Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566abcbf4de15347b50da696f06cd90b6b6d82549fda.cer
File: a3d7c4566abcbf4de15347b50da696f06cd90b6b6d82549fda.cer (raw, json)
Hash identifier: /WYshJv6rkOZVRaETE4czj1B7dKWu3s+YOBUE5S1O34=
Subject key identifier: A7:41:33:75:24:3C:D3:C1:29:A3:81:B8:A7:A8:03:22:97:6E:05:A7
Authority key identifier: 83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8
Certificate issuer: /CN=d8ea1081-bccb-41d5-b0fe-1b9724cced3f
Certificate serial: 010D0C9F432858417BDBA8CAA45C2DECD651A000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer
Manifest: rsync://rpki.co/repo/HYSP/17/A7413375243CD3C129A381B8A7A80322976E05A7.mft
caRepository: rsync://rpki.co/repo/HYSP/17
Notify URL: https://rpki.co/rrdp/notification.xml
Certificate not before: Sat 08 Apr 2023 07:25:20 +0000
Certificate not after: Fri 11 Jul 2025 07:25:20 +0000
Subordinate resources: IP: 23.149.248.0/24
IP: 149.112.53.0/24
IP: 2602:fa90::/36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:7b:db:a8:ca:a4:5c:2d:ec:d6:51:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ea1081-bccb-41d5-b0fe-1b9724cced3f
Validity
Not Before: Apr 8 07:25:20 2023 GMT
Not After : Jul 11 07:25:20 2025 GMT
Subject: CN=a3d7c4566abcbf4de15347b50da696f06cd90b6b6d82549fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:bf:5f:6f:8d:00:c7:69:18:7d:1a:b5:8f:
32:9e:29:0e:6c:14:4b:92:c9:14:be:df:27:f2:3b:
cd:8a:30:a1:cf:f2:36:be:0c:b9:32:3f:ec:d0:ae:
6c:a9:0b:22:9b:c2:b2:59:9f:a8:73:cc:43:f9:82:
7b:7c:f8:9c:a2:f6:e1:af:16:79:ac:e7:1d:47:d8:
7b:92:a7:3a:c9:f0:fc:33:15:11:32:bf:0c:b2:2c:
50:3c:c0:36:a5:b7:6d:0e:6b:bd:c3:ba:b0:e5:b4:
ad:bc:57:1e:b2:44:91:af:b1:1d:f1:76:46:0b:b4:
58:b8:86:18:9a:60:f2:59:0e:44:5b:6f:2d:1f:89:
f6:d9:27:8a:17:58:d0:9e:4a:cb:02:20:31:3a:44:
15:86:86:98:ff:10:f2:6a:0f:3b:88:3f:00:54:a3:
93:a0:df:df:6c:22:ba:f0:a6:1a:07:9c:eb:89:7a:
54:bb:26:d1:6b:03:34:94:2e:35:0c:3b:e6:e3:12:
64:0b:4a:cb:16:38:8b:6e:97:0e:90:b7:8a:3a:e5:
40:ec:a3:e9:ea:ab:d1:e5:70:b2:d0:8e:91:8b:1a:
8e:ec:df:fb:97:8f:f8:c8:57:53:df:9f:ea:a3:0c:
31:4d:f5:8d:7b:47:d0:79:b4:a3:c5:2f:ad:eb:ea:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:41:33:75:24:3C:D3:C1:29:A3:81:B8:A7:A8:03:22:97:6E:05:A7
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/HYSP/17
RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/17/A7413375243CD3C129A381B8A7A80322976E05A7.mft
RPKI Notify - URI:https://rpki.co/rrdp/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.crl
X509v3 Authority Key Identifier:
keyid:83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.248.0/24
149.112.53.0/24
IPv6:
2602:fa90::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:de:80:7e:93:75:7b:51:c3:df:0a:f9:07:8a:30:89:03:c7:
1b:55:af:04:4f:14:8c:58:9b:10:0e:e1:0d:c9:92:5a:ad:39:
5e:6b:5f:1e:90:fa:6a:ce:e1:b0:82:d7:71:9c:9e:c1:16:92:
d3:05:78:f6:57:12:06:ac:41:1e:16:e6:67:16:7c:e8:1e:0c:
9b:6f:77:f4:15:70:6e:ed:39:4b:fe:ba:4f:09:c5:2f:03:c1:
5b:a4:5f:a6:82:ec:4e:44:8b:24:cd:e1:b9:7f:09:68:9e:81:
32:52:50:35:8c:9a:72:95:07:b4:63:2a:76:67:ce:d8:16:9d:
0a:42:b7:c2:e7:93:03:d1:b9:11:cd:66:b4:81:90:dd:a3:69:
5a:17:c3:30:98:55:16:07:23:54:b3:22:ed:b5:87:e0:07:10:
eb:52:96:73:96:c0:43:bb:45:a9:d7:55:38:2f:39:87:18:d0:
c9:a8:68:50:6a:97:7f:d3:20:56:11:c5:e5:2e:e0:63:33:66:
c6:92:b0:05:b4:35:9a:d8:de:48:87:95:3f:da:1c:35:4d:8d:
6c:1c:4d:c2:02:66:83:fc:c8:eb:8e:02:02:27:ec:3f:60:46:
65:53:92:80:a1:85:fc:e5:0b:ad:7a:f2:72:db:3d:e9:2e:21:
62:0a:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:51 2023 by rpki-client on console-fra.rpki-client.org