Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RdCHLxkdOBVIaKjY2G1hV591iKI.cer
File: RdCHLxkdOBVIaKjY2G1hV591iKI.cer (raw, json)
Hash identifier: 8YO9TpcZIUI3Cm5QiiBkmlc/E7lTgpofAGDeHhSB92Y=
Subject key identifier: 45:D0:87:2F:19:1D:38:15:48:68:A8:D8:D8:6D:61:57:9F:75:88:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AC4BAA170D5DFA153A66B2924CA7268
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/192/45D0872F191D38154868A8D8D86D61579F7588A2.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/192
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 00:39:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.3.173.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:c4:ba:a1:70:d5:df:a1:53:a6:6b:29:24:ca:72:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:39:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45d0872f191d38154868a8d8d86d61579f7588a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:0d:56:c6:2e:f5:e4:78:00:7d:da:22:58:
a7:06:18:c1:0a:bf:d3:3d:c4:9b:c3:da:10:47:89:
74:c6:62:d2:aa:3c:74:4c:6c:c8:5f:95:a7:2d:96:
f3:bf:3d:95:9a:d9:69:e9:2a:2a:1f:f1:88:d1:f0:
3b:a6:77:f1:77:f4:1b:fe:98:83:12:65:69:6c:c4:
6a:2f:b3:f9:56:97:06:c5:d4:af:07:d1:dc:76:55:
b4:e9:ff:1f:7a:f3:9c:f1:d2:96:07:7c:95:2b:dc:
96:02:ae:1a:ab:4c:e5:49:cd:11:df:8d:5f:90:48:
e2:e3:a7:58:90:e9:b7:65:be:f0:b4:55:98:49:e3:
e6:b1:89:f5:35:70:f1:5d:8a:b5:3f:92:13:66:85:
c0:a8:28:a4:cc:59:98:6c:ef:2b:56:44:cb:4d:82:
3c:8b:0a:af:93:f0:a6:99:b8:78:18:96:2a:3f:2a:
0f:27:d7:ff:b4:36:bc:e4:85:f3:bb:bc:74:7a:a7:
a3:4d:33:9f:28:e2:b7:00:88:19:f6:bc:80:1f:32:
9f:95:3e:1b:cb:66:5b:3f:c6:fb:be:4f:83:70:4c:
ac:03:0e:ef:87:dd:f3:af:66:99:44:8e:f3:af:8a:
95:af:80:e5:d5:13:c6:6b:77:b0:77:cb:64:c8:e5:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D0:87:2F:19:1D:38:15:48:68:A8:D8:D8:6D:61:57:9F:75:88:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/192
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/192/45D0872F191D38154868A8D8D86D61579F7588A2.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.173.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b0:25:f7:00:f7:87:83:09:7d:cc:6e:c8:be:71:b7:ba:38:
4f:05:b0:f4:76:8f:bc:fd:ed:35:b6:81:62:a5:ae:28:7c:02:
af:ac:56:8c:0c:08:51:99:91:84:83:6f:b5:dd:19:b1:95:cd:
de:1a:9d:05:77:47:89:1f:97:8d:28:25:1a:b0:6b:95:2a:08:
c5:c1:94:fd:af:e0:f5:5f:80:cf:9c:de:0b:32:f6:7e:6d:a9:
34:df:42:42:eb:62:82:14:d8:1d:b3:43:43:de:93:ed:37:d0:
74:47:59:15:c1:70:96:7f:81:25:03:01:f5:92:8e:5d:5b:84:
19:cf:aa:a3:e2:4c:2c:2d:28:69:be:b9:64:13:6a:6a:3a:a0:
c1:e1:47:a1:40:2f:87:25:68:82:85:2f:60:6a:ec:a9:28:96:
d7:a1:73:cf:8f:9d:65:89:46:da:91:77:9f:2f:b5:c0:c3:c9:
1d:e0:63:e9:49:2b:9d:d7:fc:6d:81:bb:14:f0:bd:48:83:61:
80:0d:8b:d7:de:19:49:90:90:73:40:a0:5e:36:bd:d1:3b:a2:
02:3a:7b:6a:be:33:e7:02:ea:d6:0e:a7:2f:0b:68:07:32:4e:
90:c8:55:b1:ae:29:e8:4f:de:82:6a:7e:fd:44:92:03:14:c8:
d7:9c:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:32 2023 by rpki-client on console.sobornost.net