Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.cer
File: 9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.cer (raw, json)
Hash identifier: rlyV2khtjLhIgWSV0v6BcpessXAfnHr70Z/JyBOBGmI=
Subject key identifier: 98:94:CB:F5:4A:B8:42:F7:D8:A9:BC:F4:4F:11:38:EF:C8:C8:BC:C8
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 27C21C217DEEFDA8E2C06338822EB698BC5644B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 18 Jan 2025 20:26:51 +0000
Certificate not after: Sat 17 Jan 2026 20:31:51 +0000
Subordinate resources: IP: 2a06:a007::/32
Validation: Failed, certificate revoked on Tue 18 Feb 2025 03:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c2:1c:21:7d:ee:fd:a8:e2:c0:63:38:82:2e:b6:98:bc:56:44:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 18 20:26:51 2025 GMT
Not After : Jan 17 20:31:51 2026 GMT
Subject: CN=9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:b2:b2:0d:cc:15:09:03:67:c0:7b:c6:ac:
d9:0c:31:53:d2:f2:69:1d:6a:ed:ac:88:06:60:27:
b5:20:07:30:01:3d:7f:bb:b2:65:35:ff:0d:e8:c3:
a1:8c:a7:8a:42:b2:7c:d1:2c:e4:a6:31:1d:f0:f1:
fb:41:b5:d4:70:d4:c5:d6:1e:23:4b:8a:be:a1:b8:
c2:f0:f5:d3:bb:02:ae:bd:b3:ef:5c:d9:ff:fc:42:
f3:48:55:db:2a:37:04:0b:82:6b:e9:5a:9a:4b:c4:
0b:70:4c:7c:3a:7c:ca:fe:47:16:73:f2:23:0b:bf:
18:80:95:20:2e:c9:b1:6a:4a:80:69:3b:6d:fc:d2:
e4:5c:45:07:cb:04:b7:36:97:73:6b:12:e2:be:ed:
b0:55:9a:f7:35:fb:be:aa:3d:b0:7d:93:3d:73:c7:
ab:c1:b8:68:89:b4:33:67:7a:e7:3b:39:37:91:1b:
82:f6:db:1d:32:b9:1c:db:7e:d7:19:b3:43:54:62:
3f:6d:e9:74:d9:21:25:01:49:83:e6:cc:f8:a5:a4:
63:fd:d6:55:68:43:bf:c0:17:ec:9d:46:10:ac:3b:
a9:8a:ec:62:ef:9e:7e:c4:d1:38:3e:9f:01:71:3c:
28:79:37:22:30:d5:c7:6e:96:df:09:10:a6:f1:9a:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
98:94:CB:F5:4A:B8:42:F7:D8:A9:BC:F4:4F:11:38:EF:C8:C8:BC:C8
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a007::/32
Signature Algorithm: sha256WithRSAEncryption
3f:b3:e0:aa:97:19:cb:c1:70:8b:1b:14:af:90:30:32:9b:84:
de:d5:78:f3:3f:b8:81:de:57:21:b6:ed:ad:67:dc:76:37:3a:
32:45:b1:7b:95:eb:eb:c0:0d:99:3c:64:e3:e7:29:5e:eb:9d:
90:38:01:cf:26:f2:93:24:6b:f6:64:21:d5:4f:b5:a8:6c:7a:
46:e0:a4:b0:c4:da:8e:81:a5:7c:d8:74:c3:8a:b0:9a:64:c3:
56:53:cd:cc:71:48:8f:d7:c4:a5:be:d2:e5:77:62:87:0d:0f:
ab:15:a2:bc:e4:e8:5f:03:36:9f:ba:de:07:4a:df:37:6e:4f:
27:78:eb:75:83:ff:63:ba:cd:f0:95:74:80:13:1d:10:b4:e3:
97:dc:f7:09:c1:b3:4b:88:02:38:44:33:be:c3:b2:df:a4:66:
37:a1:be:36:40:7b:76:3f:b9:40:79:25:03:0b:34:28:a6:89:
5d:e0:19:6a:cd:7b:34:52:c7:5f:df:da:d4:30:a1:69:85:6f:
34:65:5a:60:23:f8:07:cd:45:94:dd:64:e1:59:e1:88:e0:47:
b1:28:8e:e8:0d:db:a7:82:69:72:29:c5:d0:16:26:62:96:be:
e0:6d:85:d6:20:ce:79:68:84:d0:c3:0b:85:ac:33:1e:28:ce:
c4:d8:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:29:10 2025 by rpki-client