Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/epqV6_HV-FOkNq7Ta_0oIZ_-Az4.cer
File: epqV6_HV-FOkNq7Ta_0oIZ_-Az4.cer (raw, json)
Hash identifier: WjKk3AS3VGG6D2vdINWI6x1DmCrmuD8ujCyYDIy35Hs=
Subject key identifier: 7A:9A:95:EB:F1:D5:F8:53:A4:36:AE:D3:6B:FD:28:21:9F:FE:03:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B0231313FA69F709E318AB86F142C20
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/202/7A9A95EBF1D5F853A436AED36BFD28219FFE033E.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/202
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 01:46:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.48.204.0/24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 08:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:02:31:31:3f:a6:9f:70:9e:31:8a:b8:6f:14:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:46:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a9a95ebf1d5f853a436aed36bfd28219ffe033e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:7c:15:f6:5e:d0:c4:85:92:bb:45:86:59:
4f:87:cc:4a:6f:dd:e2:bb:a0:d4:a1:ac:cf:46:1b:
3e:af:c5:68:8a:43:c2:ff:52:02:d4:6f:2e:58:3c:
66:85:6b:45:e6:57:92:c7:5c:87:e7:d8:4f:9e:69:
e3:ed:f8:3a:4c:f9:40:2b:31:62:72:34:40:a8:35:
0d:83:da:37:3b:ee:c1:7a:22:fe:3e:29:58:e5:fd:
84:c1:cb:8f:4e:0b:5d:4e:d7:0a:43:86:f1:11:a8:
ca:71:8b:17:ef:2a:28:21:b6:e0:3d:b1:0d:f1:90:
ae:d6:eb:26:27:0a:26:34:be:ee:20:18:62:a0:b6:
36:4f:b4:c9:cc:a4:85:57:41:f8:e5:cd:92:5c:7f:
28:14:14:9d:d0:09:ce:3e:3b:5d:1e:3e:48:47:5f:
ee:9b:68:eb:f5:88:7f:fe:7c:57:46:e4:a5:b7:22:
29:88:8b:f4:f4:9b:fd:e8:3f:7a:98:07:4c:c7:a3:
07:5f:71:59:39:48:68:d1:d8:c5:dc:d2:49:55:43:
9e:b9:c8:82:2f:45:16:c3:81:e1:8c:d4:7b:a9:be:
62:f3:eb:9b:69:7d:2b:80:86:dd:28:82:79:1b:a5:
2d:dd:7a:2e:a0:35:b2:50:0e:9c:40:42:86:a4:e9:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9A:95:EB:F1:D5:F8:53:A4:36:AE:D3:6B:FD:28:21:9F:FE:03:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/202
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/202/7A9A95EBF1D5F853A436AED36BFD28219FFE033E.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.204.0/24
Signature Algorithm: sha256WithRSAEncryption
25:61:5e:59:53:f3:0d:a3:9a:d6:56:9a:84:ba:06:8a:01:65:
bd:0a:f2:29:14:c9:64:e9:75:e3:88:7f:b5:2b:69:a1:39:b9:
8d:6f:cd:38:5a:42:23:49:3c:e2:f3:f2:29:7c:23:99:6f:ae:
d2:15:08:82:23:99:5a:24:10:e5:7f:62:6d:0d:4c:7b:9c:b1:
05:52:80:f6:e0:9d:5e:46:84:b1:9b:ef:90:d2:47:6f:9a:0f:
7a:96:24:85:30:c3:4d:53:80:5e:31:9e:51:41:ed:ac:ad:92:
55:b4:0f:bb:74:a2:1c:ba:a3:e4:22:b0:17:80:66:2d:76:ae:
ae:6c:71:6a:4e:b4:5e:8b:ac:f2:9c:e0:cd:05:34:71:a8:98:
a5:e3:d4:e9:2c:9a:8a:b4:2d:5d:4a:6b:76:b0:f1:aa:40:70:
16:d1:ef:b7:bd:fd:7e:64:9c:27:5f:5b:ce:6f:67:db:cb:b5:
46:df:25:8e:52:ec:0c:36:37:d8:99:7d:ff:72:dd:a5:38:24:
46:38:0d:0c:d9:a2:a4:3b:7f:fb:fa:1e:27:d1:7d:cf:fb:6c:
f1:5c:86:53:db:20:e2:b4:7c:9f:2a:81:5d:b6:c4:be:3d:8c:
08:12:19:f0:cf:80:0f:d5:ed:99:c0:98:69:fd:92:69:d7:bd:
20:c8:a7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:48 2024 by rpki-client on console-ams.rpki-client.org