Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
File: 249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer (raw, json)
Hash identifier: QJD4rGwaPfXLnmWjV1oEANk26p/7BuzOzdBbIRj3SDc=
Subject key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328583F38DB11D49F959778D2FA7700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 12 Sep 2022 21:51:07 +0000
Certificate not after: Tue 14 Mar 2028 19:59:33 +0000
Subordinate resources: IP: 3.0.0.0/8
IP: 13.24.0.0 -- 13.59.255.255
IP: 13.112.0.0/14
IP: 13.124.0.0/14
IP: 13.200.0.0 -- 13.239.255.255
IP: 13.244.0.0 -- 13.251.255.255
IP: 15.129.0.0 -- 15.133.255.255
IP: 15.136.0.0 -- 15.138.255.255
IP: 15.140.0.0 -- 15.142.255.255
IP: 15.144.0.0/14
IP: 15.149.0.0 -- 15.150.255.255
IP: 15.152.0.0 -- 15.158.255.255
IP: 15.160.0.0 -- 15.162.255.255
IP: 15.164.0.0 -- 15.172.255.255
IP: 15.174.0.0/16
IP: 15.177.0.0/16
IP: 15.179.0.0 -- 15.188.255.255
IP: 15.190.0.0 -- 15.193.255.255
IP: 15.196.0.0 -- 15.200.255.255
IP: 15.202.0.0/16
IP: 15.205.0.0 -- 15.207.255.255
IP: 15.209.0.0 -- 15.210.255.255
IP: 15.212.0.0/14
IP: 15.220.0.0/14
IP: 15.228.0.0/14
IP: 15.234.0.0/16
IP: 15.236.0.0/14
IP: 15.242.0.0/16
IP: 15.244.0.0 -- 15.248.255.255
IP: 15.250.0.0/15
IP: 15.253.0.0 -- 15.255.255.255
IP: 18.32.0.0 -- 18.255.255.255
IP: 34.192.0.0/10
IP: 35.71.64.0 -- 35.127.255.255
IP: 35.152.0.0 -- 35.183.255.255
IP: 47.10.0.0/16
IP: 47.128.0.0/14
IP: 47.255.0.0/16
IP: 52.0.0.0 -- 52.79.255.255
IP: 52.84.0.0 -- 52.95.255.255
IP: 52.119.128.0/17
IP: 52.124.128.0/17
IP: 52.144.128.0/17
IP: 52.192.0.0 -- 52.223.191.255
IP: 54.64.0.0/11
IP: 54.144.0.0 -- 54.221.255.255
IP: 54.224.0.0/11
IP: 128.125.0.0/16
IP: 128.181.0.0/16
IP: 128.188.0.0/16
IP: 129.47.0.0/16
IP: 129.160.0.0/16
IP: 130.71.0.0/16
IP: 130.101.128.0/17
IP: 130.205.0.0/16
IP: 134.62.0.0 -- 134.64.255.255
IP: 136.3.0.0 -- 136.7.255.255
IP: 136.11.0.0 -- 136.16.255.255
IP: 136.19.0.0 -- 136.21.255.255
IP: 136.128.0.0 -- 136.130.255.255
IP: 136.132.0.0/16
IP: 136.134.0.0 -- 136.140.255.255
IP: 137.114.0.0/16
IP: 138.111.0.0/16
IP: 140.145.0.0/16
IP: 141.139.0.0/16
IP: 141.181.0.0 -- 141.182.255.255
IP: 141.185.0.0 -- 141.186.255.255
IP: 143.204.0.0/16
IP: 144.40.0.0/16
IP: 144.207.0.0/16
IP: 144.220.0.0/16
IP: 146.9.0.0/16
IP: 146.65.0.0/16
IP: 146.78.0.0/16
IP: 146.207.0.0/16
IP: 148.55.0.0/16
IP: 148.162.0.0/16
IP: 149.80.0.0/16
IP: 150.126.0.0/16
IP: 150.222.0.0/16
