Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xsmqY2ps4ttMQD6IHqKZOYWhPO8.cer
File: xsmqY2ps4ttMQD6IHqKZOYWhPO8.cer (raw, json)
Hash identifier: o+cs2/Q8INIJVSR+kBJvNX7ceUO0tI6PC4Hs68INkX0=
Subject key identifier: C6:C9:AA:63:6A:6C:E2:DB:4C:40:3E:88:1E:A2:99:39:85:A1:3C:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B13BA0F7FB96C8D605089345DAE9D30
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/197/C6C9AA636A6CE2DB4C403E881EA2993985A13CEF.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/197
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 02:05:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.175.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:13:ba:0f:7f:b9:6c:8d:60:50:89:34:5d:ae:9d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:05:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6c9aa636a6ce2db4c403e881ea2993985a13cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:14:0e:3a:d6:07:a0:d7:65:ab:b0:ac:7e:
c5:43:8f:bc:3a:6d:c0:cb:f9:de:df:ab:9c:d6:db:
e5:0b:c7:63:2d:5c:56:13:54:d8:4a:3f:71:cc:c5:
80:e0:60:52:f5:34:05:36:85:0e:86:fc:b9:fc:d8:
ce:6b:7b:00:c7:07:cb:b0:17:50:f5:c1:4c:1e:16:
96:21:37:01:7a:4e:bc:8b:e7:9d:b1:86:68:92:39:
5c:4b:b0:b2:7a:d8:fd:fe:a8:9b:56:de:2c:23:24:
5b:7f:3e:23:c5:86:03:74:58:0e:d2:c6:8d:2d:c0:
53:d6:f3:76:55:82:98:5f:df:2a:84:a3:9f:4c:27:
8c:07:ca:50:d3:d8:11:9c:33:46:29:58:b6:01:d4:
0f:8d:98:41:7d:de:56:af:23:2a:97:b0:1b:99:3d:
d8:d3:6c:29:e5:c4:8c:fc:7b:b7:d1:90:b1:14:37:
7e:98:9b:3f:69:d3:8d:aa:50:08:d8:da:94:29:d0:
96:22:ec:ec:78:f1:13:e3:14:70:fd:85:78:be:55:
2e:0b:3e:93:2c:db:bd:37:63:5e:c1:4a:17:f8:92:
40:27:db:18:30:53:9c:91:46:a3:99:84:7f:b0:e1:
79:b9:dc:a6:75:51:75:6a:ea:de:78:30:dd:70:dc:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C9:AA:63:6A:6C:E2:DB:4C:40:3E:88:1E:A2:99:39:85:A1:3C:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/197
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/197/C6C9AA636A6CE2DB4C403E881EA2993985A13CEF.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ac:a6:06:c0:11:4a:d9:36:d3:ae:00:7c:0c:fd:b2:2b:26:
06:bc:c9:1d:5f:0d:78:f2:f4:bc:2f:f3:fa:93:3a:c0:cb:19:
71:a6:d6:c9:86:fc:17:bc:11:ab:74:67:ee:8e:f8:4b:06:43:
02:01:73:b6:38:08:a7:f4:d3:4a:3e:53:c5:16:cd:1e:e7:0c:
33:e1:7f:3d:2c:67:80:18:ae:1a:c7:a5:0d:2d:9c:f8:5b:cf:
15:2b:58:b1:72:60:88:69:eb:5e:34:f3:ea:a2:38:92:de:ab:
de:41:fd:45:dc:68:cf:46:8a:15:0c:7d:1e:48:cb:51:ec:55:
2c:6f:72:ae:32:45:aa:42:22:e0:91:a8:de:dc:ea:c3:35:ca:
3b:a1:24:a6:da:16:ea:76:d6:0c:c8:6d:1a:d7:69:05:d6:ac:
55:da:68:a4:14:b0:79:8b:ce:3c:76:d7:9e:84:24:4b:9e:6d:
dc:ff:83:36:66:dc:6c:d5:5d:e8:13:33:db:34:b1:60:1b:b1:
9a:c2:3d:f2:1a:8c:f9:43:b4:65:1d:f5:5c:14:24:fc:93:48:
c7:82:bb:d8:c2:b4:a6:16:d1:10:6e:73:14:eb:19:06:0f:a2:
72:5a:81:b0:d9:28:14:af:81:a5:a3:c1:b0:9d:14:8e:7d:10:
e4:ae:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:46 2023 by rpki-client on console.sobornost.net