Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5.cer
File: 99d7c699-190f-4fad-a37d-bd259bb116b5.cer (raw, json)
Hash identifier: cXZ6ZCSGcB9M3qokg3UifyVSltFAEpqnEVBIoeKvAAM=
Subject key identifier: 50:C5:AC:07:70:3F:38:98:35:3F:3C:A2:42:48:86:19:AB:0B:75:AA
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial: 010D0C9F43285843F7B6D7A37C71F3989E971000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/99d7c699-190f-4fad-a37d-bd259bb116b5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 22 Nov 2023 01:45:16 +0000
Certificate not after: Tue 24 Feb 2026 01:45:16 +0000
Subordinate resources: IP: 64.52.14.0/24
IP: 147.189.152.0/23
IP: 173.249.188.0/22
IP: 176.103.218.0/24
IP: 216.211.208.0/22
Validation: Failed, certificate revoked on Wed 21 Feb 2024 14:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f7:b6:d7:a3:7c:71:f3:98:9e:97:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Validity
Not Before: Nov 22 01:45:16 2023 GMT
Not After : Feb 24 01:45:16 2026 GMT
Subject: CN=99d7c699-190f-4fad-a37d-bd259bb116b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:a0:e2:8f:94:bd:2f:72:97:37:17:0d:65:
08:e8:94:a1:7b:76:29:ad:a3:50:b5:bc:e0:d3:7e:
ea:7e:6e:f3:92:30:21:d8:51:45:1e:8d:2c:52:c8:
9f:04:11:87:8e:fd:29:88:9d:2f:36:7b:6c:4a:af:
c0:60:09:23:31:fd:17:ea:05:c0:f0:59:b3:5c:71:
fb:7a:02:e1:c2:a9:95:c5:bc:8e:79:c7:b9:75:a3:
8c:93:60:85:a7:e3:ac:43:5a:41:69:35:a8:84:38:
9a:68:eb:6e:63:f4:cf:da:2e:cc:ed:a9:46:f0:77:
81:20:0b:e2:c3:f0:bd:c3:33:26:47:b2:d9:54:3f:
b2:2d:0b:11:57:8f:2c:dd:cb:bd:2b:6d:ec:94:71:
2b:d7:3f:c7:88:1b:1d:4e:72:8a:68:ef:2e:02:15:
8a:1d:a7:2c:20:73:55:b7:58:ed:9f:6d:6f:01:b9:
3e:48:48:97:f7:b2:6e:af:54:2d:57:1e:89:37:1d:
44:24:3c:42:86:c4:7e:bb:e3:bf:2b:fd:ad:61:8c:
ed:4b:57:c4:0c:2e:96:9d:45:e5:70:5f:64:65:62:
d8:bc:d8:01:21:7c:62:e5:b5:37:4e:3a:5e:d9:8f:
c6:09:e1:50:d2:f1:04:b4:5c:eb:e2:f1:6f:38:aa:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C5:AC:07:70:3F:38:98:35:3F:3C:A2:42:48:86:19:AB:0B:75:AA
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/99d7c699-190f-4fad-a37d-bd259bb116b5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
X509v3 Authority Key Identifier:
keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
sbgp-ipAddrBlock: critical
IPv4:
64.52.14.0/24
147.189.152.0/23
173.249.188.0/22
176.103.218.0/24
216.211.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:ae:d1:19:8a:56:17:ee:16:20:01:54:ad:7a:fb:60:8e:f2:
7a:37:7c:35:8f:89:2e:8b:f8:9d:a7:9b:62:c5:2d:04:4e:0e:
a8:66:09:77:6b:ea:03:ec:95:bb:11:63:81:51:88:72:5e:8b:
95:67:ee:39:d4:22:da:e2:39:ad:e7:63:df:14:60:bc:67:fb:
ce:50:92:fa:04:38:f5:c1:4d:62:be:d4:98:b8:47:7c:14:67:
b4:22:ea:fd:47:2e:90:0c:4b:59:f6:51:af:71:d4:af:7e:1e:
77:ff:89:89:81:a6:3b:30:48:a3:0f:8e:aa:74:bb:48:64:09:
d0:35:3d:99:0a:c5:14:82:6b:dd:89:fd:a7:e2:35:46:8c:2e:
da:7a:7e:5b:f0:c2:08:cc:c1:55:9d:ce:f3:79:b1:d4:25:f1:
a3:ac:d5:d4:20:31:9a:ba:5d:c4:90:21:f3:fd:f2:77:6e:8e:
15:f5:2b:09:e6:c5:c8:7d:2c:38:dc:59:92:02:05:12:6b:01:
a7:6a:bb:12:7c:43:98:ad:7d:9c:44:ad:53:c8:88:31:25:05:
5c:d5:82:0a:73:2d:21:d4:f1:86:0b:c2:82:cb:4c:9b:0f:fb:
c9:ec:7c:4c:e2:67:31:37:78:37:03:80:91:cc:eb:44:ed:10:
04:67:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 19:42:55 2024 by rpki-client on console-fra.rpki-client.org