Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
File: YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer (raw, json)
Hash identifier: 00kwkF/ttTumnKiDvvXso7uC1JcWiOr9/cD3HSjBg7g=
Subject key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ACCE6F50B9275D11B7F9A79B0420E07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/6
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 00:48:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 5.252.248.0/22
IP: 83.136.180.0/22
IP: 84.54.20.0/22
IP: 85.208.48.0/22
IP: 88.218.200.0/22
IP: 95.214.112.0/22
IP: 141.98.180.0/22
IP: 171.22.168.0/22
IP: 176.53.176.0/22
IP: 185.182.8.0/22
IP: 185.182.184.0/22
IP: 185.184.200.0/22
IP: 185.187.232.0/22
IP: 185.187.240.0/22
IP: 185.189.0.0/22
IP: 185.190.140.0/22
IP: 185.193.64.0/22
IP: 185.194.216.0/22
IP: 185.196.108.0/22
IP: 185.197.192.0/22
IP: 185.199.100.0/22
IP: 185.202.220.0/22
IP: 185.202.236.0/22
IP: 185.203.216.0/22
IP: 185.207.248.0/22
IP: 185.209.220.0/22
IP: 185.211.4.0/22
IP: 185.213.80.0/22
IP: 185.214.132.0/22
IP: 185.216.72.0/22
IP: 185.217.124.0/22
IP: 185.218.124.0/22
IP: 185.219.140.0/22
IP: 185.221.132.0/22
IP: 185.222.240.0/22
IP: 185.225.232.0/22
IP: 185.227.132.0/22
IP: 185.229.116.0/22
IP: 185.232.4.0/22
IP: 185.234.68.0/22
IP: 185.237.252.0/22
IP: 185.239.208.0/22
IP: 185.241.148.0/22
IP: 185.245.180.0/22
IP: 185.250.36.0/22
IP: 192.145.80.0/22
IP: 193.9.32.0/22
IP: 194.32.232.0/22
IP: 212.90.120.0/22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:cc:e6:f5:0b:92:75:d1:1b:7f:9a:79:b0:42:0e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:48:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:80:a8:48:bb:86:e5:d4:f0:f3:81:0c:c6:b8:
d8:27:bd:f2:30:22:c8:f9:af:8d:a0:5c:f7:02:63:
92:3a:6d:fd:70:67:74:bf:6c:02:ea:64:39:91:3f:
c4:51:4d:b1:bd:9a:e0:60:e2:03:04:49:f7:4c:bb:
07:58:41:32:00:23:a8:2c:63:9c:63:a1:8f:79:02:
9d:ba:14:92:13:7f:a2:84:13:ca:95:78:01:fd:68:
e8:ce:39:fc:51:bf:d2:63:87:0f:63:05:18:5a:66:
16:cc:e5:a9:bd:30:aa:38:b7:4b:02:cb:5b:07:a5:
4c:9f:05:3d:25:86:e7:7c:fe:60:39:f4:56:49:14:
49:4b:ac:ff:b8:d8:be:89:2c:78:8b:d0:51:cc:ff:
f5:81:e6:3a:27:d1:ad:8f:bb:45:5d:94:72:58:34:
1c:3e:37:22:06:7b:cd:e1:b6:3c:04:d5:f4:e7:ff:
d9:0e:58:31:b2:9e:53:f9:bf:fa:b6:ac:38:12:15:
80:3d:36:69:8c:11:18:ec:4e:88:bb:76:2c:fa:f4:
cd:2e:0a:ac:a8:e8:9e:bb:19:53:fa:00:a5:80:ed:
06:27:75:3c:f8:31:15:f3:a8:1c:36:c9:db:81:8e:
65:a3:87:56:f2:67:f6:e7:30:66:1d:87:96:9b:0e:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.248.0/22
83.136.180.0/22
84.54.20.0/22
85.208.48.0/22
88.218.200.0/22
95.214.112.0/22
141.98.180.0/22
171.22.168.0/22
176.53.176.0/22
185.182.8.0/22
185.182.184.0/22
185.184.200.0/22
185.187.232.0/22
185.187.240.0/22
185.189.0.0/22
185.190.140.0/22
185.193.64.0/22
185.194.216.0/22
185.196.108.0/22
185.197.192.0/22
185.199.100.0/22
185.202.220.0/22
185.202.236.0/22
185.203.216.0/22
185.207.248.0/22
185.209.220.0/22
185.211.4.0/22
185.213.80.0/22
185.214.132.0/22
185.216.72.0/22
185.217.124.0/22
185.218.124.0/22
185.219.140.0/22
185.221.132.0/22
185.222.240.0/22
185.225.232.0/22
185.227.132.0/22
185.229.116.0/22
185.232.4.0/22
185.234.68.0/22
185.237.252.0/22
185.239.208.0/22
185.241.148.0/22
185.245.180.0/22
185.250.36.0/22
192.145.80.0/22
193.9.32.0/22
194.32.232.0/22
212.90.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:6c:34:2f:5c:cd:bf:06:d6:aa:fb:b1:6c:bc:33:4c:04:2a:
0d:e7:01:13:02:1f:8b:66:cd:10:de:f0:8b:d5:1d:40:69:85:
5e:91:b5:cb:e5:f1:21:8c:d7:96:2d:d7:db:48:2a:5d:8c:42:
ac:58:a9:50:71:0d:68:b0:91:f2:06:77:25:51:ee:35:f8:50:
93:b0:ee:e3:e7:77:89:30:f3:65:5e:9a:23:43:d1:78:43:bd:
31:69:72:d8:4d:7d:22:b8:8a:49:34:6e:46:6f:ce:6e:9b:63:
14:aa:b1:cd:c4:ed:56:ee:8d:cd:ed:39:62:d2:a4:7f:8e:18:
fd:be:60:3c:2e:73:78:12:bc:07:28:9a:60:8c:d5:5b:3e:a8:
2d:25:a1:35:8b:cf:26:fe:e2:4b:a2:57:cb:a6:7f:c1:f3:fe:
5a:39:c8:4f:d5:74:70:b5:0c:04:f5:2d:f7:a0:b8:c7:f9:be:
59:ab:98:15:c6:9f:c2:86:1b:ba:81:2c:cc:5f:65:d1:28:15:
b6:00:94:65:bd:49:90:1e:66:3b:ac:cf:ff:bc:b4:fe:04:66:
9b:69:0d:3d:53:bc:a5:51:5e:52:cb:87:96:4c:72:16:64:d4:
53:cb:18:21:b3:d9:ad:6a:90:6c:82:b5:13:c0:75:e6:25:a2:
64:99:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:15 2023 by rpki-client on console-ams.rpki-client.org