Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TFhLyioQPfTbZ7KDXeIhrr4a0m4.cer
File: TFhLyioQPfTbZ7KDXeIhrr4a0m4.cer (raw, json)
Hash identifier: 8EBc9eW+GwafNZ7ynvjwwnjvrfIR2aqwH6I5z1sj/I4=
Subject key identifier: 4C:58:4B:CA:2A:10:3D:F4:DB:67:B2:83:5D:E2:21:AE:BE:1A:D2:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AAEDFDE7CE19B87736CC4E523E7A9B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/201/4C584BCA2A103DF4DB67B2835DE221AEBE1AD26E.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/201
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 00:15:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.46.221.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:ae:df:de:7c:e1:9b:87:73:6c:c4:e5:23:e7:a9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:15:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c584bca2a103df4db67b2835de221aebe1ad26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:72:d5:59:61:cc:06:e0:bf:46:11:2e:2f:
56:af:ac:76:d4:8a:1a:7a:a1:17:ce:a2:62:ba:ad:
b6:62:f5:15:bd:f3:6b:ba:99:21:ac:96:89:5b:66:
8f:e9:00:6f:91:63:31:82:27:1d:25:a0:f1:21:78:
87:9d:91:3f:00:41:79:f9:92:f8:4d:18:4d:ef:91:
69:24:8b:6a:58:c9:94:eb:00:18:4e:ec:21:ad:2d:
40:ca:bb:fa:31:67:c0:0c:54:17:9e:d1:1e:b1:62:
e8:ce:33:95:f8:10:20:b0:59:ed:53:ce:d3:b9:e0:
ec:1b:e9:9c:d7:83:e3:06:1d:9f:6b:db:6c:18:b4:
a3:79:f5:81:28:11:65:02:e1:0c:2b:43:57:59:b4:
d6:41:45:a1:bf:1f:bb:a4:31:2d:a7:38:be:dc:21:
54:3f:4e:01:c7:5a:74:fa:83:5a:29:5c:d3:cb:6b:
49:f2:b4:6a:58:23:29:fb:1d:ec:5c:61:fb:f4:07:
80:4b:82:62:6c:e2:05:f6:59:7e:a9:da:63:c3:27:
35:b2:18:b5:ea:50:19:8f:98:d2:75:f8:29:72:1f:
26:13:4a:7b:4b:9c:91:71:b2:ca:de:35:b6:c6:58:
98:ec:04:69:15:6f:6c:cb:06:c7:ac:76:83:b2:d9:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:4B:CA:2A:10:3D:F4:DB:67:B2:83:5D:E2:21:AE:BE:1A:D2:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/201
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/201/4C584BCA2A103DF4DB67B2835DE221AEBE1AD26E.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.221.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d4:53:53:e2:35:4d:04:0b:5d:f3:a8:13:0d:9b:33:7b:8f:
ca:07:4e:02:45:01:2b:4e:e7:c8:7d:f3:ce:a1:0b:c7:ef:e8:
bf:9a:3e:07:b2:fc:26:2f:be:c5:6d:7d:a9:c9:89:d5:2b:7f:
cd:1d:91:0a:0b:64:b4:4c:fe:62:a1:34:24:5d:c6:6b:29:9c:
6f:e3:44:16:d0:4a:5f:fe:cd:44:d5:c6:b9:36:60:02:df:8a:
d3:fc:0e:53:4e:0f:95:68:07:fa:57:ee:3d:b5:3a:1c:fc:9d:
91:2c:05:30:0d:7e:82:ff:c8:86:8d:59:0a:1e:01:77:63:5b:
83:28:75:6a:f3:3a:16:65:3b:ee:b0:6b:6f:31:45:73:8b:89:
53:d5:f0:34:0f:7f:e3:a9:df:b7:e8:eb:c2:e3:30:9b:0b:e6:
f4:dd:d2:37:08:b7:5c:fb:ea:c0:bd:77:0b:a6:78:d1:44:df:
65:22:7d:6d:62:f4:bf:76:97:9e:4b:48:85:59:6f:97:fb:ad:
d1:95:d9:de:cd:9d:85:be:ec:b5:e9:59:36:75:5f:e9:fa:42:
ff:32:3f:dc:af:52:b0:c2:39:44:32:d8:61:f2:b6:5c:e3:ee:
d6:03:b1:20:66:33:5f:78:d4:a4:a5:4a:33:f7:1d:82:9e:ec:
86:bf:63:64
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAYVqrt/efOGbh3NsxOUj56m5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDAxNTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzU4NGJjYTJhMTAzZGY0ZGI2N2IyODM1ZGUyMjFhZWJlMWFkMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n1y1VlhzAbgv0YRLi9Wr6x21Ioa
eqEXzqJiuq22YvUVvfNrupkhrJaJW2aP6QBvkWMxgicdJaDxIXiHnZE/AEF5+ZL4
TRhN75FpJItqWMmU6wAYTuwhrS1Ayrv6MWfADFQXntEesWLozjOV+BAgsFntU87T
ueDsG+mc14PjBh2fa9tsGLSjefWBKBFlAuEMK0NXWbTWQUWhvx+7pDEtpzi+3CFU
P04Bx1p0+oNaKVzTy2tJ8rRqWCMp+x3sXGH79AeAS4JibOIF9ll+qdpjwyc1shi1
6lAZj5jSdfgpch8mE0p7S5yRcbLK3jW2xliY7ARpFW9sywbHrHaDstklxQIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFExYS8oqED3022eyg13iIa6+GtJuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEABggrBgEFBQcBCwSB8zCB8DA/BggrBgEFBQcwBYYzcnN5
bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMjAx
MGwGCCsGAQUFBzAKhmByc3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBv
L1RlcnJhVHJhbnNpdC8yMDEvNEM1ODRCQ0EyQTEwM0RGNERCNjdCMjgzNURFMjIx
QUVCRTFBRDI2RS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBK
hkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28z
VlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEu3TANBgkqhkiG9w0B
AQsFAAOCAQEAF9RTU+I1TQQLXfOoEw2bM3uPygdOAkUBK07nyH3zzqELx+/ov5o+
B7L8Ji++xW19qcmJ1St/zR2RCgtktEz+YqE0JF3Gaymcb+NEFtBKX/7NRNXGuTZg
At+K0/wOU04PlWgH+lfuPbU6HPydkSwFMA1+gv/Iho1ZCh4Bd2Nbgyh1avM6FmU7
7rBrbzFFc4uJU9XwNA9/46nft+jrwuMwmwvm9N3SNwi3XPvqwL13C6Z40UTfZSJ9
bWL0v3aXnktIhVlvl/ut0ZXZ3s2dhb7stelZNnVf6fpC/zI/3K9SsMI5RDLYYfK2
XOPu1gOxIGYzX3jUpKVKM/cdgp7shr9jZA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:43 2023 by rpki-client on console.sobornost.net