Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc.cer
File: 43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc.cer (raw, json)
Hash identifier: SNWjXy6wQbudzNT81qjLD3DLlP5OHCcGBd2bhRDl+e8=
Subject key identifier: 2D:0E:7A:F3:D6:DA:0D:72:3A:64:67:5B:48:D6:97:E0:C2:57:19:97
Authority key identifier: 9E:7B:CF:16:05:4F:29:AA:44:0C:96:A1:7A:66:07:15:CE:67:01:AB
Certificate issuer: /CN=829fb872-15bb-4a4e-9ed9-259960b049bd
Certificate serial: 010D0C9F43285843DC9027DFC99475C750F336E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/2D0E7AF3D6DA0D723A64675B48D697E0C2571997.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 12 Nov 2023 08:20:30 +0000
Certificate not after: Sat 14 Feb 2026 08:20:30 +0000
Subordinate resources: IP: 23.156.104.0/24
IP: 2602:fa6e::/36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:dc:90:27:df:c9:94:75:c7:50:f3:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fb872-15bb-4a4e-9ed9-259960b049bd
Validity
Not Before: Nov 12 08:20:30 2023 GMT
Not After : Feb 14 08:20:30 2026 GMT
Subject: CN=43729997156bf8ecfda7a21458bab29e918d9cfafa110da6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:c5:87:b6:c6:bc:43:82:c1:8e:4f:7e:46:
02:e8:b3:49:76:b8:72:7b:96:34:60:b5:67:9e:13:
d0:fe:d9:dd:76:d5:2c:2c:dd:8c:75:21:32:ea:c5:
26:71:8a:07:b8:c8:19:43:bc:b6:f8:22:5d:0a:9f:
ac:90:3d:14:f7:4a:52:e7:32:57:24:69:9c:89:47:
69:b6:24:37:26:78:32:16:2e:7d:9b:0c:2d:f4:cf:
05:a3:2c:1f:97:31:98:6c:1a:19:52:fc:0d:29:3d:
28:a0:f0:68:83:ec:1a:17:e6:1b:15:21:c2:f3:82:
90:d0:af:3e:83:c4:f1:b8:b7:35:e9:cc:30:c7:e4:
08:bb:4c:f7:94:91:e8:58:54:78:86:11:f3:a4:1a:
72:8e:d8:04:92:12:95:5f:ec:2d:0b:30:4a:47:b1:
ac:71:11:4e:f4:86:46:3a:89:bf:b3:13:22:97:07:
38:30:76:31:d9:f7:36:6e:ab:8b:67:33:30:44:2c:
b8:05:16:7c:28:52:de:ed:da:a2:df:5e:bb:29:cf:
a7:c2:e7:3e:b3:18:9b:ab:49:f3:c5:21:45:a7:dc:
60:f6:84:b4:87:7a:43:e1:a8:59:3c:82:4a:4f:2b:
53:c1:b6:99:cc:16:43:67:b7:d4:fb:c0:81:b3:b7:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0E:7A:F3:D6:DA:0D:72:3A:64:67:5B:48:D6:97:E0:C2:57:19:97
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3849da2-7504-427e-a2e3-bb61456c0b2d/2/2D0E7AF3D6DA0D723A64675B48D697E0C2571997.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
X509v3 Authority Key Identifier:
keyid:9E:7B:CF:16:05:4F:29:AA:44:0C:96:A1:7A:66:07:15:CE:67:01:AB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.104.0/24
IPv6:
2602:fa6e::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:5c:b8:40:81:5a:c6:de:bb:4b:67:20:7f:36:28:e4:e3:73:
49:fb:30:2c:56:d2:44:b6:4e:95:ff:e3:ae:2d:50:7a:ef:3a:
02:74:71:1e:be:bf:61:6e:7c:16:bf:94:e4:e2:09:26:53:75:
b0:f7:f3:03:8e:2b:5d:7b:5a:e2:3b:5a:fd:02:30:99:79:41:
aa:a7:e2:15:44:c8:44:30:15:68:07:a5:d6:7a:5f:a0:79:de:
e1:60:c3:52:08:57:3b:77:35:45:61:b5:c7:cf:44:85:71:f9:
48:b6:bc:8a:6d:fc:fe:39:f7:e6:b2:3a:4b:36:78:d8:fe:b5:
90:75:d3:92:18:41:7d:68:6e:70:d5:76:88:31:81:40:d1:a8:
09:dc:c0:f4:c0:f2:0b:ae:98:5c:67:7e:0a:ec:bb:c4:1c:7a:
9f:73:a7:7b:9a:f7:dd:f3:61:07:70:59:24:cb:38:d0:e0:a4:
2a:88:a3:b0:5c:c3:8e:e8:07:66:59:e9:b5:dd:b0:aa:98:01:
cc:62:1c:41:6a:2c:c7:77:1a:13:81:b6:4c:d8:b5:6d:d0:31:
ee:7d:fb:86:ec:e5:ee:38:a1:34:55:76:5d:e8:83:51:63:da:
22:1d:ad:6d:f9:95:cf:23:a1:c8:9f:9f:06:43:9e:f3:6a:a4:
47:db:ff:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 12 14:40:22 2023 by rpki-client on console-fra.rpki-client.org