IP: 151.149.0.0/16
IP: 151.162.0.0/16
IP: 152.25.0.0/16
IP: 152.137.0.0/16
IP: 152.155.0.0/16
IP: 153.41.0.0/16
IP: 153.49.0.0/16
IP: 155.38.0.0/16
IP: 155.146.0.0/16
IP: 156.7.0.0/16
IP: 156.64.0.0/16
IP: 157.241.0.0/16
IP: 158.141.0.0/16
IP: 158.221.0.0/16
IP: 159.209.0.0/16
IP: 160.1.0.0/16
IP: 161.180.0.0/16
IP: 161.188.0.0 -- 161.188.203.255
IP: 161.188.205.0 -- 161.188.209.255
IP: 161.188.213.0 -- 161.188.254.255
IP: 161.191.0.0/16
IP: 161.206.0.0/16
IP: 162.137.0.0/16
IP: 165.94.0.0/16
IP: 165.208.0.0/16
IP: 167.149.0.0/16
IP: 167.166.0.0/16
IP: 168.163.0.0/16
IP: 169.205.0.0/16
IP: 170.58.0.0/16
IP: 170.120.0.0/16
IP: 192.39.0.0/16
IP: 206.70.0.0/16
Validation: Failed, certificate revoked on Wed 01 Feb 2023 20:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:38:db:11:d4:9f:95:97:78:d2:fa:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Sep 12 21:51:07 2022 GMT
Not After : Mar 14 19:59:33 2028 GMT
Subject: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:8c:90:0a:aa:7f:b1:61:60:77:72:87:6b:
8d:9c:84:01:0f:a4:e2:62:78:3d:f7:06:0f:8b:25:
f3:9d:3e:d6:37:3b:ac:0e:42:36:8e:64:3b:0d:e1:
ab:d2:fe:e7:a1:c7:9f:02:88:d7:a6:c2:36:fc:37:
ae:49:77:24:b1:fe:95:ae:fc:67:e8:fc:ed:67:2e:
a3:1a:15:f9:95:67:1b:18:f2:8d:2c:66:c3:1c:a6:
a5:e7:fe:b7:73:6e:c1:ba:1d:4e:f1:2e:32:b6:36:
00:26:e2:d1:94:9d:37:f3:9e:b0:39:4c:09:eb:e5:
e3:87:fc:3d:0d:17:10:62:d8:12:be:76:e1:22:b3:
13:1b:10:0c:35:a2:47:68:32:43:0c:db:5f:ef:65:
72:f1:6d:a6:02:37:ff:6a:ea:10:c8:b6:71:21:43:
30:14:cb:d9:bb:e6:7c:ef:e4:08:f9:8d:d7:32:e6:
d8:ed:55:5f:89:e3:c4:d2:a1:9e:0e:dd:ce:32:c0:
f6:fb:cc:37:d6:68:d1:9c:e8:df:30:66:03:38:6e:
c9:37:88:ca:08:b3:e1:7b:cd:87:82:72:84:07:41:
a0:9d:11:98:f0:26:e6:d6:5b:75:b4:1e:e5:4a:07:
db:30:9a:c8:c0:92:b0:70:e5:16:8a:f5:3f:07:8b:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
3.0.0.0/8
13.24.0.0-13.59.255.255
13.112.0.0/14
13.124.0.0/14
13.200.0.0-13.239.255.255
13.244.0.0-13.251.255.255
15.129.0.0-15.133.255.255
15.136.0.0-15.138.255.255
15.140.0.0-15.142.255.255
15.144.0.0/14
15.149.0.0-15.150.255.255
15.152.0.0-15.158.255.255
15.160.0.0-15.162.255.255
15.164.0.0-15.172.255.255
15.174.0.0/16
15.177.0.0/16
15.179.0.0-15.188.255.255
15.190.0.0-15.193.255.255
15.196.0.0-15.200.255.255
15.202.0.0/16
15.205.0.0-15.207.255.255
15.209.0.0-15.210.255.255
15.212.0.0/14
15.220.0.0/14
15.228.0.0/14
15.234.0.0/16
15.236.0.0/14
15.242.0.0/16
15.244.0.0-15.248.255.255
