Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
File: Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer (raw, json)
Hash identifier: OfpdaUjFpSdvQdk80YBjuux4qfekSbEF7yd/6NaNGe8=
Subject key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AEFDE8255C2AA10405009858217078B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/8
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 01:26:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 200282
IP: 2.58.80.0/22
IP: 5.181.32.0/22
IP: 5.183.32.0/22
IP: 5.252.140.0/22
IP: 45.66.136.0/22
IP: 45.80.152.0/22
IP: 45.88.196.0/22
IP: 45.89.204.0/22
IP: 45.90.228.0/22
IP: 45.93.124.0/22
IP: 45.128.160.0/22
IP: 45.132.240.0/22
IP: 45.141.220.0/22
IP: 45.143.80.0/22
IP: 45.147.72.0/22
IP: 45.155.44.0/22
IP: 46.17.172.0/22
IP: 80.65.208.0/22
IP: 81.22.36.0/22
IP: 83.136.216.0/22
IP: 83.171.248.0/22
IP: 84.21.168.0/22
IP: 85.208.156.0/22
IP: 88.218.164.0/22
IP: 91.196.68.0/22
IP: 92.118.52.0/22
IP: 93.177.96.0/22
IP: 94.101.112.0/22
IP: 95.214.216.0/22
IP: 109.236.60.0/22
IP: 141.98.152.0/22
IP: 152.89.88.0/22
IP: 176.113.76.0/22
IP: 178.212.32.0/22
IP: 185.193.16.0/22
IP: 192.145.36.0/22
IP: 193.46.240.0/22
IP: 193.148.72.0/22
IP: 193.149.24.0/22
IP: 194.5.152.0/22
IP: 194.15.108.0/22
IP: 194.53.108.0/22
IP: 194.61.28.0/22
IP: 194.110.143.0/24
IP: 194.110.193.0/24
IP: 194.110.200.0/24
IP: 194.110.210.0/24
IP: 194.180.176.0/22
IP: 195.7.4.0/22
IP: 213.190.4.0/22
IP: 2a05:4300::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:ef:de:82:55:c2:aa:10:40:50:09:85:82:17:07:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:26:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:ee:f3:26:76:98:38:67:23:aa:80:72:59:
a2:9f:a5:14:f5:f6:09:66:8c:e5:af:74:8f:6e:2c:
a4:da:fb:b4:a9:21:8b:a1:21:cb:0c:65:d4:31:c2:
5f:8c:d5:8d:fe:03:e3:af:7d:0c:0c:fc:dd:2f:cd:
5f:ea:f6:42:f2:93:a8:18:dd:9b:38:9c:21:ef:cb:
3f:04:b7:e7:75:eb:d1:d1:af:36:05:4c:2a:ee:87:
e1:50:29:dd:2a:02:a5:ce:63:74:e4:bb:14:e5:f3:
be:4b:b3:e0:82:8b:11:11:4d:3c:79:d1:a2:8d:e8:
2c:8e:5f:0b:fd:09:23:3f:3f:a4:f9:96:7a:6c:58:
14:70:22:ef:82:b4:3d:17:f3:76:7c:5f:b9:5c:3a:
5f:32:6d:be:b9:69:8f:cc:b8:0a:d2:96:9e:23:4a:
62:d0:30:e1:fa:26:d2:aa:c9:b8:df:e0:e5:b1:93:
be:39:b7:ec:74:2e:77:d1:77:fc:eb:de:98:3e:98:
62:7e:52:03:7b:eb:69:8d:e3:de:26:fe:44:dc:77:
20:97:c3:72:e9:a9:77:ab:be:7f:b0:c4:75:3e:3b:
de:72:76:a2:98:ed:b5:80:60:21:1e:35:39:c3:ca:
30:0b:b4:bf:75:2c:b2:0a:9b:6b:6b:83:8e:89:d6:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.80.0/22
5.181.32.0/22
5.183.32.0/22
5.252.140.0/22
45.66.136.0/22
45.80.152.0/22
45.88.196.0/22
45.89.204.0/22
45.90.228.0/22
45.93.124.0/22
45.128.160.0/22
45.132.240.0/22
45.141.220.0/22
45.143.80.0/22
45.147.72.0/22
45.155.44.0/22
46.17.172.0/22
80.65.208.0/22
81.22.36.0/22
83.136.216.0/22
83.171.248.0/22
84.21.168.0/22
85.208.156.0/22
88.218.164.0/22
91.196.68.0/22
92.118.52.0/22
93.177.96.0/22
94.101.112.0/22
95.214.216.0/22
109.236.60.0/22
141.98.152.0/22
152.89.88.0/22
176.113.76.0/22
178.212.32.0/22
185.193.16.0/22
192.145.36.0/22
193.46.240.0/22
193.148.72.0/22
193.149.24.0/22
194.5.152.0/22
194.15.108.0/22
194.53.108.0/22
194.61.28.0/22
194.110.143.0/24
194.110.193.0/24
194.110.200.0/24
194.110.210.0/24
194.180.176.0/22
195.7.4.0/22
213.190.4.0/22
IPv6:
2a05:4300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200282
Signature Algorithm: sha256WithRSAEncryption
25:b2:b7:1f:13:a4:9d:e5:ee:5d:04:0f:9e:b0:45:f9:2e:68:
7e:66:68:89:9c:ae:68:7b:fc:f9:2c:b2:ab:3d:ac:e1:83:b6:
1b:97:e3:c2:78:05:34:39:ca:e7:28:cc:32:38:3c:ab:3b:b6:
5d:c2:8a:fb:4b:87:44:40:88:96:a0:0f:cb:25:26:ca:81:d0:
49:e9:e6:e9:e9:6e:9b:89:f0:2e:89:bc:2f:8d:e7:7b:89:41:
44:e7:15:36:ec:c1:bc:f6:a0:65:cc:d9:31:9e:bf:db:5b:11:
66:f5:f9:33:e8:17:57:0e:72:5a:73:d1:f4:e8:80:31:9f:db:
a0:cb:28:6a:97:f5:ba:b4:5b:41:7e:15:ba:d0:fa:fb:60:f2:
97:cc:c2:e2:8d:6b:d0:42:25:9f:c7:0d:9d:ed:a1:76:ce:22:
43:27:da:ff:9d:d9:1c:28:f5:70:44:d6:40:59:51:55:53:eb:
14:85:07:67:d1:0c:5e:2d:fb:19:d1:cb:c4:8b:3c:2b:ce:79:
0d:7d:27:6e:98:fa:99:96:6f:02:d4:4d:77:0f:39:6c:e1:ce:
b4:4a:17:b3:90:c0:2f:e7:33:fd:eb:da:92:6c:a2:d2:28:c0:
e6:98:43:92:45:9f:5a:84:f3:98:86:26:a8:c7:55:16:9c:6d:
73:be:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:21 2023 by rpki-client on console-ams.rpki-client.org