Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2RBL2mmuVT9ArJpvw3tW7ouMSQ8.cer
File: 2RBL2mmuVT9ArJpvw3tW7ouMSQ8.cer (raw, json)
Hash identifier: 8fU+GCdAdkxfK0aR1dPWJ1l6NccCAf8c6bqKzLxmHEQ=
Subject key identifier: D9:10:4B:DA:69:AE:55:3F:40:AC:9A:6F:C3:7B:56:EE:8B:8C:49:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7795CA1350
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/143/D9104BDA69AE553F40AC9A6FC37B56EE8B8C490F.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/143/
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:54:44 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.13.232.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513614156624 (0x7795ca1350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:54:44 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d9104bda69ae553f40ac9a6fc37b56ee8b8c490f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:10:46:34:e0:0f:9a:4a:97:ac:ee:4e:87:
be:24:0e:43:3d:e3:4e:44:1d:e5:1f:c2:99:bd:f9:
0b:36:f9:db:2a:59:af:65:5d:bd:d7:94:74:5f:10:
43:60:bc:96:9d:5e:e0:ed:9b:53:fc:32:a5:e5:cb:
d8:d0:dc:58:02:07:3e:dd:de:2b:cf:fd:80:37:07:
ce:e4:d0:80:ea:ba:3e:06:f7:35:a6:c5:90:3b:13:
ac:20:a7:de:64:97:dc:a0:30:8a:59:bb:6c:7d:8e:
30:d7:e6:3d:df:22:d5:89:4d:ee:ac:a6:f5:64:61:
64:ff:94:66:8a:98:41:fe:a3:00:a2:9b:cf:1e:dd:
55:77:0f:c8:c0:62:62:71:8f:4d:18:32:68:fe:d3:
41:ee:70:0a:ae:c6:aa:12:75:a8:cd:09:48:47:46:
ef:e3:cb:e4:96:d0:a1:2b:d4:4a:96:ce:39:a5:3f:
c5:91:46:74:d8:89:0c:12:c8:5f:2c:d9:51:50:f9:
f6:ae:42:2a:1b:15:bc:4b:83:cb:e7:96:67:f0:23:
4d:e4:34:86:0e:cb:94:d2:85:8b:6f:4b:6c:b4:a1:
b9:63:16:01:38:63:ed:60:0d:a1:13:3b:52:77:92:
6d:e0:a0:ec:ab:4c:dc:54:ac:b8:ec:ca:f4:82:4e:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:10:4B:DA:69:AE:55:3F:40:AC:9A:6F:C3:7B:56:EE:8B:8C:49:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/143/
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/143/D9104BDA69AE553F40AC9A6FC37B56EE8B8C490F.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.232.0/22
Signature Algorithm: sha256WithRSAEncryption
39:16:97:b5:95:dd:88:a2:df:ad:b9:42:bf:9a:f4:f7:17:ee:
f4:b5:ad:4c:fe:03:41:97:d6:89:0d:38:0b:cd:32:c0:8e:d1:
85:cf:ec:be:82:4b:24:37:57:a7:aa:07:33:2f:d5:96:c5:d2:
da:20:a3:f6:d4:4f:34:de:21:b2:5a:eb:7f:b3:70:d9:05:d1:
ad:80:67:5a:e4:88:01:5d:95:fc:e6:56:23:6f:52:be:69:f3:
14:db:12:bc:5d:ba:97:4d:ad:de:a6:fb:6c:50:3d:88:ab:86:
07:e2:1e:c7:e8:5f:ca:06:48:56:33:09:c7:15:8c:5d:7f:fc:
ff:e8:f4:cb:ba:fd:d0:46:32:93:fb:a7:1a:10:45:46:14:f5:
7d:9e:46:3d:c6:d6:8f:18:6e:73:8d:b7:fa:93:d7:8a:8d:ce:
0c:0a:98:78:56:59:4d:ff:1c:c4:d2:cd:eb:ea:69:80:8d:78:
60:5a:fe:65:63:fd:9d:3a:a2:79:ed:d7:42:52:2c:75:2d:48:
f0:4d:f4:a0:60:c9:1d:a1:04:53:34:33:30:f8:15:a5:e2:7d:
a6:f9:8b:70:07:36:85:2c:34:61:20:52:0b:cc:e4:4d:35:92:
5e:de:3c:85:6e:9e:6c:23:03:6e:9b:8d:3c:05:5c:78:b0:50:
10:fe:82:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:54:53 2025 by rpki-client