Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df8f56dd-2d54-4233-b88b-e623e32a8d90.cer
File: df8f56dd-2d54-4233-b88b-e623e32a8d90.cer (raw, json)
Hash identifier: Z3TYuSQAFiBYXfy3vOqUc2YHAsOat9es5y+DxxTLmx0=
Subject key identifier: 4B:E5:E6:1D:EC:F2:11:98:8E:59:D9:C2:89:4B:02:07:9F:9E:C7:D4
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F43285841E4833F9AE468AFE61A66D900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df8f56dd-2d54-4233-b88b-e623e32a8d90/df8f56dd-2d54-4233-b88b-e623e32a8d90.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df8f56dd-2d54-4233-b88b-e623e32a8d90/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 15 May 2023 19:06:39 +0000
Certificate not after: Sat 15 Mar 2025 19:06:39 +0000
Subordinate resources: AS: 36782
IP: 216.117.192.0/20
IP: 216.117.216.0/24
IP: 2604:6540::/32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:83:3f:9a:e4:68:af:e6:1a:66:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: May 15 19:06:39 2023 GMT
Not After : Mar 15 19:06:39 2025 GMT
Subject: CN=df8f56dd-2d54-4233-b88b-e623e32a8d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:4d:03:e3:d4:70:f3:ba:4d:45:f9:1c:3c:
24:ac:95:85:81:d1:c0:82:37:b1:4c:c5:c4:50:b8:
e9:91:2f:cf:a1:b7:ed:8a:24:56:f1:a3:64:87:71:
64:3a:e4:c6:1c:8e:ee:08:e7:72:f8:03:9c:0d:25:
41:c2:2e:20:79:5d:be:fa:9f:a8:45:62:a2:ab:e6:
72:27:fb:3c:a8:4a:b4:93:98:90:aa:0f:c5:37:e1:
33:d7:c4:4b:10:69:b5:79:55:13:5a:c0:a8:8d:e1:
06:30:be:14:ee:10:aa:68:5f:d7:6c:c2:7f:8c:81:
47:cb:a3:3d:4c:55:3c:4c:3d:02:0e:77:4b:d5:8e:
a8:11:ad:49:b8:88:c4:7c:1b:29:66:c8:2e:e3:83:
68:7b:9f:c5:26:0b:f6:43:80:28:b1:0b:ab:d3:9b:
85:d2:34:42:18:e6:4b:4a:92:1c:c7:98:70:34:3e:
f3:de:86:a6:af:a9:79:95:ca:3a:3f:dd:60:4f:f8:
ec:7b:21:c0:c0:ed:fc:89:3d:72:93:2e:d9:3e:a9:
f2:51:85:63:32:ac:4c:9b:00:fc:23:38:df:ab:d6:
78:2a:21:f9:8f:b8:50:62:85:92:99:af:f6:ce:6f:
e1:59:6b:0f:91:dc:3f:ef:30:bb:ef:22:a5:70:ef:
af:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E5:E6:1D:EC:F2:11:98:8E:59:D9:C2:89:4B:02:07:9F:9E:C7:D4
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df8f56dd-2d54-4233-b88b-e623e32a8d90/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df8f56dd-2d54-4233-b88b-e623e32a8d90/df8f56dd-2d54-4233-b88b-e623e32a8d90.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
216.117.192.0/20
216.117.216.0/24
IPv6:
2604:6540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36782
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:97:bf:59:a4:19:7a:2c:cb:40:f8:ea:59:8a:52:1a:d9:04:
be:ce:33:c2:23:04:41:d7:23:ef:8f:c7:61:1f:d9:de:75:1c:
37:4f:22:66:d0:82:3f:6e:35:e5:ab:30:65:b1:98:aa:ae:f8:
fb:ea:63:e5:fa:5e:32:b9:ca:df:a3:f6:1c:17:bf:fb:08:10:
2d:47:09:8f:ba:96:0c:e4:da:de:34:ec:31:08:5f:c9:91:9e:
61:89:04:f0:b0:cd:8c:de:79:df:39:1b:42:1c:bf:a0:57:e8:
62:80:9c:6b:00:62:b5:2e:08:5a:ec:37:d6:68:80:90:7b:06:
ba:ed:df:96:aa:33:7c:cc:d0:aa:b1:82:57:94:14:14:9c:1a:
6c:e4:c1:e2:97:4a:8b:da:36:84:4d:c3:7b:ca:27:0d:00:aa:
3a:bd:52:f3:c1:0e:1e:ac:9c:3b:0b:2f:92:52:f4:ed:96:46:
27:f5:1f:e1:72:45:da:2c:c1:41:66:09:bd:25:eb:fe:3a:47:
d5:26:2c:15:27:7f:aa:32:87:6e:44:a5:be:b8:07:26:84:6b:
04:42:29:10:47:bd:31:e0:a1:7b:52:cc:54:12:db:48:c2:e9:
78:ce:04:52:0b:68:49:db:57:1e:0f:1f:bf:56:83:68:81:4c:
fb:da:f7:38
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEHkgz+a5Giv5hpm2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDMxNTE5MDYzOVowLzEtMCsGA1UEAxMk
ZGY4ZjU2ZGQtMmQ1NC00MjMzLWI4OGItZTYyM2UzMmE4ZDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyBNA+PUcPO6TUX5HDwkrJWFgdHAgjexTMXE
ULjpkS/PobftiiRW8aNkh3FkOuTGHI7uCOdy+AOcDSVBwi4geV2++p+oRWKiq+Zy
J/s8qEq0k5iQqg/FN+Ez18RLEGm1eVUTWsCojeEGML4U7hCqaF/XbMJ/jIFHy6M9
TFU8TD0CDndL1Y6oEa1JuIjEfBspZsgu44Noe5/FJgv2Q4AosQur05uF0jRCGOZL
SpIcx5hwND7z3oamr6l5lco6P91gT/jseyHAwO38iT1yky7ZPqnyUYVjMqxMmwD8
Izjfq9Z4KiH5j7hQYoWSma/2zm/hWWsPkdw/7zC77yKlcO+v2wIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFEvl5h3s8hGYjlnZwolLAgefnsfUMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k
ZjhmNTZkZC0yZDU0LTQyMzMtYjg4Yi1lNjIzZTMyYThkOTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RmOGY1NmRkLTJkNTQtNDIzMy1i
ODhiLWU2MjNlMzJhOGQ5MC9kZjhmNTZkZC0yZDU0LTQyMzMtYjg4Yi1lNjIzZTMy
YThkOTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBATYdcADBADYddgwDQQCAAIwBwMFACYEZUAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAI+uMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAISXv1mkGXosy0D46lmK
UhrZBL7OM8IjBEHXI++Px2Ef2d51HDdPImbQgj9uNeWrMGWxmKqu+PvqY+X6XjK5
yt+j9hwXv/sIEC1HCY+6lgzk2t407DEIX8mRnmGJBPCwzYzeed85G0Icv6BX6GKA
nGsAYrUuCFrsN9ZogJB7Brrt35aqM3zM0KqxgleUFBScGmzkweKXSovaNoRNw3vK
Jw0Aqjq9UvPBDh6snDsLL5JS9O2WRif1H+FyRdoswUFmCb0l6/46R9UmLBUnf6oy
h25Epb64ByaEawRCKRBHvTHgoXtSzFQS20jC6XjOBFILaEnbVx4PH79Wg2iBTPva
9zg=
-----END CERTIFICATE-----
Generated at Tue Oct 17 11:51:13 2023 by rpki-client on console-fra.rpki-client.org