Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
File: C646A4311598BE4C0EABD4E8817C773AACCFA862.cer (raw, json)
Hash identifier: yNYSP0Rei/Kny8Jg1c7w6mLj6JVq4a8hDOpJF1Y4LTg=
Subject key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 70D8B2DE239EC521BFDB8A879D824F64BC443578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.mft
caRepository: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/
Notify URL: https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before: Thu 29 Jun 2023 10:16:54 +0000
Certificate not after: Thu 27 Jun 2024 10:21:54 +0000
Subordinate resources: IP: 2a05:dfc2::/31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d8:b2:de:23:9e:c5:21:bf:db:8a:87:9d:82:4f:64:bc:44:35:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 29 10:16:54 2023 GMT
Not After : Jun 27 10:21:54 2024 GMT
Subject: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:4c:ce:a3:f6:57:35:2a:97:9a:11:93:cc:
44:98:14:d7:95:b9:eb:48:04:c0:9b:bb:ed:76:72:
d9:36:b3:6a:8a:ca:81:53:35:5e:5b:a9:9c:f1:d1:
50:b7:e0:b8:92:23:6e:23:f7:f3:d6:1d:68:24:67:
6f:42:b7:84:b9:c3:50:4e:a8:be:fe:84:71:cb:07:
6c:90:18:2e:fb:db:7f:45:6e:3d:34:39:fc:a7:9c:
70:0e:70:a1:83:0c:d9:b2:5e:07:2b:54:c2:ca:13:
7a:e1:ad:fa:53:ef:86:b4:4b:39:1c:8d:01:fc:fa:
95:f4:af:82:99:9f:0f:4d:bd:1e:92:01:30:34:f1:
52:42:80:cd:1c:0b:a0:b3:3b:07:c7:7c:7a:17:21:
5c:52:63:62:68:bf:65:10:5e:96:00:78:0f:d2:31:
ac:2b:81:6f:77:c0:f2:c5:76:e0:2c:90:72:9b:97:
4d:c2:7b:2c:bd:ff:70:82:fe:91:96:15:d4:75:24:
4d:5d:f1:fb:59:07:09:6b:17:e6:4b:b0:ab:06:0d:
7c:1f:5d:8a:1f:ed:d7:92:ee:e7:b8:de:62:e9:c0:
93:ab:45:14:34:44:47:33:78:09:31:96:4f:09:e6:
c7:1f:a8:61:37:42:25:16:c9:8c:31:ea:a9:2d:7f:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/
RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.mft
RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2::/31
Signature Algorithm: sha256WithRSAEncryption
af:a2:67:2b:93:8d:43:ec:90:86:43:cf:97:7e:ba:e3:14:5b:
35:78:d3:b2:e2:0a:57:e2:7e:c9:b7:58:25:0a:54:c3:4c:c4:
2e:5f:00:a7:4f:19:5a:ef:7b:23:a7:87:d7:e0:0d:9b:6b:c9:
fc:fd:3e:dd:ad:6d:5a:e6:dc:40:f2:0b:26:89:c2:ee:e4:1f:
8a:b2:81:d1:56:b8:46:d6:dd:b1:d6:39:9e:ba:4e:77:16:c8:
0f:f5:a5:00:58:0a:ae:ee:c1:22:62:e9:11:a6:23:ea:48:24:
d4:78:e6:ad:3a:ae:5a:bb:91:75:0f:27:91:51:27:72:40:17:
b1:5a:5a:cf:18:3e:07:56:96:65:5f:2b:3f:f6:7f:ec:98:52:
fd:20:f4:12:18:4e:47:bc:90:46:8b:e7:27:4e:a4:79:9e:21:
1c:11:6d:f0:d1:10:73:d2:a3:b4:49:fa:d1:a0:24:ee:db:cc:
27:4e:cc:ce:3c:59:f4:2b:7a:98:19:0a:15:c4:91:bd:c0:56:
d0:81:2f:d7:7c:0f:d5:d9:48:39:9b:df:b4:bc:ee:34:e4:8b:
71:a6:38:90:ce:9f:b5:03:d5:f6:16:2f:23:83:e4:2c:11:ec:
cf:61:a5:ce:9d:5d:06:75:1b:3b:a6:d2:cf:ed:25:dc:68:0f:
e2:82:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:44 2025 by rpki-client