Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer
File: c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer (raw, json)
Hash identifier: L6SpmX1fW4hUVphl9LpZFJ2YoHzXISkbRI6jFvBhCU4=
Subject key identifier: 0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F43285841BD53B0D274AD835130D34A40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 01 May 2023 18:14:44 +0000
Certificate not after: Sun 03 Aug 2025 18:14:44 +0000
Subordinate resources: AS: 26340
AS: 399970
IP: 149.112.152.0/22
IP: 205.196.98.0/24
IP: 2602:fc3b::/36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:bd:53:b0:d2:74:ad:83:51:30:d3:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: May 1 18:14:44 2023 GMT
Not After : Aug 3 18:14:44 2025 GMT
Subject: CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0e:6f:e7:a9:44:d1:62:f4:c7:a9:13:03:d6:
59:27:7b:05:f0:3d:fb:71:0c:40:3d:fa:7b:27:5b:
16:4f:7c:d5:6f:9c:b9:09:08:8d:9f:c6:88:02:c4:
4d:b8:46:6c:86:a9:20:6f:17:62:ca:63:30:e2:1d:
88:73:1d:45:d6:98:e1:d0:b7:77:29:e1:96:d8:ca:
f1:1c:77:01:03:fb:97:f0:25:da:6e:df:53:56:e3:
c3:5c:47:db:4f:42:1f:9e:f5:b3:d1:ce:95:35:99:
24:7e:3c:4e:6a:ff:0f:35:f4:45:5e:df:e6:a0:c0:
13:61:6d:8b:25:5c:cb:ab:85:70:5b:8f:cc:12:dd:
fd:9a:fc:2a:b7:f0:28:05:d4:86:35:e4:12:3d:73:
57:1f:df:86:18:a9:da:41:8c:15:5e:ab:c6:67:de:
95:06:4c:02:d4:1a:2a:ed:91:9c:e0:8e:64:bd:83:
af:2b:3e:b8:1c:bb:f4:35:93:1e:ff:73:a2:98:b6:
59:e2:cc:9d:f1:e3:1c:e4:2c:15:63:07:da:cc:70:
33:51:5c:55:63:56:c9:a9:d4:64:fb:c8:03:df:b2:
2f:d2:19:1a:fe:e7:d9:3a:97:06:7d:30:e7:1d:82:
d0:5e:14:60:70:ad:56:33:0a:6e:1b:d1:ba:33:99:
b5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
205.196.98.0/24
IPv6:
2602:fc3b::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26340
399970
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:53:77:8c:82:8e:96:7c:1a:f3:c5:b2:60:b9:4b:b7:93:20:
d2:ab:5d:24:18:f8:98:e1:49:78:38:c1:a6:d2:16:95:a4:cb:
1f:f1:d9:e7:ae:a4:52:5a:d4:99:56:73:29:39:9a:2f:f2:eb:
6c:86:c5:bb:b6:28:2a:b6:71:3c:81:c9:58:a8:e8:11:0b:d7:
f1:16:86:64:f6:e0:b8:fe:9e:30:86:1e:62:11:a3:dc:72:8d:
22:98:50:ec:f4:fc:58:cd:a1:01:fc:89:ab:d5:0c:26:cb:f5:
6b:53:90:51:28:fe:ed:1a:d6:a6:a2:78:2c:a9:6e:88:db:e0:
04:58:c2:a4:41:7f:c9:ce:55:9f:a0:36:fd:46:3c:14:f4:8d:
bd:61:2a:05:27:b1:44:9b:b2:c4:25:99:66:b4:d6:9e:65:47:
46:06:57:c2:a8:a5:dd:d9:3a:94:0b:2e:50:8d:b9:82:60:82:
24:0c:6d:96:7f:8b:17:7b:8c:5c:de:9a:56:4d:6c:67:d0:41:
c4:60:64:a2:d7:c8:60:73:53:47:06:bf:b8:e0:46:21:f0:b0:
f0:1b:03:61:73:1e:3c:fe:9e:04:66:ad:a7:0d:04:a6:af:1d:
5c:d2:6b:bc:8c:9c:02:45:f9:3d:da:90:f4:22:a0:c5:7c:09:
1c:64:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:51 2023 by rpki-client on console-fra.rpki-client.org