Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
File: 1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer (raw, json)
Hash identifier: fY/z1QgnhZ1M26Q1oZIiBjav/f1aJhuG8YOPg51IsAA=
Subject key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F432858490F746F3488361DBBF12B8500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 03 Mar 2025 01:45:33 +0000
Certificate not after: Sun 06 Jun 2027 00:45:33 +0000
Subordinate resources: AS: 4465 -- 4468
AS: 5727 -- 5731
AS: 6269
AS: 6478
AS: 7018
IP: 12.0.0.0/8
IP: 165.238.0.0/16
IP: 199.37.0.0/16
IP: 199.69.0.0 -- 199.70.255.255
IP: 204.127.0.0/16
IP: 207.116.0.0/16
IP: 207.140.0.0/15
IP: 207.146.0.0/15
IP: 207.242.0.0/15
IP: 209.36.0.0/15
IP: 209.64.0.0/15
Validation: Failed, certificate revoked on Tue 18 Mar 2025 19:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:74:6f:34:88:36:1d:bb:f1:2b:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Mar 3 01:45:33 2025 GMT
Not After : Jun 6 00:45:33 2027 GMT
Subject: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:a4:f2:25:11:58:51:83:db:d9:0b:2b:84:
13:81:d8:b5:a0:12:ac:78:51:b6:c7:26:90:b6:3f:
05:60:67:8a:70:97:f6:5b:bd:19:44:35:d1:84:83:
1b:42:e5:55:63:22:a4:ef:64:a1:0c:1f:df:61:f3:
d9:65:75:7c:9a:1a:6d:92:63:ee:ae:56:b9:c2:53:
64:0a:7c:bd:b1:7f:b2:42:3d:ab:16:2b:cf:a3:ca:
22:ae:7e:49:5d:c4:b9:98:d4:26:23:e9:7d:72:62:
f5:cb:8b:90:43:00:8c:73:b0:66:f0:25:e3:b1:e7:
f5:a4:bb:b4:55:ad:fd:c3:09:e6:99:9b:1a:23:33:
d3:ea:55:e3:7f:26:b1:ad:e7:48:a3:10:da:d5:5d:
69:6b:13:4f:af:99:9b:2d:ad:5f:5b:2b:7a:49:ef:
a5:fb:fe:9e:ba:6a:50:0b:c1:68:e4:11:6c:6b:03:
71:8a:8e:d0:ca:19:5b:4a:ef:55:2e:bf:c1:74:9f:
5c:37:12:94:7d:5e:53:5c:20:7e:75:28:08:98:19:
29:dc:49:aa:a9:cf:12:b1:e5:85:2f:56:40:22:77:
50:b1:b2:bd:04:9c:82:8f:72:82:be:31:08:26:9d:
43:4c:f1:d1:80:3e:df:72:04:13:47:55:94:a7:f0:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
12.0.0.0/8
165.238.0.0/16
199.37.0.0/16
199.69.0.0-199.70.255.255
204.127.0.0/16
207.116.0.0/16
207.140.0.0/15
207.146.0.0/15
207.242.0.0/15
209.36.0.0/15
209.64.0.0/15
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4465-4468
5727-5731
6269
6478
7018
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:db:c1:67:15:22:b1:06:68:7f:b3:a4:10:d9:65:ce:cb:59:
0b:f5:25:9c:78:78:17:99:1e:60:bf:3a:ac:d2:61:af:fc:b0:
9f:f3:b4:f8:68:2e:fc:16:53:d1:95:f6:e4:83:26:c9:06:1b:
96:7b:bb:02:56:65:8d:db:db:ed:2b:05:1c:65:b6:05:4b:c9:
4f:ec:28:57:37:34:43:b6:67:c7:c5:8b:be:ec:ca:55:47:1c:
9b:ca:96:06:a9:07:bf:21:3c:fe:bf:68:cb:4b:79:33:74:b3:
63:d8:28:cb:31:1b:a5:c7:bb:5c:b7:c5:c4:48:bd:64:59:50:
02:41:03:44:6f:49:0d:e3:5b:4b:a5:6b:ed:4f:4e:00:21:45:
38:cc:39:5f:0b:ed:62:c0:fd:e3:33:91:57:53:5c:7d:fe:8d:
39:72:69:36:3c:df:e9:40:a7:45:40:95:ef:04:60:83:8f:24:
a3:06:44:88:03:0d:8d:52:6f:95:01:b3:f0:1f:5d:8e:91:a3:
41:14:09:64:89:4d:db:61:2c:5b:5b:f2:95:5f:4b:33:d9:27:
96:91:f4:cb:2b:79:ad:11:dd:2d:6e:12:af:69:74:7f:0e:3f:
a7:4c:0c:c8:ec:a3:80:b5:bd:84:53:ea:80:cc:fc:24:b4:2f:
25:58:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:10:41 2025 by rpki-client