Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gCwk3WINYhclkFh0EgY3_SUQQn4.cer
File: gCwk3WINYhclkFh0EgY3_SUQQn4.cer (raw, json)
Hash identifier: IxlEP4oxNtvYXNpP0mbygEvERi76F0TRyMZyLK1ite4=
Subject key identifier: 80:2C:24:DD:62:0D:62:17:25:90:58:74:12:06:37:FD:25:10:42:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AE94CDC4431A5F082D7A5038E029A7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/209/802C24DD620D621725905874120637FD2510427E.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/209
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 01:19:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.234.79.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:e9:4c:dc:44:31:a5:f0:82:d7:a5:03:8e:02:9a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:19:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=802c24dd620d621725905874120637fd2510427e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:e7:8c:80:eb:cf:38:49:e5:04:88:f7:75:
dc:4d:a9:60:4a:0c:56:42:b3:37:cd:eb:16:eb:8e:
07:01:33:c2:f4:94:f9:08:fd:df:1a:a5:2e:25:93:
fe:1a:ab:f3:00:c7:ee:0e:28:fa:43:59:0c:08:98:
6a:44:94:d8:56:f6:49:1c:86:15:ad:a5:9e:23:16:
22:17:72:6f:db:cc:3d:ec:59:d3:50:c4:f0:7b:73:
1e:9b:29:41:34:8b:92:04:76:8f:3a:15:6c:df:45:
4e:1c:fe:1e:c9:d0:3b:97:21:eb:49:b8:99:ce:3d:
e9:4c:8c:3d:04:78:f3:25:eb:f0:f6:f9:71:48:96:
3b:26:17:af:b9:8d:48:6b:13:b1:38:32:85:ab:3d:
f4:22:a6:8a:3b:65:78:4f:87:b0:8e:d9:ee:17:a6:
0e:af:4c:99:5c:bb:0b:e7:4c:a0:b4:cd:21:d7:a8:
7d:f3:3e:34:b4:55:93:4c:81:52:50:53:0a:18:c8:
ea:a2:be:83:6c:d4:87:1d:7f:1b:d8:ec:4e:01:b2:
ad:30:e4:cf:af:f4:92:4d:04:10:f3:94:85:c0:e2:
ed:aa:6c:dd:4f:18:30:a9:69:8c:87:bf:b2:46:6b:
05:0f:cc:97:72:c2:ee:57:14:a5:46:00:fc:38:6f:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2C:24:DD:62:0D:62:17:25:90:58:74:12:06:37:FD:25:10:42:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/209
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/209/802C24DD620D621725905874120637FD2510427E.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f9:41:30:2e:b3:fe:68:c1:69:3a:ea:55:d7:94:71:6d:69:
10:90:f1:71:86:6e:24:70:1e:38:03:c3:2c:fc:e7:50:13:21:
fa:a4:94:0f:05:0e:14:51:6f:00:69:db:92:22:c4:1a:e5:ef:
70:bb:ef:4a:a6:4c:6f:0d:9f:d8:ea:6e:69:f9:00:af:22:87:
54:29:c3:90:33:d5:a7:51:ce:95:e4:b7:1e:aa:79:d6:a3:3d:
ce:c0:bc:d6:0d:5f:00:12:07:2e:5a:d9:3e:42:13:aa:79:eb:
ca:1a:b8:7d:90:a8:2d:b5:69:14:bc:1a:f9:48:db:75:16:11:
20:35:a0:ca:a6:5e:67:90:ea:25:3b:9c:d3:aa:6b:cf:10:41:
e4:af:c6:da:18:07:bd:6b:51:7d:cb:b6:b1:5b:c2:e3:ba:5b:
78:3a:15:88:4e:6e:cf:25:79:e7:2b:36:d2:da:b1:6d:99:7b:
bb:d7:87:8d:00:c5:b3:61:1f:20:1b:de:48:a9:55:1c:d1:d2:
a9:9b:88:6b:bf:2a:93:5b:01:9b:af:9b:47:8a:fb:a2:2a:78:
e6:63:af:7c:f9:a8:c4:19:ee:f4:3e:85:25:a0:1e:47:aa:1d:
c2:db:2c:08:0d:9d:a0:6f:3c:90:44:f2:de:e4:e1:20:16:24:
32:85:3b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net