Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mjkjn9i3dSzTXkMifZg6dDP1WkY.cer
File: mjkjn9i3dSzTXkMifZg6dDP1WkY.cer (raw, json)
Hash identifier: ZazbatJfYvm4BP6b78GH1N5mRnbMuFxhaITlq69YvOo=
Subject key identifier: 9A:39:23:9F:D8:B7:75:2C:D3:5E:43:22:7D:98:3A:74:33:F5:5A:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AD2E13D9CED9C5F589D6057C477F945
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/191/9A39239FD8B7752CD35E43227D983A7433F55A46.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/191
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 00:54:43 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.96.142.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:d2:e1:3d:9c:ed:9c:5f:58:9d:60:57:c4:77:f9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a39239fd8b7752cd35e43227d983a7433f55a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:23:4f:f4:4f:bd:47:77:65:6d:ed:35:88:
f8:60:b7:f4:86:07:9f:99:bd:24:73:f6:31:34:27:
39:26:d3:df:28:be:97:74:8e:a7:28:57:f4:f8:74:
95:a8:7a:d4:f3:e7:fe:2a:dd:91:94:47:b1:10:63:
b1:77:dc:be:0d:5b:3b:c6:21:6a:85:25:0f:f5:73:
ed:a0:fa:12:a8:27:96:41:69:b5:05:1f:dc:fe:12:
ef:05:67:35:df:56:ac:88:d5:e5:07:16:d9:57:3a:
3a:6d:80:65:24:32:41:1b:9c:75:0c:07:93:0c:d0:
2f:df:91:ab:bc:2f:23:28:6e:70:d0:6c:36:2c:5d:
ad:fb:bb:bc:e8:eb:26:78:39:60:3f:f2:a0:cf:dd:
02:11:65:f5:51:ea:5d:50:dd:ca:0c:7e:65:12:b2:
ec:be:b9:5f:63:d3:0b:e6:49:7d:99:9d:42:14:20:
8c:e3:0c:ed:15:ab:4d:64:90:56:f1:0b:e7:f3:85:
f4:e6:75:58:ae:08:65:0b:5f:52:8e:08:81:10:1c:
3b:84:d7:f1:f8:09:14:33:e3:6d:82:39:04:27:a9:
f6:c6:87:a4:0d:2d:4e:4f:ee:13:32:15:61:40:51:
d6:05:e6:5a:8a:6b:6f:a9:de:7f:57:61:ee:3a:7d:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:39:23:9F:D8:B7:75:2C:D3:5E:43:22:7D:98:3A:74:33:F5:5A:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/191
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/191/9A39239FD8B7752CD35E43227D983A7433F55A46.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:26:bd:88:92:3b:6e:27:24:f3:ff:20:ab:18:ae:88:5a:54:
95:36:22:bf:ae:e4:f1:2f:a1:ca:a4:f0:57:e5:35:f3:97:eb:
49:26:25:63:b4:35:37:80:47:2b:d2:4b:37:00:ae:a8:c5:52:
25:83:99:53:e9:1a:27:c4:a3:7f:df:66:f3:dc:6d:17:7c:2b:
80:a0:7a:4f:55:ba:05:ee:bc:76:60:5a:b7:62:f1:79:3d:54:
4d:e9:f8:4f:48:eb:7d:ea:0b:7b:d1:5d:6e:24:10:b7:72:3c:
84:88:14:82:d7:0b:85:7a:e0:dd:82:13:03:33:ee:92:06:f0:
6d:f7:a9:9b:fa:0a:55:c9:81:24:7d:c0:5f:9c:dd:6d:02:e9:
2d:34:73:88:22:d0:00:0c:bc:6a:97:a2:93:bf:93:27:24:20:
69:ba:90:f9:9f:f4:31:12:d5:da:0b:10:0a:fb:b4:19:a1:cb:
af:7a:d3:ac:b0:4f:91:bc:87:0e:4d:86:e3:0a:b7:b2:f2:52:
29:e5:5a:ee:1a:02:4b:29:5c:67:b1:24:ce:d6:75:b1:e5:c8:
e8:5a:90:e8:c0:14:8f:ee:e5:75:ab:f3:8a:b8:e0:fa:b1:97:
f8:19:85:cc:08:c6:ef:93:ea:cf:ea:5d:1e:72:da:10:b9:29:
b8:9f:6e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net