:A2:4D:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/47/
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/47/1DF1BF6ECEF25C0EE0A521DF9257AE3EE7A24DBB.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.216.0/22
Signature Algorithm: sha256WithRSAEncryption
68:64:2a:f1:3a:1c:bb:d3:e9:ed:8e:63:57:8b:06:97:33:e0:
9f:ee:f6:65:ba:ec:19:a1:a4:17:12:46:25:f1:f0:a9:ad:c3:
c2:b2:06:48:49:4a:c8:97:1c:57:16:d6:84:e2:ce:5a:b8:77:
3c:21:51:e5:9e:c1:98:13:69:b4:a9:29:98:34:8c:06:c7:65:
7d:18:df:21:7d:00:75:f9:ba:44:39:e3:5e:e8:af:ee:60:19:
67:dd:a3:52:da:c0:42:e5:55:83:26:60:68:97:44:ef:65:ae:
bc:e5:75:f3:73:b4:24:3c:fd:d4:2e:26:82:25:1e:c0:6f:2b:
c7:1f:84:c1:49:fd:18:90:76:ee:f7:e8:00:57:a0:2e:d7:a7:
2c:99:36:60:f7:46:43:45:bf:60:d0:54:bc:34:ac:cb:9d:0c:
29:e1:66:4a:81:09:3a:de:7c:d6:9e:23:9b:7f:34:74:b7:5a:
0a:7a:bd:83:a5:52:7d:fd:88:44:e8:9e:a7:ac:8e:31:43:b6:
c0:d4:b6:90:63:f5:92:f3:b4:fa:2b:d1:e9:3e:79:d0:54:2b:
72:f2:89:aa:24:30:48:e6:43:34:8f:74:37:b2:a5:79:f9:1b:
6d:84:0e:5c:3e:6e:19:4e:80:84:3b:4c:79:41:76:31:28:61:
df:d3:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:27 2023 by rpki-client on console.sobornost.net