Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i8b1EFyaZXsMwvNuyIOHHoRKAm8.cer
File: i8b1EFyaZXsMwvNuyIOHHoRKAm8.cer (raw, json)
Hash identifier: G/xrgCYT+l/TobP5Pxmlo/3JMAm8q4vKUq93/s/dWAs=
Subject key identifier: 8B:C6:F5:10:5C:9A:65:7B:0C:C2:F3:6E:C8:83:87:1E:84:4A:02:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AE4214568C8E29FA4C54E28EDD1F15B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/188/8BC6F5105C9A657B0CC2F36EC883871E844A026F.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/188
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 01:13:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.9.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:e4:21:45:68:c8:e2:9f:a4:c5:4e:28:ed:d1:f1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:13:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bc6f5105c9a657b0cc2f36ec883871e844a026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:8d:99:5b:26:67:c8:2b:54:4b:69:bc:2c:
16:49:0c:2d:8c:a3:b7:46:ae:44:d8:00:c8:91:60:
b3:39:ad:e8:16:16:51:e4:40:7b:6e:37:90:74:e6:
31:18:c0:d5:d6:5d:69:67:3b:b3:0b:fb:82:7a:2f:
b0:40:46:bd:4e:73:b3:30:ae:ad:0f:72:fa:75:98:
da:90:53:b8:7f:b1:c5:81:e6:f4:2e:c6:44:93:5b:
18:3a:98:db:fb:23:f8:be:ec:d2:07:74:49:5d:17:
d2:37:7d:ea:f4:08:7b:53:f1:b4:e6:6e:9c:78:b0:
9e:4e:79:23:7e:d3:a1:85:76:dc:18:4d:e1:87:e6:
e6:d9:13:35:73:95:e0:96:53:51:40:46:bb:df:c7:
a0:c1:8c:7c:fd:82:e5:09:90:1e:d6:73:09:e5:cd:
4c:70:9f:fc:fb:52:97:5e:e4:21:b6:cc:14:99:07:
6b:c5:72:b5:aa:16:01:ed:b5:d8:86:6d:d4:01:3b:
2e:5b:e1:40:64:39:1a:7e:92:89:70:95:db:b8:f6:
f6:e7:24:19:12:73:da:49:94:5f:9b:7a:78:86:8a:
78:8d:8a:53:e3:af:f0:ba:24:ee:3b:36:fc:3e:4f:
30:1b:e5:d5:f4:77:0b:39:fc:76:42:92:d4:b1:c4:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C6:F5:10:5C:9A:65:7B:0C:C2:F3:6E:C8:83:87:1E:84:4A:02:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/188
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/188/8BC6F5105C9A657B0CC2F36EC883871E844A026F.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.9.0/24
Signature Algorithm: sha256WithRSAEncryption
92:43:b8:c7:06:2c:60:65:db:fb:0a:f2:a3:e6:17:8b:cb:15:
33:fa:b8:fd:75:c1:3f:4b:31:ae:02:af:2e:2a:84:6f:8f:b9:
06:ea:f5:e2:86:7f:18:ad:33:b6:4e:7c:a3:70:88:19:35:53:
eb:ee:a2:c0:26:57:38:f8:a6:fa:92:3e:3b:c9:15:51:02:c9:
5c:f4:8a:7e:1e:9f:70:b1:64:de:0b:e0:3c:04:69:73:18:4e:
89:f9:2a:93:bf:05:6d:42:a5:08:09:d8:20:00:2e:ae:2e:6c:
63:2d:39:b9:ca:31:e0:d4:25:fb:55:3f:d6:b4:f4:9f:9e:ca:
2f:d9:fb:2f:3b:ae:98:08:da:dd:d0:12:eb:39:1a:5c:68:ef:
5b:ab:87:f1:3c:cb:74:ba:65:76:b3:20:3d:b3:8b:45:ee:58:
aa:08:61:6d:f4:e9:5b:01:63:91:0f:41:ca:c9:d4:a4:20:d1:
a2:b5:e1:88:95:21:d1:60:53:f0:1c:d7:2e:1a:51:8c:af:47:
8c:50:94:83:df:90:6c:f5:cf:13:6f:0c:84:a8:1b:d5:75:09:
ea:06:f3:90:49:b4:91:a2:9d:b2:7a:c7:8b:6a:b7:cf:65:6a:
be:98:8f:9a:9a:fa:df:95:da:5c:d0:8e:97:2d:10:bb:7d:ad:
15:b1:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:16 2023 by rpki-client on console.sobornost.net