Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O_UtCsqXZ_qqYVHNexYiR2_-S0I.cer
File: O_UtCsqXZ_qqYVHNexYiR2_-S0I.cer (raw, json)
Hash identifier: MaFQvS05n0dFGTRAn1Y6+fGWb456Dm6hUNJr8zsXldY=
Subject key identifier: 3B:F5:2D:0A:CA:97:67:FA:AA:61:51:CD:7B:16:22:47:6F:FE:4B:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AB82042A01BDF68E0746082F7B86CB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/210/3BF52D0ACA9767FAAA6151CD7B1622476FFE4B42.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/210
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 00:25:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.140.246.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:b8:20:42:a0:1b:df:68:e0:74:60:82:f7:b8:6c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:25:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bf52d0aca9767faaa6151cd7b1622476ffe4b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fb:f4:11:a2:18:8c:eb:da:b2:80:35:ea:40:
71:e5:9d:13:7a:7d:50:dc:a0:08:bf:1d:71:00:42:
e1:7e:37:19:66:89:c0:06:dd:94:e2:dc:82:aa:7f:
e9:47:ea:c9:34:78:5d:f2:2c:cf:90:fa:bb:2d:48:
e6:8a:9b:7a:f9:7a:19:59:99:7f:2a:b3:1c:93:9f:
28:dc:5d:47:ce:6b:85:e1:f6:5d:75:25:5a:c2:5b:
62:98:d5:1f:8b:ee:18:d9:b9:49:29:1b:75:f6:12:
64:f6:96:88:4d:3d:e1:05:66:8f:78:eb:09:5f:99:
fd:b4:4d:07:72:27:15:8b:6e:ea:b1:57:93:07:18:
d0:ad:f7:59:52:86:4f:38:28:87:e5:08:34:37:7e:
8d:08:42:76:e4:d7:5a:f6:31:4c:77:a4:7e:37:2a:
a5:5f:e1:6b:4b:06:f9:8c:58:de:79:43:23:1a:10:
c4:d3:8b:b3:7b:b4:35:4a:84:17:38:91:9e:d4:9b:
5d:0c:7f:51:68:4d:0b:b4:95:c3:37:46:90:7f:92:
26:ed:c4:ec:26:d4:fe:05:e8:cd:21:de:c9:2d:90:
bc:87:e8:ef:07:c0:f2:b0:ef:42:a8:ac:5b:15:9d:
f4:7e:0c:89:31:30:0d:4a:19:6f:a4:b4:b0:51:a8:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F5:2D:0A:CA:97:67:FA:AA:61:51:CD:7B:16:22:47:6F:FE:4B:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/210
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/210/3BF52D0ACA9767FAAA6151CD7B1622476FFE4B42.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:15:22:15:ed:85:c8:2a:1f:f8:e3:30:f4:1d:55:13:38:25:
68:53:4f:85:06:e4:f9:19:8c:54:7c:ad:ee:6d:50:7c:da:37:
04:90:6d:dd:55:43:43:99:8f:72:b4:79:e7:da:4f:02:27:87:
df:df:3b:cd:b2:55:0a:44:48:7d:37:cf:79:91:a0:cc:d0:49:
81:00:5f:7a:9f:22:df:c1:b2:81:e1:6a:84:6a:54:0e:ab:52:
4f:a8:62:77:df:fe:75:f9:67:c6:89:fa:28:32:e0:3a:61:6f:
4d:04:22:1a:bf:d0:ec:b6:99:63:3f:47:9a:49:7b:2e:9f:4b:
5f:4b:ae:0e:49:f1:0b:ad:14:ef:3f:cb:19:c1:23:21:82:ef:
fe:12:60:f7:29:a7:92:79:f6:57:68:c5:bd:23:fa:1a:cd:8e:
de:6b:df:83:ea:5b:7d:95:18:3a:2b:9c:cd:52:9e:fd:75:57:
a5:0c:8d:88:35:3e:11:98:27:e8:f7:44:f6:56:94:b2:9c:d3:
4c:fa:a6:30:9c:71:99:ba:c3:16:e2:ff:cc:9c:24:ff:9a:48:
41:77:70:0b:60:f9:14:d2:02:e5:33:f6:93:07:8e:03:dc:ef:
ca:08:1d:33:2b:61:b4:90:de:d7:86:85:d2:78:fc:aa:bc:72:
f3:04:61:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:13 2023 by rpki-client on console.sobornost.net