Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KuKQcWFNoNVy_wWt4XB3J3zMIRA.cer
File: KuKQcWFNoNVy_wWt4XB3J3zMIRA.cer (raw, json)
Hash identifier: 4zxBWRCDjNs6a2O7gVXDrEwBP8XwVHy1pgCf6nn4jT8=
Subject key identifier: 2A:E2:90:71:61:4D:A0:D5:72:FF:05:AD:E1:70:77:27:7C:CC:21:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF58240AB96BE75FAD56684E7209A3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/193/2AE29071614DA0D572FF05ADE17077277CCC2110.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/193
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:32 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.247.187.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:82:40:ab:96:be:75:fa:d5:66:84:e7:20:9a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ae29071614da0d572ff05ade17077277ccc2110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3b:51:26:0d:20:72:c2:bf:24:3e:e2:c4:18:
bb:a6:5c:3a:f1:3f:7e:b6:7e:94:36:8b:9f:00:93:
93:16:18:22:46:24:93:39:51:92:5f:78:38:f5:66:
17:1c:ed:c5:9e:07:f5:02:8f:f1:29:6b:b4:38:cb:
1c:1d:aa:c1:27:3d:19:6d:13:1c:7f:24:b7:d0:9a:
57:1f:d5:90:38:15:e3:73:92:0d:ac:f6:1e:ba:12:
3d:2c:1a:03:d5:10:df:c0:18:63:d6:92:b2:5b:25:
ce:88:64:91:b3:fd:3d:b2:ce:3e:87:e6:c4:1b:9b:
87:e3:a5:b0:22:4e:57:89:73:05:1c:af:60:78:6c:
93:46:12:57:78:ba:6e:12:c8:85:40:40:77:90:f4:
6c:aa:d7:87:e1:dd:a9:8f:dc:3b:ea:2a:8a:5e:47:
9e:82:0d:2e:ee:2b:bb:ec:e6:fd:cd:35:37:36:0a:
b1:d9:d3:2d:68:6c:f9:de:6e:88:e2:c1:e6:32:7a:
95:44:37:ce:66:87:7c:8b:82:6f:dc:af:13:37:5a:
f0:f1:65:46:f4:e3:80:71:11:c2:0a:3a:c0:2a:98:
21:80:5b:68:fa:2c:28:9e:55:a0:30:81:70:36:5b:
3d:60:ab:fe:37:a7:c2:4e:76:cd:35:b7:f7:8a:c9:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E2:90:71:61:4D:A0:D5:72:FF:05:AD:E1:70:77:27:7C:CC:21:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/193
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/193/2AE29071614DA0D572FF05ADE17077277CCC2110.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:50:b4:85:85:5f:fb:34:23:35:40:6c:12:7c:2b:d6:ec:7a:
02:cf:f2:54:61:b9:c1:51:c8:76:bc:1b:d4:0d:98:61:98:fc:
5c:e3:97:69:8b:bb:1a:c2:05:4b:3e:b3:46:2c:15:51:69:24:
db:9f:30:89:9a:cf:78:a2:81:cb:78:06:aa:53:f3:98:49:dd:
4e:67:9c:b8:5b:46:2e:1b:21:73:73:05:0d:d9:8b:86:cf:b3:
82:8c:2f:9c:f2:6d:ab:a2:bc:1d:b7:61:81:50:db:8f:dc:6b:
57:00:05:e9:a7:d9:9d:0a:3a:3e:7d:7d:04:33:67:0f:1a:95:
d7:75:a7:d7:b2:54:b4:f3:e8:5f:28:9f:fd:0a:e5:b6:fb:e8:
5f:00:96:1e:ed:e5:22:aa:b9:f8:bb:98:7d:ed:49:86:78:8d:
50:eb:75:e8:60:fb:74:f6:fb:57:dd:5b:eb:ce:e9:75:b6:79:
96:78:1b:db:e4:78:3c:a0:2c:08:c8:a1:e1:b5:34:b4:ab:26:
c7:a3:af:fa:f1:93:6f:09:e8:6f:cb:bf:d2:26:8e:2b:53:aa:
d0:ec:13:05:f5:e6:bf:d5:3a:c5:3c:a4:d5:0b:31:4e:9a:c0:
dc:28:02:da:90:e5:41:0c:36:da:2e:02:0a:06:16:c7:46:e6:
86:f7:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net