Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.cer
File: 5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.cer (raw, json)
Hash identifier: JtF7b1lLOKLX9ApFkuUlGPYb7VK6S9Z3zUaktC9C13Y=
Subject key identifier: 5B:14:75:6F:B1:A4:B4:48:55:41:E6:6E:3D:F5:DE:9C:C1:69:0F:58
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Certificate issuer: /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial: 2FA264A276E348EAC63D984761F5C0BB43AA7626
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/5/5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/5
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 21 Apr 2023 03:24:20 +0000
Certificate not after: Fri 19 Apr 2024 03:29:20 +0000
Subordinate resources: IP: 2602:fac2:6::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a2:64:a2:76:e3:48:ea:c6:3d:98:47:61:f5:c0:bb:43:aa:76:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Validity
Not Before: Apr 21 03:24:20 2023 GMT
Not After : Apr 19 03:29:20 2024 GMT
Subject: CN=5B14756FB1A4B4485541E66E3DF5DE9CC1690F58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:e0:7e:77:b0:41:80:92:c1:e5:8c:92:2b:
fe:4e:f8:aa:ef:32:eb:72:95:8c:14:cc:a9:51:1d:
18:3d:62:f4:ce:4b:a0:a6:82:2e:11:e7:03:54:62:
59:03:81:cb:a0:f0:76:0b:b9:b3:68:56:03:12:b4:
6a:1f:cf:ca:12:63:90:28:f2:45:63:50:bb:20:1e:
4b:cb:9e:19:b1:76:69:98:dc:d8:6e:fb:d0:a3:ec:
de:66:e9:96:d3:67:ce:5f:0c:27:35:eb:c2:89:96:
ce:d1:b8:19:23:ca:c8:7d:07:d3:91:b5:27:17:bd:
20:90:26:15:85:73:90:71:e7:89:73:dd:3a:a7:35:
48:20:2d:3d:e0:ce:86:eb:7a:da:3b:8f:a2:cc:f3:
85:44:fe:4e:93:10:c5:1c:64:74:ac:0b:4a:96:5c:
4a:53:78:60:29:eb:78:4c:56:04:a8:59:eb:a4:01:
01:b4:8e:53:d7:fe:88:c9:29:be:ae:b1:50:cf:39:
92:bc:e8:9b:3c:48:cb:9e:2c:a6:5a:e7:71:bb:53:
a6:bc:4c:2d:7c:5e:7b:24:bf:a3:90:70:19:f9:57:
14:90:fa:94:ad:ae:84:48:b7:7f:9f:00:6e:8e:62:
d8:be:54:5b:ae:aa:1c:4a:0b:ce:7b:e9:ec:a6:08:
6e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5B:14:75:6F:B1:A4:B4:48:55:41:E6:6E:3D:F5:DE:9C:C1:69:0F:58
X509v3 Authority Key Identifier:
keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/5
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/5/5B14756FB1A4B4485541E66E3DF5DE9CC1690F58.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fac2:6::/48
Signature Algorithm: sha256WithRSAEncryption
c1:d0:fe:ad:3e:c4:3c:95:f0:fb:10:99:59:d8:3a:99:2d:b0:
c9:4b:de:20:7e:5e:98:42:46:21:c3:51:c6:e3:76:46:da:70:
a0:fa:2f:4f:58:20:40:be:90:1e:46:da:bf:a1:72:78:06:ae:
5a:a3:cd:29:ad:1a:81:8e:a0:ca:9d:52:a5:1c:80:7d:14:b2:
e2:39:f5:d6:97:6c:f3:fd:7e:da:10:97:b5:0f:ad:d0:8c:07:
7b:e2:65:94:6f:9b:20:6a:12:ce:5b:f8:4c:26:72:79:08:8f:
70:85:4f:ba:5e:e9:23:23:34:43:e4:be:d6:5f:f7:b9:c1:6b:
7f:bb:4e:7c:87:fa:97:45:c7:9f:07:79:8d:ee:22:5f:d6:72:
0e:09:5f:00:64:27:32:f3:24:8b:2e:c9:c7:a0:60:51:fe:2c:
d4:ba:a2:fa:16:b4:e3:c8:db:48:c1:d0:40:6c:df:f9:1b:55:
a4:39:ac:87:30:b9:ef:4a:32:95:4b:37:34:c6:7c:2b:42:15:
69:2a:24:db:9c:02:c3:1b:a0:8d:b5:9d:82:98:fb:cd:6f:ff:
76:c8:55:d7:c4:bc:50:0f:d1:a7:55:34:35:33:68:8a:e1:cc:
9a:15:ec:ab:54:89:64:c0:b2:30:6b:78:25:35:b7:ac:b2:00:
60:d3:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org