Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
File: ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer (raw, json)
Hash identifier: EjWeCHi9Nxz0n1JQKllLyzMVQldtCd4r+/utv34oAP0=
Subject key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AC3009EDD4C9D3C9FAEEE849F178A2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/3
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 00:37:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.133.48.0/22
IP: 185.171.96.0/22
IP: 185.175.56.0/22
IP: 185.176.158.0/23
IP: 185.176.228.0/22
IP: 185.178.32.0/22
IP: 185.182.44.0/22
IP: 185.183.180.0/22
IP: 185.185.124.0/22
IP: 185.189.24.0/22
IP: 185.190.236.0/22
IP: 185.192.172.0/22
IP: 185.194.36.0/22
IP: 185.196.20.0/22
IP: 185.197.28.0/22
IP: 185.198.24.0/22
IP: 185.199.68.0/22
IP: 185.200.136.0/22
IP: 185.201.160.0/22
IP: 185.202.156.0/22
IP: 185.205.12.0/22
IP: 185.206.160.0/22
IP: 185.208.236.0/22
IP: 185.209.252.0/22
IP: 185.211.32.0/22
IP: 185.213.24.0/22
IP: 185.214.124.0/22
IP: 185.215.208.0/22
IP: 185.216.230.0/23
IP: 185.217.148.0/22
IP: 185.218.52.0/22
IP: 185.220.20.0/22
IP: 185.222.124.0/22
IP: 185.223.252.0/22
IP: 185.226.212.0/22
IP: 185.228.4.0/22
IP: 185.229.112.0/22
IP: 185.232.12.0/22
IP: 185.234.32.0/22
IP: 185.237.144.0/22
IP: 185.239.212.0/22
IP: 185.241.236.0/22
IP: 185.243.56.0/22
IP: 185.245.252.0/22
IP: 185.250.220.0/22
IP: 194.31.52.0/22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:c3:00:9e:dd:4c:9d:3c:9f:ae:ee:84:9f:17:8a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:37:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22d29c996abcc72c72279ef78987951b825ae400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:cf:e7:b9:6d:2d:c7:11:be:9e:99:06:9c:
9e:25:5b:19:8f:85:17:2c:60:f8:82:8c:e8:b3:63:
a8:6c:c0:65:57:ba:f4:88:95:a9:88:90:4c:30:a3:
c7:21:f2:c0:e6:bd:e3:cf:11:e8:de:c6:57:29:9a:
bd:c1:fc:16:50:c9:ed:f6:ff:a8:a5:ea:de:ef:28:
5e:0f:d3:ca:71:c3:0a:e2:fd:7c:0f:5f:b1:41:32:
37:1f:89:5c:7e:9b:cb:2e:c0:6c:b8:64:c2:83:3a:
a2:f2:1e:20:42:ee:33:86:94:a7:52:c2:d7:2a:1d:
b5:55:76:44:b0:da:43:99:16:b9:7f:e4:fc:99:ef:
96:3e:42:99:aa:90:23:ee:db:c0:10:d6:1b:9b:13:
8a:1a:d7:23:cc:71:55:99:9e:c2:66:20:17:48:3c:
03:8a:74:97:fa:39:eb:42:5e:e8:99:f5:28:0c:8e:
b1:8e:f9:cb:9e:55:e9:0b:d6:45:5c:41:ad:f5:0f:
38:91:5c:35:f2:1d:61:cd:da:f3:33:90:c2:4a:2e:
95:f4:e7:33:77:f4:23:fa:da:ce:ca:f8:fe:a7:f6:
67:c0:1d:51:32:b5:f8:42:d8:e0:84:e3:72:2a:07:
1c:6b:b6:e5:ba:0c:79:9e:da:15:50:66:2d:76:67:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.48.0/22
185.171.96.0/22
185.175.56.0/22
185.176.158.0/23
185.176.228.0/22
185.178.32.0/22
185.182.44.0/22
185.183.180.0/22
185.185.124.0/22
185.189.24.0/22
185.190.236.0/22
185.192.172.0/22
185.194.36.0/22
185.196.20.0/22
185.197.28.0/22
185.198.24.0/22
185.199.68.0/22
185.200.136.0/22
185.201.160.0/22
185.202.156.0/22
185.205.12.0/22
185.206.160.0/22
185.208.236.0/22
185.209.252.0/22
185.211.32.0/22
185.213.24.0/22
185.214.124.0/22
185.215.208.0/22
185.216.230.0/23
185.217.148.0/22
185.218.52.0/22
185.220.20.0/22
185.222.124.0/22
185.223.252.0/22
185.226.212.0/22
185.228.4.0/22
185.229.112.0/22
185.232.12.0/22
