Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb9a6649-75fe-48c0-9ffa-3443b1f89e07.cer
File: eb9a6649-75fe-48c0-9ffa-3443b1f89e07.cer (raw, json)
Hash identifier: n9MveuB5urLKC3uQvfNq3/8o3MdspSLMskbEq6+TWFk=
Subject key identifier: 2D:49:AB:8F:0B:CC:59:CF:B9:BE:58:04:BA:02:9B:3B:91:79:FE:05
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328583D20D447D7B669ABE82F39FE00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb9a6649-75fe-48c0-9ffa-3443b1f89e07/eb9a6649-75fe-48c0-9ffa-3443b1f89e07.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb9a6649-75fe-48c0-9ffa-3443b1f89e07/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 04 Mar 2022 21:44:10 +0000
Certificate not after: Thu 04 Mar 2032 21:44:10 +0000
Subordinate resources: IP: 64.145.64.0/24
IP: 64.145.66.0/24
IP: 64.145.68.0 -- 64.145.72.255
IP: 64.145.74.0/23
IP: 64.145.77.0 -- 64.145.78.255
IP: 64.145.80.0 -- 64.145.89.255
IP: 64.145.92.0/24
IP: 64.145.95.0/24
IP: 173.245.192.0 -- 173.245.201.255
IP: 173.245.204.0/23
IP: 173.245.208.0/24
IP: 173.245.210.0/24
IP: 173.245.212.0 -- 173.245.216.255
IP: 173.245.218.0/24
IP: 173.245.220.0/22
IP: 209.107.194.0/24
IP: 209.107.197.0 -- 209.107.203.255
IP: 209.107.205.0 -- 209.107.209.255
IP: 209.107.211.0/24
IP: 209.107.213.0/24
IP: 209.107.215.0/24
IP: 209.107.217.0 -- 209.107.218.255
IP: 209.107.220.0/22
IP: 209.234.240.0/21
IP: 209.234.249.0 -- 209.234.252.255
IP: 209.234.254.0/23
IP: 216.151.176.0/22
IP: 216.151.181.0 -- 216.151.182.255
IP: 216.151.185.0 -- 216.151.190.255
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:20:d4:47:d7:b6:69:ab:e8:2f:39:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Mar 4 21:44:10 2022 GMT
Not After : Mar 4 21:44:10 2032 GMT
Subject: CN=eb9a6649-75fe-48c0-9ffa-3443b1f89e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:80:c7:3f:59:3c:29:ac:98:c5:d8:7b:5b:
0d:d2:40:d9:32:35:f6:3b:dc:25:96:1c:cd:ba:f1:
53:3d:dd:f8:81:45:bd:ce:b8:27:9e:b4:bd:81:33:
e4:b0:88:f3:12:72:c7:f2:83:10:9b:0e:ce:b4:99:
16:ca:12:0a:d7:78:57:26:97:3e:c4:85:09:45:ec:
9e:ea:bd:9d:f4:e1:fb:a1:86:24:6a:ed:0e:ee:13:
6c:86:3a:6a:f0:45:24:ac:71:4c:e8:b3:76:d5:70:
30:5b:5f:8c:78:36:64:86:10:11:8a:63:42:73:d9:
93:c6:12:55:08:c5:3f:09:7f:ef:99:57:2d:28:74:
b3:08:e1:1b:6f:ff:27:5c:0a:60:82:2b:20:39:a1:
28:de:2b:dd:1f:a7:46:ce:16:9b:d3:1a:d2:c8:b1:
62:bd:cf:25:1a:c6:e6:19:bf:42:4c:9d:1c:57:45:
12:cb:87:01:ed:92:d5:23:6b:f4:b2:98:b5:ab:5c:
86:02:38:48:b0:34:ae:e4:45:8e:55:00:da:8d:06:
2b:1d:ce:f2:c1:c3:54:8c:52:2e:6f:98:4e:24:9c:
c5:ad:f9:06:e1:bf:0d:0b:92:e6:2c:4c:09:f5:9b:
5c:c6:14:82:40:f3:77:22:ca:28:06:59:91:01:68:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:49:AB:8F:0B:CC:59:CF:B9:BE:58:04:BA:02:9B:3B:91:79:FE:05
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb9a6649-75fe-48c0-9ffa-3443b1f89e07/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb9a6649-75fe-48c0-9ffa-3443b1f89e07/eb9a6649-75fe-48c0-9ffa-3443b1f89e07.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
64.145.64.0/24
64.145.66.0/24
64.145.68.0-64.145.72.255
64.145.74.0/23
64.145.77.0-64.145.78.255
64.145.80.0-64.145.89.255
64.145.92.0/24
64.145.95.0/24
173.245.192.0-173.245.201.255
173.245.204.0/23
173.245.208.0/24
173.245.210.0/24
173.245.212.0-173.245.216.255
173.245.218.0/24
173.245.220.0/22
209.107.194.0/24
209.107.197.0-209.107.203.255
209.107.205.0-209.107.209.255
209.107.211.0/24
209.107.213.0/24
209.107.215.0/24
209.107.217.0-209.107.218.255
209.107.220.0/22
209.234.240.0/21
209.234.249.0-209.234.252.255
209.234.254.0/23
216.151.176.0/22
216.151.181.0-216.151.182.255
216.151.185.0-216.151.190.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:76:3e:6d:8a:01:d7:2f:27:72:cd:28:be:40:d2:b4:f4:82:
cf:1b:a1:4f:87:63:2b:b0:6f:cb:01:b2:1b:70:06:2f:7e:d9:
0d:7c:84:4b:d5:c2:f7:7a:af:09:07:67:f9:aa:f7:9d:52:9b:
06:93:e2:db:b6:c2:c4:39:27:c1:55:a6:a3:4c:51:bc:54:5d:
4b:bc:d5:dc:15:ad:86:2e:d8:61:f8:11:48:33:df:ad:d2:07:
3a:e5:0b:4f:21:8a:2e:15:48:2f:6f:f4:fb:4d:83:6e:9f:0e:
e6:cc:40:64:58:d7:6b:c9:c4:d1:27:83:14:c3:f9:3a:36:8e:
df:fa:73:91:34:f5:c9:46:db:d0:04:43:60:39:68:54:40:42:
35:de:b2:83:64:23:0e:99:9f:f6:fe:d4:65:6e:73:d6:26:0e:
3b:7c:88:f9:39:94:69:c6:29:8c:f6:11:e0:4b:9d:4d:84:d4:
92:cc:9c:52:22:b8:8d:e5:42:c6:6b:55:33:e7:67:ae:e8:8e:
c8:57:81:6f:12:f1:70:40:77:ed:dd:2e:04:7f:87:80:cd:c5:
6b:c2:a1:cc:d3:9f:00:ea:8a:9a:d7:41:97:9a:df:ef:47:e8:
69:ea:b2:11:16:2f:69:d1:f2:7f:c5:89:c5:9b:4b:bd:c6:03:
6e:8c:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:41 2023 by rpki-client on console-ams.rpki-client.org