Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TNkjEXqyVb82ycBOnLIJsQyNw18.cer
File: TNkjEXqyVb82ycBOnLIJsQyNw18.cer (raw, json)
Hash identifier: Bar+1cCGZsV1O5KTmtjeI4E4jckSkoWMBs3N3wwn3Eg=
Subject key identifier: 4C:D9:23:11:7A:B2:55:BF:36:C9:C0:4E:9C:B2:09:B1:0C:8D:C3:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B10563ACE3014B5057C3693B3BEBC11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/189/4CD923117AB255BF36C9C04E9CB209B10C8DC35F.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/189
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 02:01:50 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.16.89.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:10:56:3a:ce:30:14:b5:05:7c:36:93:b3:be:bc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:01:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cd923117ab255bf36c9c04e9cb209b10c8dc35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:c4:62:97:e9:22:6e:e4:1c:7c:fa:12:3c:
47:a7:23:df:11:39:6e:f5:44:9f:7a:9f:0e:92:7d:
37:97:f6:06:86:db:b7:4d:a7:4f:a6:d2:d4:8c:c9:
01:85:d5:84:72:d4:9c:62:68:21:f6:97:b6:86:91:
53:57:57:4a:98:4b:bf:ac:39:4e:2b:64:65:43:7c:
f4:4a:2f:e3:e6:6c:f0:7b:b1:98:9d:ff:c5:1a:82:
4c:97:e5:84:7d:60:bc:7f:b9:f4:cb:fb:6c:0f:4c:
d4:ed:a2:30:0a:44:96:e2:70:64:7d:8f:db:d0:81:
61:56:78:05:d4:0b:91:fa:03:12:5f:06:3e:81:56:
d1:45:90:21:af:b7:44:53:04:2d:c5:7a:37:32:f0:
10:d5:02:73:04:45:85:98:db:27:34:76:76:71:9a:
ec:1f:44:fe:72:ab:9e:2b:e2:b2:fd:79:20:90:eb:
81:7a:22:ba:6a:4e:21:8e:ff:5e:79:51:06:48:4d:
36:c5:ca:08:07:72:1c:78:f3:10:a7:01:75:9e:f4:
bb:5e:6a:0d:45:c2:c5:0f:4e:56:cc:6f:4e:53:06:
09:c2:7a:76:8a:46:8e:f1:8a:1a:ac:d5:85:4c:cd:
76:c3:be:82:c6:11:2d:50:11:c2:a2:bb:59:05:69:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D9:23:11:7A:B2:55:BF:36:C9:C0:4E:9C:B2:09:B1:0C:8D:C3:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/189
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/189/4CD923117AB255BF36C9C04E9CB209B10C8DC35F.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.89.0/24
Signature Algorithm: sha256WithRSAEncryption
68:67:39:97:d2:0e:d5:5a:a7:02:b9:71:52:21:bf:3b:ab:57:
20:3e:ab:03:48:46:99:56:2c:ee:bc:4f:a9:53:e8:d4:b6:60:
95:93:96:29:b9:aa:21:f3:28:41:71:65:11:74:1c:a8:15:f9:
88:5a:5b:8f:e9:e3:33:a3:29:bd:9f:24:5c:01:2e:58:e7:04:
71:53:50:43:7c:5c:95:4c:f3:4a:a9:c0:55:57:1a:52:cd:28:
40:14:fd:c2:da:f3:c9:ac:a0:ec:8c:54:8f:4a:76:68:84:ef:
37:34:56:9e:43:a8:7f:45:e2:99:ff:55:30:3e:af:c3:da:07:
7d:5f:ea:66:a8:f7:31:10:15:38:35:b9:11:0e:3f:cc:63:29:
74:5e:4e:55:5a:1b:b5:22:1f:2b:0d:46:a8:e5:70:b8:ad:05:
48:56:2a:07:58:9e:de:96:d2:ea:1d:0f:32:71:93:ca:ca:0b:
a8:13:57:77:09:ae:2e:09:a8:4f:78:2d:d8:50:d8:ec:cf:9d:
5e:91:ea:59:93:39:d2:13:a2:c0:ad:8d:10:3c:31:f4:ef:61:
e8:aa:c4:45:e1:dc:a1:fc:8a:cc:a9:8f:b3:9d:db:64:3b:e1:
cb:f6:be:36:f3:8e:2f:4a:62:0f:63:fc:b5:c4:a3:54:82:1b:
a1:3b:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:44 2023 by rpki-client on console.sobornost.net