185.234.32.0/22
185.237.144.0/22
185.239.212.0/22
185.241.236.0/22
185.243.56.0/22
185.245.252.0/22
185.250.220.0/22
194.31.52.0/22
Signature Algorithm: sha256WithRSAEncryption
26:92:e4:11:91:68:84:9b:9a:df:da:ca:88:5c:c6:d5:18:b7:
22:fa:86:1d:54:34:4a:3f:81:02:61:0c:9f:9a:8d:63:d4:67:
bd:fb:b9:98:11:57:98:bf:7e:f0:6f:4f:53:41:47:c6:9c:0a:
38:1d:8b:e7:48:4d:aa:06:51:16:16:76:39:89:15:99:40:58:
cf:d4:d4:ce:46:68:3b:e5:10:1b:0f:10:dd:7a:dd:52:98:a3:
fc:ba:00:3c:50:3d:74:38:a4:13:cb:3d:9e:b0:0a:17:60:3f:
61:42:55:07:7d:75:a1:43:e0:f1:09:16:2d:66:37:ea:34:10:
07:e2:b1:63:f8:7b:0a:1f:fe:88:b6:e8:2b:b3:52:92:8f:50:
33:a0:95:fb:27:a4:e3:31:16:3a:91:29:69:3d:89:e6:bd:a3:
64:ee:c8:30:e2:1b:9c:97:18:cc:29:f3:00:b7:01:89:bd:a3:
53:34:97:4a:be:ab:5a:9f:9b:3b:e8:9c:ce:8a:0d:01:fc:71:
04:e8:62:8a:14:98:d4:c9:c4:0c:e0:20:78:b0:38:8c:7a:fe:
26:44:b8:f3:e3:72:35:9f:d9:88:c8:25:85:41:af:6c:aa:38:
37:18:6d:c4:89:c1:53:ad:65:e8:d2:4e:92:6c:6b:42:96:05:
d8:93:9c:ee
-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgISAYVqwwCe3UydPJ+u7oSfF4orMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDAzNzIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmQyOWM5OTZhYmNjNzJjNzIyNzllZjc4OTg3OTUxYjgyNWFlNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw17P57ltLccRvp6ZBpyeJVsZj4UX
LGD4gozos2OobMBlV7r0iJWpiJBMMKPHIfLA5r3jzxHo3sZXKZq9wfwWUMnt9v+o
pere7yheD9PKccMK4v18D1+xQTI3H4lcfpvLLsBsuGTCgzqi8h4gQu4zhpSnUsLX
Kh21VXZEsNpDmRa5f+T8me+WPkKZqpAj7tvAENYbmxOKGtcjzHFVmZ7CZiAXSDwD
inSX+jnrQl7omfUoDI6xjvnLnlXpC9ZFXEGt9Q84kVw18h1hzdrzM5DCSi6V9Ocz
d/Qj+trOyvj+p/ZnwB1RMrX4QtjghONyKgcca7blugx5ntoVUGYtdmc9pwIDAQAB
o4IDdDCCA3AwHQYDVR0OBBYEFCLSnJlqvMcsciee94mHlRuCWuQAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgfwGCCsGAQUFBwELBIHvMIHsMD0GCCsGAQUFBzAFhjFyc3lu
YzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zMGoG
CCsGAQUFBzAKhl5yc3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1Rl
cnJhVHJhbnNpdC8zLzIyRDI5Qzk5NkFCQ0M3MkM3MjI3OUVGNzg5ODc5NTFCODI1
QUU0MDAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2kxLnRlcnJhdHJhbnNp
dC5kZS9ycmRwL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5
bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3
RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
ggE1BggrBgEFBQcBBwEB/wSCASQwggEgMIIBHAQCAAEwggEUAwQCuYUwAwQCuatg
AwQCua84AwQBubCeAwQCubDkAwQCubIgAwQCubYsAwQCube0AwQCubl8AwQCub0Y
AwQCub7sAwQCucCsAwQCucIkAwQCucQUAwQCucUcAwQCucYYAwQCucdEAwQCuciI
AwQCucmgAwQCucqcAwQCuc0MAwQCuc6gAwQCudDsAwQCudH8AwQCudMgAwQCudUY
AwQCudZ8AwQCudfQAwQBudjmAwQCudmUAwQCudo0AwQCudwUAwQCud58AwQCud/8
AwQCueLUAwQCueQEAwQCueVwAwQCuegMAwQCueogAwQCue2QAwQCue/UAwQCufHs
AwQCufM4AwQCufX8AwQCufrcAwQCwh80MA0GCSqGSIb3DQEBCwUAA4IBAQAmkuQR
kWiEm5rf2sqIXMbVGLci+oYdVDRKP4ECYQyfmo1j1Ge9+7mYEVeYv37wb09TQUfG
nAo4HYvnSE2qBlEWFnY5iRWZQFjP1NTORmg75RAbDxDdet1SmKP8ugA8UD10OKQT
yz2esAoXYD9hQlUHfXWhQ+DxCRYtZjfqNBAH4rFj+HsKH/6Itugrs1KSj1AzoJX7
J6TjMRY6kSlpPYnmvaNk7sgw4huclxjMKfMAtwGJvaNTNJdKvqtan5s76JzOig0B
/HEE6GKKFJjUycQM4CB4sDiMev4mRLjz43I1n9mIyCWFQa9sqjg3GG3EicFTrWXo
0k6SbGtClgXYk5zu
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:24 2023 by rpki-client on console-ams.rpki-client.org