![](/console.gif)
Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/9F176E94D0B8F4A60E553EF6C51DFEFFDB896753.cer
File: 9F176E94D0B8F4A60E553EF6C51DFEFFDB896753.cer (raw, json)
Hash identifier: JY5HSIUTmO5ynTCgx0Uv8i8jeXieYEOBqiY6jET2iko=
Subject key identifier: 9F:17:6E:94:D0:B8:F4:A6:0E:55:3E:F6:C5:1D:FE:FF:DB:89:67:53
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 3B88EBB09AD3A7212444DABEFB781BDB01389ED0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Manifest: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/3/9F176E94D0B8F4A60E553EF6C51DFEFFDB896753.mft
caRepository: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/3/
Notify URL: https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before: Tue 09 May 2023 01:31:06 +0000
Certificate not after: Tue 07 May 2024 01:36:06 +0000
Subordinate resources: IP: 192.209.63.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:88:eb:b0:9a:d3:a7:21:24:44:da:be:fb:78:1b:db:01:38:9e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: May 9 01:31:06 2023 GMT
Not After : May 7 01:36:06 2024 GMT
Subject: CN=9F176E94D0B8F4A60E553EF6C51DFEFFDB896753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:d9:67:24:a5:20:f7:2f:67:55:ee:fd:80:
0a:13:5b:cd:f7:9a:4f:94:78:4c:f8:f8:7b:67:b3:
d7:49:15:36:f5:e5:2c:a8:af:15:f5:27:9f:0a:f9:
f5:8f:a4:ba:08:34:46:0b:24:63:19:69:eb:36:34:
1c:a6:37:f5:b6:e3:64:42:83:a6:78:8c:71:72:6c:
77:36:f2:e0:c4:fe:f9:74:da:60:24:e9:5d:d5:bf:
85:9e:76:ed:9e:27:e8:bb:e7:30:cb:37:b1:6a:f0:
fe:5f:4b:52:f2:00:93:1e:65:23:64:a4:b7:78:0b:
28:90:20:bb:3e:ba:7f:13:75:b9:dd:ef:09:3a:0f:
2d:36:3d:7b:9a:1a:77:06:90:8d:d9:3e:19:63:7a:
36:2a:e8:85:ae:c3:b0:67:4e:56:61:83:08:03:0c:
b5:c0:bb:b5:2b:33:99:9c:8b:8b:d1:07:97:9a:05:
20:74:1c:be:db:24:a1:37:1f:4a:fa:63:f1:8a:66:
db:40:c6:dd:ee:5e:00:36:80:5f:6f:be:38:43:83:
bc:d8:15:ac:e4:30:4f:fd:75:fb:b8:a9:88:73:7a:
82:9b:18:de:eb:d2:37:5c:1e:a8:42:d3:e4:00:cb:
33:26:38:be:38:c0:88:0c:8a:63:47:f8:13:cc:3f:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9F:17:6E:94:D0:B8:F4:A6:0E:55:3E:F6:C5:1D:FE:FF:DB:89:67:53
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/3/
RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/3/9F176E94D0B8F4A60E553EF6C51DFEFFDB896753.mft
RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.209.63.0/24
Signature Algorithm: sha256WithRSAEncryption
44:56:b4:12:4d:af:41:c3:f3:dd:ec:aa:a1:97:2d:1a:46:21:
90:ff:09:b5:31:bf:7b:7e:15:c9:44:d8:9e:88:a6:78:dd:77:
9f:0d:3d:b7:8d:7f:30:93:47:73:32:89:e8:ff:e5:c1:e5:eb:
1e:73:28:d2:f0:8e:45:71:fb:0d:e8:d9:85:2d:9c:8a:4e:b1:
1e:34:75:07:bf:d4:93:10:df:f8:02:83:f8:3c:8b:ab:18:5b:
4c:39:30:c5:42:e1:08:4e:5f:b8:a4:e1:4f:28:4e:f3:6b:97:
b7:04:e1:15:a8:4e:fd:b4:60:82:cc:df:7f:f4:eb:03:1d:c0:
2a:df:96:b7:88:8e:aa:a8:60:9b:12:bd:d8:82:11:f5:16:68:
2b:14:5f:46:c8:76:10:eb:e0:16:13:f8:0e:9b:58:13:01:7c:
47:43:86:f7:85:67:fa:24:9b:3f:ff:2b:12:9f:0c:59:8c:f4:
90:98:64:10:cd:63:02:ee:c3:3d:fa:99:3e:0e:9f:11:ac:22:
11:42:5b:16:cf:3e:1d:46:2d:c2:33:49:7b:d4:96:b3:47:34:
59:71:1a:2e:0b:1d:e4:ac:84:5c:ae:ff:e0:fe:bb:c7:8a:b1:
69:53:9b:88:45:4a:d6:6f:65:03:1b:56:1f:6f:99:69:36:07:
a9:aa:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:53 2025 by rpki-client