Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OC0Rh6nirU_bdEqSDdxRXRFCeoI.cer
File: OC0Rh6nirU_bdEqSDdxRXRFCeoI.cer (raw, json)
Hash identifier: rw2yyfZGdtiYJVH4xh6E7nfy85sdlUmjLuSccMax4Lg=
Subject key identifier: 38:2D:11:87:A9:E2:AD:4F:DB:74:4A:92:0D:DC:51:5D:11:42:7A:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B2EEE4D4F0B52688191AA263395058C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/208/382D1187A9E2AD4FDB744A920DDC515D11427A82.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/208
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 02:35:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 46.253.141.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:2e:ee:4d:4f:0b:52:68:81:91:aa:26:33:95:05:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=382d1187a9e2ad4fdb744a920ddc515d11427a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:6e:74:88:09:03:77:c7:8d:bc:2f:c4:c2:
eb:c8:d8:ca:8d:98:38:ca:4f:80:f0:3d:d2:44:f8:
95:23:cd:a4:3d:3b:f8:6a:81:3c:03:55:30:20:f4:
a1:7f:8d:3b:8c:fa:2d:4b:99:57:60:8b:de:f2:b0:
93:0f:dc:20:11:30:c6:b0:43:ed:86:00:f2:81:54:
44:8c:58:8e:41:b9:39:df:00:e1:5b:65:13:6f:1a:
ac:f5:0d:cb:5b:a4:a2:e8:74:cc:be:3b:ca:6d:b1:
d7:92:ff:f5:81:43:9e:61:56:2d:b7:e7:b4:dc:ec:
8d:b3:b4:29:16:65:d8:36:f6:ab:2c:e8:f1:33:ce:
da:b2:c5:96:25:78:50:06:f6:6c:62:7d:b4:ee:04:
62:53:b7:b8:fe:7f:3e:ee:dd:d4:b3:52:fa:a0:2f:
df:3d:0b:b3:fb:41:c8:31:fc:2e:e2:d9:2f:20:c7:
6e:61:bb:d1:81:0d:e2:03:74:2d:d1:c5:6b:4f:99:
a3:a3:64:7d:d8:b3:64:72:10:42:81:29:1c:d6:23:
ee:b8:36:22:b2:4f:1c:c8:ff:17:cf:b0:01:8a:1c:
12:71:99:52:06:5d:50:ea:75:28:8d:9d:83:57:23:
2d:5a:ec:69:97:43:0f:36:9b:d6:88:02:1c:b7:6c:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:11:87:A9:E2:AD:4F:DB:74:4A:92:0D:DC:51:5D:11:42:7A:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/208
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/208/382D1187A9E2AD4FDB744A920DDC515D11427A82.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.141.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c8:2a:d5:6e:99:03:89:70:00:9e:cb:f0:be:cf:f2:2c:77:
cf:72:e9:e7:99:48:9c:c4:b3:fb:69:14:72:7b:62:96:30:9c:
3b:f7:83:0f:87:65:94:9a:61:d1:05:0d:c1:8c:4e:a1:d8:dd:
78:5e:33:db:44:69:aa:85:10:03:72:f9:80:a7:fa:77:4f:0c:
30:8c:b3:a1:57:cc:cb:87:8b:52:6b:fd:73:e0:49:ac:4d:40:
97:08:f6:2f:ec:5d:b3:9b:47:e4:1f:e6:97:5c:82:bd:ca:4d:
fb:06:5c:ee:84:b8:8b:43:f6:83:cc:e8:4a:4f:7c:e3:ba:c2:
36:f0:f7:aa:cc:e3:22:dd:ce:1f:84:a2:da:1f:a5:5e:5b:cb:
7e:3a:62:4a:a6:5d:9d:f5:f4:98:4e:0a:18:37:21:fb:10:6b:
8e:db:df:cc:5b:1e:30:87:2a:84:60:f9:f8:d9:34:a5:f5:72:
0a:f5:17:60:2a:95:c0:47:81:78:9b:8d:61:ac:82:86:ff:df:
5f:4e:1c:b4:5c:80:af:dd:55:16:77:3b:ca:d6:be:7e:80:f5:
b5:f7:fd:6e:8b:7b:7b:26:27:63:8c:f4:79:8d:44:db:f5:c0:
b6:de:c7:36:b8:55:ab:47:ab:c2:0b:76:f1:f4:6a:35:7e:bb:
1b:16:35:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net