Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b2e41b1-e97f-4595-8a77-77338bad4a7b.cer
File: 3b2e41b1-e97f-4595-8a77-77338bad4a7b.cer (raw, json)
Hash identifier: LJAzcOxYLcOEpb4a5uhX5Xd6fjI0jotfj41lbgqyesU=
Subject key identifier: 9C:31:E5:4A:DA:C8:C4:04:8A:03:79:0E:37:94:41:F4:F3:6B:27:DF
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328583D52787B63C62CE0A5C2FEF000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b2e41b1-e97f-4595-8a77-77338bad4a7b/3b2e41b1-e97f-4595-8a77-77338bad4a7b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b2e41b1-e97f-4595-8a77-77338bad4a7b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 22 Mar 2022 16:29:37 +0000
Certificate not after: Mon 22 Mar 2032 16:29:37 +0000
Subordinate resources: AS: 1347
AS: 5006
AS: 5715
AS: 7821
AS: 11774
AS: 14370
AS: 15219
AS: 19897
AS: 40160
IP: 64.52.0.0/23
IP: 64.52.5.0/24
IP: 64.52.10.0/24
IP: 64.52.20.0/24
IP: 64.190.0.0/23
IP: 64.190.3.0/24
IP: 64.190.5.0 -- 64.190.9.255
IP: 64.190.82.0/24
IP: 64.190.136.0/24
IP: 64.190.147.0/24
IP: 64.190.200.0/24
IP: 64.190.207.0/24
IP: 64.190.241.0/24
IP: 74.120.92.0/22
IP: 137.192.0.0/16
IP: 192.207.245.0/24
IP: 192.209.20.0/22
IP: 198.174.0.0/16
IP: 199.86.0.0/16
IP: 199.199.0.0/16
IP: 204.72.0.0/15
IP: 204.220.0.0/15
IP: 206.8.0.0/14
IP: 206.144.0.0/14
IP: 207.229.192.0/18
IP: 208.68.84.0/22
IP: 208.83.16.0/22
IP: 208.93.224.0/22
IP: 209.18.128.0/17
IP: 209.32.0.0/16
IP: 209.105.0.0/17
IP: 216.198.65.0/24
IP: 216.230.66.0/24
IP: 216.230.80.0/23
IP: 216.230.85.0/24
IP: 216.230.88.0/24
IP: 216.230.90.0/24
IP: 216.246.203.0/24
IP: 2604:3000::/32
IP: 2604:d380::/32
IP: 2605:6d80::/32
Validation: Failed, certificate revoked on Wed 30 Mar 2022 18:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:52:78:7b:63:c6:2c:e0:a5:c2:fe:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Mar 22 16:29:37 2022 GMT
Not After : Mar 22 16:29:37 2032 GMT
Subject: CN=3b2e41b1-e97f-4595-8a77-77338bad4a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:bc:6f:7c:25:c9:50:26:f4:a6:ac:b2:1a:
35:9d:fb:74:27:10:d4:7e:d0:2a:fb:16:f0:23:c7:
e6:2c:4d:57:1b:ce:cc:31:69:47:2f:ad:ec:3f:d0:
7d:6b:07:bc:29:2e:cb:56:08:93:66:1f:04:68:b5:
b4:ff:e4:95:80:15:e7:86:d1:15:70:24:98:83:7e:
89:58:be:dd:21:1a:a5:c1:2c:04:af:bc:2e:2f:3d:
dd:28:46:bf:22:e1:55:7f:83:38:5d:4c:18:64:9f:
03:9d:b5:cc:c4:21:a5:32:b3:9d:67:aa:22:ff:a4:
8d:77:a3:94:42:04:b3:6f:06:71:2d:cf:44:7f:0f:
50:90:43:2c:ec:bf:31:d2:b1:e3:ea:22:2a:88:8a:
61:0a:f2:fc:ad:5f:d0:78:07:a3:e3:e2:c1:17:cc:
5f:3e:c3:90:85:37:75:f3:4e:f9:46:65:79:4c:0a:
46:13:21:77:49:bf:95:21:71:c6:e8:89:f0:58:31:
9b:39:a2:d9:2f:e0:32:b2:57:df:92:f7:3a:ee:e2:
cc:3c:b8:b7:65:f3:b1:46:90:f7:ad:9c:24:56:60:
68:14:19:af:45:2d:19:21:a5:db:ef:1d:9c:5b:75:
56:fc:79:cf:25:df:ba:12:bf:b1:67:6f:f8:15:36:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:31:E5:4A:DA:C8:C4:04:8A:03:79:0E:37:94:41:F4:F3:6B:27:DF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b2e41b1-e97f-4595-8a77-77338bad4a7b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b2e41b1-e97f-4595-8a77-77338bad4a7b/3b2e41b1-e97f-4595-8a77-77338bad4a7b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
64.52.0.0/23
64.52.5.0/24
64.52.10.0/24
64.52.20.0/24
64.190.0.0/23
64.190.3.0/24
64.190.5.0-64.190.9.255
64.190.82.0/24
64.190.136.0/24
64.190.147.0/24
64.190.200.0/24
64.190.207.0/24
64.190.241.0/24
74.120.92.0/22
137.192.0.0/16
192.207.245.0/24
192.209.20.0/22
198.174.0.0/16
199.86.0.0/16
199.199.0.0/16
204.72.0.0/15
204.220.0.0/15
206.8.0.0/14
206.144.0.0/14
207.229.192.0/18
208.68.84.0/22
208.83.16.0/22
208.93.224.0/22
209.18.128.0/17
209.32.0.0/16
209.105.0.0/17
216.198.65.0/24
216.230.66.0/24
216.230.80.0/23
216.230.85.0/24
216.230.88.0/24
216.230.90.0/24
216.246.203.0/24
IPv6:
2604:3000::/32
2604:d380::/32
2605:6d80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1347
5006
5715
7821
11774
14370
15219
19897
40160
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:1e:34:5d:af:62:4d:50:eb:ae:58:d3:1e:cd:fa:f6:99:c2:
14:eb:21:a6:5e:f2:9b:5b:d8:24:75:17:f5:a2:2e:23:3a:5f:
3b:aa:8f:e6:8d:40:24:87:0b:a9:63:6d:ad:05:cb:26:10:f6:
c8:9f:b8:cf:1a:a8:ee:3b:2f:30:37:84:f7:86:b2:22:0b:a8:
63:18:a5:89:d9:46:de:75:02:74:4c:09:28:c1:4f:37:9a:af:
8d:75:da:50:fa:8b:01:a3:cd:3e:4d:c6:f6:a5:2a:3a:54:5d:
a9:fe:4b:bd:df:51:01:4d:c1:8e:3a:e2:39:3a:66:02:67:24:
cf:92:05:fa:d3:ad:d2:e7:fa:fa:95:df:ea:89:fc:b9:bd:ee:
fd:a2:70:30:55:7b:d4:14:3e:c9:7f:6f:24:ff:5a:62:bd:2f:
d0:64:ef:20:cd:62:30:f1:5a:fa:b4:a2:18:de:2f:b9:63:8c:
38:d2:60:d0:d4:ed:91:ad:f3:0e:59:57:62:19:10:14:0b:49:
46:61:62:10:07:e1:c3:82:24:ec:3b:99:80:fb:19:67:36:fe:
5b:0c:a3:be:d8:2f:bf:44:ec:bb:76:15:7c:35:be:eb:06:ea:
72:2b:85:96:91:31:78:95:d3:11:fe:de:70:8d:ff:b4:41:24:
89:34:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:14 2024 by rpki-client on console-fra.rpki-client.org