Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997156ac3f20e69f6e5f2aed115aeeeb2ba746622c050.cer
File: 43729997156ac3f20e69f6e5f2aed115aeeeb2ba746622c050.cer (raw, json)
Hash identifier: LxaIcad2t13/SLLb6ehEUWaI5hNw/UP5gVo/ZA+yTAs=
Subject key identifier: C0:54:E2:DA:0F:B2:8B:BE:AE:62:43:12:6C:7E:91:02:63:B0:09:7E
Authority key identifier: 9E:7B:CF:16:05:4F:29:AA:44:0C:96:A1:7A:66:07:15:CE:67:01:AB
Certificate issuer: /CN=829fb872-15bb-4a4e-9ed9-259960b049bd
Certificate serial: 010D0C9F43285842751210D3849736945D065340
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/0/C054E2DA0FB28BBEAE6243126C7E910263B0097E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 06 Jul 2023 13:51:14 +0000
Certificate not after: Wed 08 Oct 2025 13:51:14 +0000
Subordinate resources: IP: 23.156.104.0/24
IP: 2602:fa6e::/36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:75:12:10:d3:84:97:36:94:5d:06:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fb872-15bb-4a4e-9ed9-259960b049bd
Validity
Not Before: Jul 6 13:51:14 2023 GMT
Not After : Oct 8 13:51:14 2025 GMT
Subject: CN=43729997156ac3f20e69f6e5f2aed115aeeeb2ba746622c050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:b0:da:74:3a:4f:82:82:e5:5f:93:61:57:
de:f5:47:9c:b6:02:c3:4c:76:b9:d3:67:aa:14:02:
96:5f:72:37:2b:b5:e7:b5:25:e0:49:97:33:dd:07:
1d:c2:d5:08:f3:53:e5:92:f3:2f:ae:52:28:7e:6a:
64:a1:ed:45:40:61:10:65:ab:2f:fa:bf:07:b5:f3:
ea:9d:62:da:7e:ee:cd:a5:01:0c:17:b9:f0:cb:99:
78:f1:79:7b:8f:84:b5:ef:ed:8f:d9:ad:74:b4:54:
b3:26:44:0d:08:07:26:91:99:97:2b:2d:92:e4:22:
b8:dc:f3:b3:c9:3d:91:fe:ea:05:55:9d:74:dc:17:
a8:3d:6a:b2:c6:b4:da:c5:6f:a6:37:8d:25:de:1c:
db:82:a2:6f:68:dd:2d:08:8d:1f:2f:d0:19:ca:39:
f0:c8:c0:ac:58:ae:07:a4:d6:8b:31:79:20:9d:80:
3c:87:ce:93:8d:e4:0a:1b:5d:f3:fc:b0:c5:2a:8a:
a0:0c:c0:68:e4:ba:f4:82:68:0d:0b:91:4d:42:85:
e3:3c:96:cd:a5:65:50:6c:ac:e6:62:e6:fa:1e:6d:
d7:7f:7f:57:71:9b:c4:b3:64:7a:27:7e:54:7c:e3:
76:79:0b:11:04:b8:e6:a2:d3:9b:20:6b:af:13:e3:
31:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:54:E2:DA:0F:B2:8B:BE:AE:62:43:12:6C:7E:91:02:63:B0:09:7E
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/0/C054E2DA0FB28BBEAE6243126C7E910263B0097E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
X509v3 Authority Key Identifier:
keyid:9E:7B:CF:16:05:4F:29:AA:44:0C:96:A1:7A:66:07:15:CE:67:01:AB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.104.0/24
IPv6:
2602:fa6e::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:31:05:aa:37:8a:60:4c:75:5b:f9:d1:88:02:e6:11:8c:c1:
9f:ae:f8:29:70:ee:c0:ec:7a:10:e6:a1:cc:1d:49:d3:5f:62:
be:de:b9:5a:02:c8:0a:c9:42:a6:2b:3b:43:a2:99:8e:53:7e:
6e:21:78:00:7b:8b:0b:9a:dd:24:f6:9f:a2:da:ba:63:df:c8:
55:fe:7e:ca:b5:c8:4f:8d:bd:b9:e9:7b:ca:92:8c:fd:db:9a:
2f:ec:97:a7:59:5b:9b:2e:5e:dd:cd:d2:a4:32:8c:65:ec:11:
ea:da:a8:17:3f:19:8e:07:a3:0d:f4:75:3f:14:65:39:09:29:
3a:f2:16:b8:9e:71:f6:f3:ee:90:ce:dd:26:9d:ac:4b:12:00:
b3:e4:61:35:c7:9a:92:6f:bc:79:98:46:1b:d8:5d:9a:c0:07:
cf:2d:b6:37:10:ed:fd:53:ee:28:9e:e8:a7:4c:84:f8:c6:99:
a4:b5:10:84:ce:f6:69:68:a4:02:1b:2a:bd:d5:b2:ac:19:26:
95:c2:a3:22:e0:09:fe:bd:9b:91:ba:f9:9d:54:cd:23:3a:b9:
66:9f:f8:93:37:d8:5b:93:9e:ee:d8:40:cb:10:b4:43:f4:c2:
2c:a2:dd:a3:e6:39:42:04:40:28:c1:43:69:04:77:d8:e5:a6:
e3:1e:a2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 12 08:48:41 2023 by rpki-client on console-ams.rpki-client.org