Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
File: bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer (raw, json)
Hash identifier: VQuSY4yz2x9vl4jweitPZDE/mmEEDAkeD8mtylNRe7o=
Subject key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F432858481DC59893DBF3A40F03458000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 06 Dec 2024 12:03:28 +0000
Certificate not after: Thu 25 Feb 2027 14:34:10 +0000
Subordinate resources: AS: 16909
AS: 401507
IP: 23.129.212.0/24
IP: 2602:f78a::/40
Validation: Failed, certificate revoked on Thu 19 Dec 2024 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1d:c5:98:93:db:f3:a4:0f:03:45:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Dec 6 12:03:28 2024 GMT
Not After : Feb 25 14:34:10 2027 GMT
Subject: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:86:cd:d9:49:bd:bb:3f:27:3f:a0:ac:fc:
f5:75:1c:64:06:7d:cb:bc:af:6b:ea:74:3e:c1:e5:
7b:be:f2:70:b9:97:62:22:dd:39:f1:ce:18:c4:05:
ef:b5:52:40:4b:76:d4:25:e5:d9:30:92:15:4b:f9:
cd:2f:d8:63:e3:cb:52:2a:a0:6b:ab:f7:e3:a5:d4:
f5:76:ba:03:9f:1d:2c:97:e7:94:e8:81:94:44:d8:
79:37:b8:59:3c:b5:ea:d8:46:2a:ff:0d:c7:de:16:
58:53:85:32:6d:1a:f7:81:d2:e6:ea:43:04:f5:9c:
d5:b4:e2:c6:ae:0f:28:d9:97:9a:bb:d2:2d:4a:78:
c6:c7:d9:de:c0:e7:ba:33:73:30:20:c6:64:2e:f2:
bd:ce:d3:7b:14:b5:94:f6:62:19:8f:d5:a1:cd:14:
92:26:1b:32:12:26:58:59:73:b4:4c:6b:75:e0:b6:
08:0e:92:f0:f5:12:00:21:15:25:b5:bb:8b:6f:7b:
ba:ba:a0:e7:c9:0e:5f:61:a4:2d:7b:b4:2b:e5:ef:
d6:a7:5b:09:e6:7e:35:52:bb:74:3a:aa:d2:a8:0e:
56:48:4e:d5:e9:c3:1d:2d:a2:a3:6b:d4:a0:80:67:
17:01:1a:a1:f3:59:ee:89:1c:76:97:63:71:55:34:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.212.0/24
IPv6:
2602:f78a::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16909
401507
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:56:08:6b:ba:82:69:14:b8:52:76:b0:4d:a9:ff:e7:0c:9f:
2f:5d:d2:18:7a:4a:f5:d0:8c:ca:e5:1e:20:cb:33:6a:46:c4:
93:30:da:65:90:ba:af:1c:85:b4:e2:3e:44:57:63:07:eb:7e:
ea:38:57:9c:5a:78:f9:1d:9c:c8:2e:9d:69:0d:57:41:31:2a:
ea:9d:f8:ba:bb:34:77:85:a0:28:d0:6b:0d:2b:f6:52:44:04:
20:12:32:dd:aa:76:ee:ca:05:0c:75:b2:aa:13:72:06:2e:45:
59:f3:8f:ee:e6:18:58:ce:2a:ad:a2:14:1a:4a:86:72:8b:4c:
be:6d:9e:cb:34:63:dd:61:63:61:10:ed:d5:d0:2b:b0:d2:4e:
8b:1a:78:2e:21:a3:b2:eb:e1:c7:98:ad:25:f8:07:e0:6e:25:
51:f1:ec:b6:03:d6:2a:df:42:5c:23:5b:b4:ce:b4:10:86:d9:
1f:c3:f7:32:e9:e2:17:41:5c:3c:23:27:0d:95:38:ba:9f:08:
7d:b1:a1:dc:13:9a:02:67:9f:13:0c:40:80:30:76:c4:fa:06:
26:85:ba:86:fa:2d:e8:a4:3f:e1:42:b9:36:a9:2b:85:50:d3:
1a:29:a8:5f:18:b3:2f:34:11:65:87:b5:cd:08:14:d5:b6:5d:
5e:4c:34:1c
-----BEGIN CERTIFICATE-----
MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEgdxZiT2/OkDwNFgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTIwNjEyMDMyOFoXDTI3MDIyNTE0MzQxMFowLzEtMCsGA1UEAxMk
YmFlMzdmNWItY2ZlMi00YWVkLTg2MTYtOTk5N2QzZjJmMGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6+GzdlJvbs/Jz+grPz1dRxkBn3LvK9r6nQ+
weV7vvJwuZdiIt058c4YxAXvtVJAS3bUJeXZMJIVS/nNL9hj48tSKqBrq/fjpdT1
droDnx0sl+eU6IGURNh5N7hZPLXq2EYq/w3H3hZYU4UybRr3gdLm6kME9ZzVtOLG
rg8o2Zeau9ItSnjGx9newOe6M3MwIMZkLvK9ztN7FLWU9mIZj9WhzRSSJhsyEiZY
WXO0TGt14LYIDpLw9RIAIRUltbuLb3u6uqDnyQ5fYaQte7Qr5e/Wp1sJ5n41Urt0
OqrSqA5WSE7V6cMdLaKja9SggGcXARqh81nuiRx2l2NxVTQ4WQIDAQABo4IELzCC
BCswHQYDVR0OBBYEFOtfkLZg1gjnuvM8pZPgonpDy+crMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9i
YWUzN2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3ZDNmMmYwYWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2JhZTM3ZjViLWNmZTItNGFlZC04
NjE2LTk5OTdkM2YyZjBhZi9iYWUzN2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3ZDNm
MmYwYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXgdQwDgQCAAIwCAMGACYC94oAMB4GCCsGAQUF
BwEIAQH/BA8wDaALMAkCAkINAgMGIGMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOVYIa7qCaRS4UnawTan/
5wyfL13SGHpK9dCMyuUeIMszakbEkzDaZZC6rxyFtOI+RFdjB+t+6jhXnFp4+R2c
yC6daQ1XQTEq6p34urs0d4WgKNBrDSv2UkQEIBIy3ap27soFDHWyqhNyBi5FWfOP
7uYYWM4qraIUGkqGcotMvm2eyzRj3WFjYRDt1dArsNJOixp4LiGjsuvhx5itJfgH
4G4lUfHstgPWKt9CXCNbtM60EIbZH8P3MuniF0FcPCMnDZU4up8IfbGh3BOaAmef
EwxAgDB2xPoGJoW6hvot6KQ/4UK5NqkrhVDTGimoXxizLzQRZYe1zQgU1bZdXkw0
HA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:03:45 2025 by rpki-client