15.250.0.0/15
15.253.0.0-15.255.255.255
18.32.0.0-18.255.255.255
34.192.0.0/10
35.71.64.0-35.127.255.255
35.152.0.0-35.183.255.255
47.10.0.0/16
47.128.0.0/14
47.255.0.0/16
52.0.0.0-52.79.255.255
52.84.0.0-52.95.255.255
52.119.128.0/17
52.124.128.0/17
52.144.128.0/17
52.192.0.0-52.223.191.255
54.64.0.0/11
54.144.0.0-54.221.255.255
54.224.0.0/11
128.125.0.0/16
128.181.0.0/16
128.188.0.0/16
129.47.0.0/16
129.160.0.0/16
130.71.0.0/16
130.101.128.0/17
130.205.0.0/16
134.62.0.0-134.64.255.255
136.3.0.0-136.7.255.255
136.11.0.0-136.16.255.255
136.19.0.0-136.21.255.255
136.128.0.0-136.130.255.255
136.132.0.0/16
136.134.0.0-136.140.255.255
137.114.0.0/16
138.111.0.0/16
140.145.0.0/16
141.139.0.0/16
141.181.0.0-141.182.255.255
141.185.0.0-141.186.255.255
143.204.0.0/16
144.40.0.0/16
144.207.0.0/16
144.220.0.0/16
146.9.0.0/16
146.65.0.0/16
146.78.0.0/16
146.207.0.0/16
148.55.0.0/16
148.162.0.0/16
149.80.0.0/16
150.126.0.0/16
150.222.0.0/16
151.149.0.0/16
151.162.0.0/16
152.25.0.0/16
152.137.0.0/16
152.155.0.0/16
153.41.0.0/16
153.49.0.0/16
155.38.0.0/16
155.146.0.0/16
156.7.0.0/16
156.64.0.0/16
157.241.0.0/16
158.141.0.0/16
158.221.0.0/16
159.209.0.0/16
160.1.0.0/16
161.180.0.0/16
161.188.0.0-161.188.203.255
161.188.205.0-161.188.209.255
161.188.213.0-161.188.254.255
161.191.0.0/16
161.206.0.0/16
162.137.0.0/16
165.94.0.0/16
165.208.0.0/16
167.149.0.0/16
167.166.0.0/16
168.163.0.0/16
169.205.0.0/16
170.58.0.0/16
170.120.0.0/16
192.39.0.0/16
206.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:bd:f3:06:dc:82:b6:ab:21:da:96:28:70:b7:26:7f:db:7a:
1e:5b:87:b0:4a:8f:f4:93:c7:62:c3:0a:d9:fd:88:b6:12:69:
a7:72:42:3a:9b:65:48:50:b4:f2:f5:3a:24:99:97:92:f4:c5:
7b:ba:ce:fe:4d:73:05:18:00:01:88:fa:23:15:45:ac:65:8d:
5b:ca:76:29:1b:f6:c1:6f:cb:4f:e5:f5:6e:f3:90:ec:0b:f1:
92:46:87:bf:c7:3a:40:02:42:a3:5b:19:b2:9a:0c:9f:42:44:
10:97:fa:a1:22:c0:67:d3:3e:b9:92:a6:41:0c:f9:ad:5d:91:
a0:91:28:b2:bc:92:e5:b6:9a:d0:1a:f7:34:3e:2d:49:93:b7:
03:fe:b2:42:6c:04:5c:c9:37:b7:43:7e:47:65:53:ca:b4:36:
86:c6:ef:64:7a:87:9e:ba:91:70:fc:a7:24:28:c3:c5:48:2d:
2d:4a:47:16:ed:1e:8d:57:ea:96:e3:48:42:46:7e:78:46:e9:
7a:80:d4:62:7d:10:0e:37:0d:64:4e:82:2b:db:56:60:90:3f:
1c:1b:0d:4e:b6:ce:81:90:f0:94:96:20:f4:e0:eb:bf:93:38:
05:70:10:d1:0f:6e:01:7b:d3:db:36:5c:75:67:d5:2a:bd:48:
c6:ca:a9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:22:33 2024 by rpki-client on console-ams.rpki-client.org