Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.cer
File: 67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.cer (raw, json)
Hash identifier: islEBJ6suJR1Gq9uC8GDSe7uWmq6Hlt/QpftK5Z85yo=
Subject key identifier: 67:DA:C6:BF:E8:CF:4F:99:CC:7D:E4:76:F2:D7:C1:1D:D2:53:70:2A
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 096AA731B999CFE0D3BA96A5A044BD82E6609D50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 18 Jul 2023 18:53:01 +0000
Certificate not after: Tue 16 Jul 2024 18:58:01 +0000
Subordinate resources: IP: 128.254.204.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:6a:a7:31:b9:99:cf:e0:d3:ba:96:a5:a0:44:bd:82:e6:60:9d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Jul 18 18:53:01 2023 GMT
Not After : Jul 16 18:58:01 2024 GMT
Subject: CN=67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:01:22:e4:75:a8:20:fc:68:27:42:2a:66:
11:56:8e:36:30:6d:91:6e:84:ba:3a:4f:f7:5b:e4:
a1:56:5a:22:6b:f9:ef:0e:ed:49:15:1c:ad:9e:c8:
c0:6b:b5:df:3a:3c:51:3d:49:b2:7e:42:d0:9b:f6:
15:bf:22:7a:8d:39:e0:3d:c6:db:3c:95:46:6d:a8:
da:ae:1e:3b:51:03:be:46:50:3c:94:91:e2:19:1d:
1b:e9:20:fc:52:ea:9d:97:dc:25:9b:5c:ef:2d:07:
d1:32:dd:0f:47:3b:47:4a:a0:a9:32:d7:dc:02:50:
10:3e:67:f6:f2:07:73:bd:33:53:d0:6d:df:d5:bc:
aa:cc:73:b7:ef:25:5e:1f:8c:d2:8e:38:27:8d:73:
6b:c1:02:cc:6c:55:26:b4:cc:5a:6c:49:6a:51:98:
94:6a:d2:b4:44:93:e3:d5:86:24:a5:bc:6a:56:ee:
7d:e0:1f:8a:67:08:d0:02:02:a7:5f:85:e2:ed:98:
b7:bd:84:d2:74:da:25:f3:5c:92:c0:e5:80:ba:04:
66:05:11:b5:22:db:8e:ce:84:6f:64:ef:9d:67:b8:
ba:ab:f5:81:0c:e4:90:c6:76:45:2e:1d:fc:b8:3d:
e5:64:d9:0d:24:7d:b7:79:44:ee:76:e1:d9:2e:79:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
67:DA:C6:BF:E8:CF:4F:99:CC:7D:E4:76:F2:D7:C1:1D:D2:53:70:2A
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b1:9a:3a:23:1c:dc:c7:30:68:3e:a7:ce:6c:88:21:70:4b:
c1:c5:4a:f2:45:45:49:8e:f8:58:17:7b:f5:87:08:71:4f:65:
1b:5c:89:9e:48:78:a6:ec:20:ad:6e:ac:98:19:34:a7:eb:53:
f2:2c:0c:a9:b0:81:6c:f9:e7:7c:ac:2d:b7:e1:93:99:cc:d2:
66:11:c8:52:1d:89:ce:9d:13:1f:96:98:82:1d:82:b6:4d:27:
a2:dd:e3:91:06:97:75:96:ef:75:af:8b:20:42:f6:83:8d:bf:
17:33:7a:a1:43:21:4d:75:d7:10:0d:dc:fe:5a:c7:64:12:b3:
49:2d:e7:f1:f6:c7:4f:6d:bc:67:fc:e5:c5:37:0d:f8:4b:c7:
d1:ee:75:70:f0:d5:a6:5a:f7:1b:62:4e:2a:bb:d6:49:3a:6a:
f5:8c:9c:68:fd:7c:10:ac:31:4c:24:c0:28:8b:b4:53:c9:a6:
34:ac:48:f0:30:9e:76:cc:be:07:84:65:91:8f:e5:9b:48:30:
cd:a7:51:b0:dc:cf:ce:75:09:16:07:43:02:64:86:ba:b3:b1:
c1:24:61:0c:7e:69:9c:d1:5d:fd:fe:e7:b3:87:77:bc:c2:09:
f6:50:53:27:4d:fc:5f:eb:37:e8:a4:f6:dc:d5:7d:38:56:22:
23:80:ca:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:16 2024 by rpki-client on console-ams.rpki-client.org