Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vy86MG2nihXkhSKISBCr7rXvZrA.cer
File: vy86MG2nihXkhSKISBCr7rXvZrA.cer (raw, json)
Hash identifier: Dd+W4UlrYGKO/mBJPgmFMN/oK4twJWGwhqeO5M65DIg=
Subject key identifier: BF:2F:3A:30:6D:A7:8A:15:E4:85:22:88:48:10:AB:EE:B5:EF:66:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B2FC1462C24AF40C69E5437B33E114E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/195/BF2F3A306DA78A15E48522884810ABEEB5EF66B0.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/195
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 02:36:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.46.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:2f:c1:46:2c:24:af:40:c6:9e:54:37:b3:3e:11:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf2f3a306da78a15e48522884810abeeb5ef66b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:53:65:c9:78:bd:ff:31:55:38:f0:8d:7e:
dd:cf:78:86:ed:50:8b:22:46:48:df:a5:66:7a:ca:
77:77:47:21:15:9d:be:03:33:9f:78:cd:01:7c:61:
e2:3b:e9:6a:a6:61:50:a0:8b:3e:f8:cd:d5:94:b7:
52:75:4e:d0:c7:20:0c:5c:dc:f0:2a:0d:2a:38:93:
e7:22:83:9a:df:bc:36:ef:51:52:12:fb:4c:10:38:
54:b1:e0:bd:90:1b:9a:81:8e:a1:9d:13:e1:9a:82:
64:c1:64:28:dc:1b:e5:8e:58:99:2f:64:fb:e3:5a:
24:26:6f:81:f2:c6:09:71:2c:50:5d:b2:db:fd:4b:
7a:58:31:29:4d:74:e2:c9:fa:e0:09:d7:10:c0:13:
93:1d:6b:fe:0f:57:a7:de:74:6d:0c:78:04:60:3d:
0f:12:01:5b:15:2a:96:be:88:b1:51:46:76:9d:66:
45:51:9d:69:62:fc:61:f2:5e:5c:a0:78:a2:d9:e9:
8f:31:a9:1c:e9:af:71:ef:1e:bb:53:db:20:6c:e6:
6f:80:10:a9:87:5a:82:a9:63:0a:50:6f:07:bf:bd:
64:1a:e6:aa:d5:8a:94:c1:80:51:6e:de:64:38:d2:
02:3a:c1:ed:9d:ea:84:ff:78:d3:70:11:f5:0a:f9:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2F:3A:30:6D:A7:8A:15:E4:85:22:88:48:10:AB:EE:B5:EF:66:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/195
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/195/BF2F3A306DA78A15E48522884810ABEEB5EF66B0.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.46.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f8:ea:ea:a9:d7:c6:3c:90:bc:da:0c:fa:81:94:72:44:da:
26:13:7c:05:e0:99:fb:18:0b:57:2a:77:5a:c3:14:fa:63:76:
cc:67:d0:49:62:80:99:db:e6:7f:13:b5:95:8d:79:64:b3:c4:
7a:15:34:f6:8f:b5:0f:f5:86:fb:90:37:65:e7:22:3b:d2:18:
bf:b2:05:8c:aa:c0:e8:a5:b8:1c:c0:08:83:dd:76:9c:ea:f5:
47:32:89:76:25:6c:ec:7f:75:2a:4e:c9:53:3e:19:ee:22:28:
c9:63:d4:fc:8e:68:9a:29:fe:11:c6:db:f2:86:16:73:77:51:
e6:63:6f:f8:1c:4e:51:98:c3:ce:68:17:57:84:57:3d:c2:54:
34:4a:94:73:ef:58:02:51:b8:bb:e2:91:d4:c5:b5:b2:cd:86:
a9:65:8a:62:d9:5c:f1:28:fb:45:42:3f:58:ab:c4:74:8f:2d:
73:74:f2:f4:e9:30:ea:81:ff:b5:7c:0d:d9:f0:a6:66:a0:3e:
a6:9b:58:7c:a3:e4:cd:dd:3e:f3:7e:2a:17:3f:94:a8:f2:e7:
6a:83:9b:46:ac:54:ce:3f:31:d0:00:c0:40:ae:91:da:9e:24:
e7:0e:01:bf:48:29:ef:5e:18:4f:09:ab:6d:fd:c3:d8:26:b0:
5c:3d:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:38 2023 by rpki-client on console.sobornost.net