Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/afPSk5ysh4Sqgx4PPYG10NSYDHg.cer
File: afPSk5ysh4Sqgx4PPYG10NSYDHg.cer (raw, json)
Hash identifier: a5r6aLBwUcY0WU5jo9M0gIgDnssQkjZJxV3NB87l3ls=
Subject key identifier: 69:F3:D2:93:9C:AC:87:84:AA:83:1E:0F:3D:81:B5:D0:D4:98:0C:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ADCC2403870A03FA4A8DF3274C57210
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/217/69F3D2939CAC8784AA831E0F3D81B5D0D4980C78.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/217
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 01:05:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.45.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:dc:c2:40:38:70:a0:3f:a4:a8:df:32:74:c5:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:05:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69f3d2939cac8784aa831e0f3d81b5d0d4980c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:07:c3:e9:01:ba:98:b5:8b:bc:ae:c0:e6:69:
8b:55:49:2c:5b:42:91:69:cd:33:f1:cf:05:39:78:
d1:06:44:01:15:5a:b7:5d:92:f6:d7:db:c3:f6:27:
c2:35:c9:de:39:f9:1e:21:42:ac:bf:56:a0:63:ae:
05:7c:5b:8a:0d:18:98:9e:ba:0c:3c:0e:8d:b7:f4:
8e:fc:95:16:2b:c9:8e:35:03:cb:66:ac:ac:0b:f0:
ec:82:91:d7:7a:3b:cc:47:4b:d2:d1:8a:20:40:bb:
5f:36:4c:c0:37:35:29:9a:bb:cd:59:29:8c:b8:06:
22:de:bb:b2:b7:d0:66:42:44:36:0b:b4:08:4e:72:
14:d2:48:26:b9:26:a6:bc:31:7b:f5:2a:43:cc:48:
b9:fd:d3:9c:a0:f6:7a:29:8d:82:43:57:d2:10:0d:
89:b0:fe:2c:64:c9:f1:2e:55:8c:d3:53:0d:b7:e1:
4c:8d:9f:39:79:42:00:de:7f:08:89:48:77:db:f0:
4e:ee:87:48:db:53:f7:28:d2:cf:66:fd:21:26:a1:
ca:4c:85:c7:7e:7c:f2:fd:0d:79:9b:31:82:cf:03:
ed:36:41:6a:3d:75:80:39:ea:bc:0e:b6:95:07:f7:
0a:b2:e1:cf:15:37:60:a4:5e:43:0a:3a:33:10:39:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F3:D2:93:9C:AC:87:84:AA:83:1E:0F:3D:81:B5:D0:D4:98:0C:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/217
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/217/69F3D2939CAC8784AA831E0F3D81B5D0D4980C78.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.45.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4a:c9:6e:e1:73:42:14:0d:29:55:23:e6:38:14:f9:fc:62:
bc:9d:e9:80:2e:cd:d4:45:66:ab:ea:8c:46:41:ca:4f:cd:f1:
8f:cd:22:47:da:3d:30:91:d9:66:85:04:82:fa:74:e9:87:f7:
8e:aa:02:0f:09:9d:a8:f8:24:ce:1a:a6:f1:a3:fa:bb:a4:ba:
f6:99:b8:71:0a:31:13:9d:2e:52:75:16:3c:93:88:bf:b9:45:
c1:7f:bc:a2:b1:77:5f:d7:85:5a:f8:e6:57:51:d8:89:e1:31:
4f:aa:0d:47:3b:3d:54:1f:93:4b:3c:d8:a1:ad:d2:2c:6e:9f:
49:66:f1:9b:b8:c7:9a:59:e1:fb:a0:8d:b3:91:af:2f:e1:8c:
86:f9:22:90:85:f8:3b:fe:34:59:47:87:0d:be:13:a1:46:e9:
8c:50:ca:f3:86:43:7e:f8:86:83:4f:a4:99:42:3f:92:81:e8:
50:55:42:ed:24:ba:e4:f8:d9:f6:ec:2a:cd:07:15:c3:3e:91:
43:25:fc:ba:18:64:3b:bf:47:53:ab:f5:5c:be:be:79:92:e3:
68:33:92:c8:0f:7a:d5:41:3e:fd:59:0d:59:4e:58:24:fe:f7:
cc:e7:d5:04:9d:ba:00:6e:1c:a6:15:97:92:01:c6:79:87:81:
6c:60:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:58 2023 by rpki-client on console.sobornost.net