Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a606af6924daa096357261d2b4d2d42628b6e013f.cer
File: eecf847d7a606af6924daa096357261d2b4d2d42628b6e013f.cer (raw, json)
Hash identifier: 4eoOLr2s1Lds1h0JcqWnupAEu33jEqnmr/gOYD9c4MM=
Subject key identifier: 91:5E:B6:22:C0:17:DE:5E:0E:99:AD:27:07:60:58:69:A3:91:4C:4B
Authority key identifier: 34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C
Certificate issuer: /CN=a01e997c-b89e-47c2-8d79-d31e58bc3ca4
Certificate serial: 010D0C9F4328584A63513FD8A3ECBD460585AD78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/497c5f27-1bf0-4e9e-b9da-37aa0a12d732/1/915EB622C017DE5E0E99AD2707605869A3914C4B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/497c5f27-1bf0-4e9e-b9da-37aa0a12d732/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 02 Jul 2025 19:29:30 +0000
Certificate not after: Tue 05 Oct 2027 19:29:30 +0000
Subordinate resources: IP: 23.132.184.0/23
IP: 64.49.12.0/22
IP: 128.254.204.0/22
IP: 192.138.210.0/23
IP: 192.209.62.0/23
IP: 216.73.156.0/22
IP: 2606:b940::/32
Validation: Failed, certificate revoked on Thu 03 Jul 2025 03:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:63:51:3f:d8:a3:ec:bd:46:05:85:ad:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01e997c-b89e-47c2-8d79-d31e58bc3ca4
Validity
Not Before: Jul 2 19:29:30 2025 GMT
Not After : Oct 5 19:29:30 2027 GMT
Subject: CN=eecf847d7a606af6924daa096357261d2b4d2d42628b6e013f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:73:50:6e:2e:f3:90:c5:4e:3f:94:44:fe:
d7:82:2d:65:f6:d9:93:31:ce:ae:b8:5a:ce:3d:49:
05:94:c3:87:b9:2d:71:fd:bc:ff:31:56:36:a7:1b:
96:4b:f7:31:f1:4a:d3:6e:d0:47:64:d3:da:ae:11:
ee:7b:87:bc:38:58:38:a3:d7:3c:d5:fa:92:51:85:
8d:b6:9f:1d:2d:b6:d8:1e:19:83:69:32:85:c4:50:
03:9b:68:37:d7:1c:11:c3:8b:ee:4e:4d:ee:39:c5:
9d:80:ba:8c:f0:b0:57:e1:50:4a:a8:09:df:58:d1:
cf:10:f4:0f:e9:5e:42:23:87:59:f6:5e:bf:6b:cb:
68:92:21:d6:e8:cc:5b:ae:5d:e6:a4:bb:87:98:e1:
f5:8e:f8:be:6c:2c:68:59:15:66:9e:ee:47:44:0c:
80:33:80:d8:a3:33:61:00:3e:83:d3:5c:40:0b:dc:
f8:8a:dd:3b:56:86:c6:ae:46:43:08:ff:a7:e9:a2:
a5:f4:82:c6:a5:71:14:b6:86:7a:fb:5f:97:1c:d1:
39:0a:6f:22:ae:6b:cb:1e:38:1b:b5:81:b5:59:eb:
1c:b0:a7:3f:05:3a:8f:8b:17:dc:f6:06:87:44:67:
a4:f3:d7:79:45:73:c2:9a:ad:1e:2c:b5:e2:8b:87:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5E:B6:22:C0:17:DE:5E:0E:99:AD:27:07:60:58:69:A3:91:4C:4B
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/497c5f27-1bf0-4e9e-b9da-37aa0a12d732/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/497c5f27-1bf0-4e9e-b9da-37aa0a12d732/1/915EB622C017DE5E0E99AD2707605869A3914C4B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
X509v3 Authority Key Identifier:
keyid:34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.184.0/23
64.49.12.0/22
128.254.204.0/22
192.138.210.0/23
192.209.62.0/23
216.73.156.0/22
IPv6:
2606:b940::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:4d:57:f4:38:bd:5d:38:62:ae:d2:4d:b3:66:de:78:23:d0:
11:da:73:a6:8b:33:f0:81:a3:73:72:68:d9:24:55:65:3e:f2:
cd:7a:d6:ce:d6:e3:56:b3:c1:1f:09:dc:f7:bf:15:94:6a:bf:
ec:16:9f:43:52:24:8e:75:95:9a:93:b5:7f:62:fa:2e:56:e6:
57:03:da:b5:80:88:88:b4:6c:e0:cc:14:4b:47:0e:d0:d9:49:
b5:14:ce:69:d1:d7:66:07:94:b5:73:37:c4:b9:af:03:03:ef:
6d:7c:3f:a1:87:9e:42:be:71:06:1b:a5:89:ac:13:59:fb:7d:
6e:42:75:13:dc:0e:3b:63:0c:19:fd:f8:03:40:af:32:c1:ab:
aa:45:c5:67:29:34:ae:61:01:38:4d:8d:e4:5f:43:8f:30:8a:
7a:4f:e4:e7:28:36:10:30:e6:45:60:db:06:c7:c6:be:95:ab:
1c:c7:14:82:9b:be:f9:ce:19:61:86:5a:68:0e:65:44:6d:4b:
32:68:33:aa:e0:f5:42:05:55:bd:a8:20:a5:68:a8:7f:fa:93:
97:51:07:41:25:02:66:d8:58:f0:9c:38:33:eb:b9:26:b5:97:
c4:d0:af:32:f3:2f:d4:39:f2:d7:54:ab:c2:b9:9f:be:6e:a4:
9c:2d:9f:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:32:49 2025 by rpki-client