
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792.cer
File: d85aedc6-8da7-416f-825e-fe535fa92792.cer (raw, json)
Hash identifier: a9IFrUZK4BZcWwauR04cGXvgle09WLAceA9ADAk2SKo=
Subject key identifier: 36:9D:65:01:F1:D7:12:D8:D2:09:09:78:CA:97:9C:01:B0:28:1C:71
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F43285843BFC3622907E2DA0F0BDE1300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792/d85aedc6-8da7-416f-825e-fe535fa92792.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 02 Nov 2023 00:45:16 +0000
Certificate not after: Wed 04 Feb 2026 01:45:16 +0000
Subordinate resources: AS: 7260
IP: 23.147.32.0/24
IP: 172.82.56.0/22
IP: 2602:fe49::/36
Validation: Failed, certificate revoked on Tue 07 Jan 2025 12:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:bf:c3:62:29:07:e2:da:0f:0b:de:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Nov 2 00:45:16 2023 GMT
Not After : Feb 4 01:45:16 2026 GMT
Subject: CN=d85aedc6-8da7-416f-825e-fe535fa92792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:4e:60:5b:26:ec:1b:fe:f4:b7:10:dc:88:
92:8f:ef:c5:2c:0c:b8:76:7b:15:23:de:aa:5a:eb:
8d:61:0f:82:af:78:9b:dd:5b:f2:4c:51:bf:4c:a3:
61:ec:91:26:49:17:cf:72:5c:4c:d6:b5:2b:e0:da:
3d:9b:e4:ad:1c:e4:92:e7:b2:b8:22:a8:bd:c7:59:
b8:41:26:8b:ec:14:07:d5:5d:82:2d:8e:96:bc:e0:
8a:07:3a:9d:ef:d1:d5:8f:c5:50:4f:00:f5:f7:f0:
20:f5:c7:a2:5d:80:c2:01:06:03:54:46:33:71:96:
77:16:c9:96:ba:a8:03:3d:46:e9:8c:77:a2:81:3d:
4c:cb:7b:e2:5f:bf:d9:d8:8b:2d:5f:d0:20:ca:db:
8e:16:be:f2:cb:de:cd:66:23:47:bc:63:b9:11:f7:
77:62:c0:c0:73:12:ab:1c:7e:3c:57:e5:3c:4c:e2:
ac:93:9c:63:04:85:f0:8c:27:24:35:d6:90:58:e7:
0f:a0:39:50:8a:6f:0d:f1:85:2c:d4:7f:e7:5c:03:
82:e3:ac:a0:bb:04:ce:dd:36:4b:a0:d1:b1:bf:b7:
83:f9:bc:ac:d0:1f:42:ea:c2:4f:ea:5b:c3:ce:f8:
62:6b:78:4b:99:ad:8a:b5:4f:f1:b6:ab:59:e6:15:
13:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9D:65:01:F1:D7:12:D8:D2:09:09:78:CA:97:9C:01:B0:28:1C:71
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792/d85aedc6-8da7-416f-825e-fe535fa92792.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.32.0/24
172.82.56.0/22
IPv6:
2602:fe49::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7260
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:45:e7:b6:b5:d5:13:9a:a2:9b:89:e7:ca:3b:2a:32:1e:55:
4b:db:98:4e:82:69:9a:75:c0:9d:78:78:ec:68:05:fe:4a:12:
51:47:43:9c:9a:39:48:ad:a5:08:84:bd:09:cb:a7:c3:3b:dc:
81:5c:12:82:f0:71:44:18:37:5b:63:99:5b:ad:3c:d9:8f:17:
d8:b6:16:24:21:57:6f:74:49:80:d0:44:24:51:9e:b1:7b:05:
7c:01:f0:90:ab:5f:fc:c4:2e:4d:db:20:0b:39:b1:0e:fe:ea:
cf:31:b6:62:20:b3:b4:39:19:e3:b5:54:85:e8:3f:52:56:8b:
4e:f0:f1:83:fc:fe:a8:da:fd:f8:1f:3e:69:44:30:ad:6d:62:
e1:51:9b:a3:be:81:3b:4d:c2:69:9d:69:b0:27:5e:a8:89:8e:
01:a1:12:65:4e:78:ca:9a:29:cb:9a:8b:82:33:82:87:fa:a4:
f3:e2:a7:08:ef:cf:8a:9e:4a:f1:40:20:d6:30:00:56:50:55:
55:c4:29:e5:ca:31:f6:ce:79:11:a5:8d:94:31:d8:a0:d5:b2:
10:25:36:45:03:6e:30:f3:d4:78:e3:60:d4:5f:82:6f:70:f6:
f8:40:b3:1c:1c:52:d0:25:8b:cd:a4:e6:94:d8:bf:14:07:4e:
71:62:65:8b
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEO/w2IpB+LaDwveEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMTEwMjAwNDUxNloXDTI2MDIwNDAxNDUxNlowLzEtMCsGA1UEAxMk
ZDg1YWVkYzYtOGRhNy00MTZmLTgyNWUtZmU1MzVmYTkyNzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2tOYFsm7Bv+9LcQ3IiSj+/FLAy4dnsVI96q
WuuNYQ+Cr3ib3VvyTFG/TKNh7JEmSRfPclxM1rUr4No9m+StHOSS57K4Iqi9x1m4
QSaL7BQH1V2CLY6WvOCKBzqd79HVj8VQTwD19/Ag9ceiXYDCAQYDVEYzcZZ3FsmW
uqgDPUbpjHeigT1My3viX7/Z2IstX9AgytuOFr7yy97NZiNHvGO5Efd3YsDAcxKr
HH48V+U8TOKsk5xjBIXwjCckNdaQWOcPoDlQim8N8YUs1H/nXAOC46yguwTO3TZL
oNGxv7eD+bys0B9C6sJP6lvDzvhia3hLma2KtU/xtqtZ5hUTbQIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFDadZQHx1xLY0gkJeMqXnAGwKBxxMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k
ODVhZWRjNi04ZGE3LTQxNmYtODI1ZS1mZTUzNWZhOTI3OTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Q4NWFlZGM2LThkYTctNDE2Zi04
MjVlLWZlNTM1ZmE5Mjc5Mi9kODVhZWRjNi04ZGE3LTQxNmYtODI1ZS1mZTUzNWZh
OTI3OTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXkyADBAKsUjgwDgQCAAIwCAMGBCYC/kkAMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAhxcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHFF57a11ROaopuJ58o7
KjIeVUvbmE6CaZp1wJ14eOxoBf5KElFHQ5yaOUitpQiEvQnLp8M73IFcEoLwcUQY
N1tjmVutPNmPF9i2FiQhV290SYDQRCRRnrF7BXwB8JCrX/zELk3bIAs5sQ7+6s8x
tmIgs7Q5GeO1VIXoP1JWi07w8YP8/qja/fgfPmlEMK1tYuFRm6O+gTtNwmmdabAn
XqiJjgGhEmVOeMqaKcuai4Izgof6pPPipwjvz4qeSvFAINYwAFZQVVXEKeXKMfbO
eRGljZQx2KDVshAlNkUDbjDz1HjjYNRfgm9w9vhAsxwcUtAli82k5pTYvxQHTnFi
ZYs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:24:00 2025 by rpki-client