Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e45e553-c35b-440c-b6f0-30564492a788.cer
File: 2e45e553-c35b-440c-b6f0-30564492a788.cer (raw, json)
Hash identifier: sb5vgn5UereC5IhAk0EViCNDlttP93AM8RFc38jGACI=
Subject key identifier: 17:B0:26:FA:49:3E:24:4E:75:50:CA:68:14:68:90:2C:BA:47:67:15
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328583D209E8E52AB7E6DB997628600
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e45e553-c35b-440c-b6f0-30564492a788/2e45e553-c35b-440c-b6f0-30564492a788.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e45e553-c35b-440c-b6f0-30564492a788/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 04 Mar 2022 19:55:55 +0000
Certificate not after: Thu 04 Mar 2032 19:55:55 +0000
Subordinate resources: AS: 11588
AS: 18607
AS: 20446
AS: 29798
AS: 33438
IP: 69.16.128.0 -- 69.16.144.255
IP: 69.16.146.0/24
IP: 69.16.148.0 -- 69.16.156.255
IP: 69.16.158.0 -- 69.16.171.255
IP: 69.16.173.0 -- 69.16.191.255
IP: 74.209.128.0/20
IP: 205.185.194.0 -- 205.185.198.255
IP: 205.185.200.0 -- 205.185.208.255
IP: 205.185.210.0 -- 205.185.213.255
IP: 205.185.215.0 -- 205.185.217.255
IP: 205.185.219.0 -- 205.185.220.255
IP: 209.197.0.0/19
IP: 2001:1938::/32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:20:9e:8e:52:ab:7e:6d:b9:97:62:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Mar 4 19:55:55 2022 GMT
Not After : Mar 4 19:55:55 2032 GMT
Subject: CN=2e45e553-c35b-440c-b6f0-30564492a788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:61:41:5b:6f:aa:56:04:c2:4e:c2:e2:1a:df:
a9:d8:62:dc:ee:e9:44:17:b3:39:d2:01:80:d4:a8:
ef:5f:ba:14:87:f1:de:f4:27:89:0f:3b:e3:6d:6e:
1d:5a:e9:73:76:31:07:1f:a3:d5:10:59:70:a0:61:
46:f8:17:f7:63:30:46:21:02:54:c4:ba:ff:34:05:
84:29:2f:4c:b0:a6:a9:aa:16:bb:04:53:1b:fa:e9:
39:b6:63:f2:31:cd:a3:fb:5d:af:78:87:0e:db:34:
bf:ad:8f:65:79:83:3c:cb:c6:a3:a6:00:08:0f:dc:
77:7d:9a:14:31:47:43:db:c3:78:44:60:ae:90:f7:
a6:24:18:59:c0:92:48:7b:e2:28:02:68:05:04:80:
65:da:1d:12:5b:e5:f3:23:94:cf:a2:f7:fb:dc:e1:
70:8c:6d:cc:7d:27:ff:b5:01:54:17:0b:55:25:87:
a0:4c:3e:fd:cb:3b:21:30:d7:63:e0:f3:b2:b1:3c:
72:39:26:4d:71:8c:38:5c:c4:c1:29:63:64:eb:cc:
bc:c5:bb:98:61:3e:6b:59:19:fd:1a:35:ac:7c:37:
aa:54:5b:95:44:33:2f:86:31:1a:1c:11:19:3e:31:
12:9d:5e:5b:93:91:b2:c0:c0:3f:1e:17:31:d8:00:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B0:26:FA:49:3E:24:4E:75:50:CA:68:14:68:90:2C:BA:47:67:15
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e45e553-c35b-440c-b6f0-30564492a788/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e45e553-c35b-440c-b6f0-30564492a788/2e45e553-c35b-440c-b6f0-30564492a788.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
69.16.128.0-69.16.144.255
69.16.146.0/24
69.16.148.0-69.16.156.255
69.16.158.0-69.16.171.255
69.16.173.0-69.16.191.255
74.209.128.0/20
205.185.194.0-205.185.198.255
205.185.200.0-205.185.208.255
205.185.210.0-205.185.213.255
205.185.215.0-205.185.217.255
205.185.219.0-205.185.220.255
209.197.0.0/19
IPv6:
2001:1938::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11588
18607
20446
29798
33438
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:1a:ff:b2:69:fe:ec:ec:b5:f3:c8:3d:71:54:e9:b9:78:42:
8c:46:c6:bb:55:66:e9:87:49:dc:08:61:be:c8:91:cf:bf:79:
2d:37:e4:84:fd:b2:43:9c:aa:11:89:0f:0e:3d:09:be:87:e4:
03:04:27:f3:c5:68:be:77:e0:ec:8c:1b:c7:ac:70:5e:84:bb:
6d:80:a7:31:fd:92:40:45:91:7c:c8:9d:ff:6b:bc:01:72:2e:
c4:e7:01:26:d3:44:93:4c:ea:40:f2:14:b0:f0:26:f5:39:23:
df:6e:b8:88:e8:57:d7:c7:33:ca:e1:2b:7d:5b:2e:19:17:5a:
55:b0:3e:01:85:c9:52:0e:e1:4e:4f:5d:cc:96:9c:81:a1:ce:
d6:1f:15:a2:ac:30:57:dc:e8:67:ce:d1:3d:eb:cb:a8:64:9e:
d6:c7:f2:37:f7:c5:5d:aa:b9:3a:4d:ad:05:6e:77:a9:3f:99:
ea:2f:47:ef:43:28:b7:fc:2e:44:92:85:a4:6d:3f:a2:82:53:
46:e1:1a:98:aa:a4:b1:29:21:f7:71:23:1d:65:3f:24:a4:1d:
e5:c8:9b:ba:5c:37:0f:4a:7f:17:08:6a:57:cb:f4:da:59:b5:
4c:3a:a7:a6:54:60:4e:48:5d:f8:40:4c:41:b9:c7:6a:d4:b4:
28:bb:d7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:37 2023 by rpki-client on console-fra.rpki-client.org