Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d60be5a-50f8-4925-8133-058bde8f7ed2.cer
File: 2d60be5a-50f8-4925-8133-058bde8f7ed2.cer (raw, json)
Hash identifier: IbEXlRsJ5qsawBp1Qr5kTlTyASiRAropXrpQlq6JQ5U=
Subject key identifier: D6:1D:8E:10:E9:1A:DC:97:F6:A6:47:4B:D1:B3:C5:8C:0C:85:00:23
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F43285844DCA2F831985C8A8670EA0700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d60be5a-50f8-4925-8133-058bde8f7ed2/2d60be5a-50f8-4925-8133-058bde8f7ed2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d60be5a-50f8-4925-8133-058bde8f7ed2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 12 Feb 2024 01:45:20 +0000
Certificate not after: Sun 17 May 2026 00:45:20 +0000
Subordinate resources: AS: 399114
IP: 66.118.236.0/22
IP: 104.249.128.0/22
IP: 2602:fc51::/36
Validation: Failed, certificate revoked on Mon 01 Apr 2024 18:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:dc:a2:f8:31:98:5c:8a:86:70:ea:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Feb 12 01:45:20 2024 GMT
Not After : May 17 00:45:20 2026 GMT
Subject: CN=2d60be5a-50f8-4925-8133-058bde8f7ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:8d:04:82:7a:50:91:15:0e:2b:9f:cc:17:
ee:0f:eb:b0:39:b1:f1:90:5d:48:5b:89:65:32:d5:
b5:9b:ba:83:3f:74:37:02:1f:d0:98:aa:92:6b:be:
03:aa:17:c7:05:d3:5a:43:96:a8:c3:53:93:40:ce:
fd:ce:34:09:52:55:5f:49:07:bb:35:68:c7:b3:bd:
05:af:8b:14:e4:b2:7a:78:54:1f:8f:f0:07:3b:3e:
13:79:23:e3:22:f5:0c:26:69:68:cc:ea:19:5e:5d:
21:d0:58:97:07:28:b4:da:65:01:93:e5:88:97:d6:
bc:a1:b2:94:54:43:e8:73:6a:b6:cd:27:31:ca:e6:
24:0e:5e:a2:76:a7:87:2f:b7:ab:6d:be:68:05:4a:
db:e1:ab:09:f5:17:7c:15:df:9e:2c:78:bb:1f:7b:
58:9e:92:99:60:03:22:65:29:14:d2:91:56:e4:0d:
33:d3:e4:e3:56:9f:56:ee:e3:96:c4:eb:50:9a:cb:
5b:93:62:51:25:3c:a2:cf:9f:5b:ce:fb:90:98:ee:
3c:c0:88:27:02:4d:b1:37:58:11:af:9e:8a:33:f9:
98:06:46:97:55:27:c7:af:4e:0b:63:39:cf:f9:15:
b3:c8:e7:0e:d7:20:4b:d3:5e:80:14:ea:87:aa:d5:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:8E:10:E9:1A:DC:97:F6:A6:47:4B:D1:B3:C5:8C:0C:85:00:23
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d60be5a-50f8-4925-8133-058bde8f7ed2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d60be5a-50f8-4925-8133-058bde8f7ed2/2d60be5a-50f8-4925-8133-058bde8f7ed2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.236.0/22
104.249.128.0/22
IPv6:
2602:fc51::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399114
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:2b:91:f1:e7:ab:7c:4b:d1:4a:d7:80:20:f8:64:56:1f:d8:
cb:1e:90:91:c8:34:2c:eb:d8:f2:bd:d3:f1:e3:dc:a9:57:0b:
14:4d:71:35:e4:8f:94:b5:27:56:f6:ab:f1:ae:1e:53:be:7f:
78:10:d7:db:02:d1:8a:88:b4:56:ca:dd:38:da:ba:c7:67:ae:
af:f5:87:77:51:3b:af:da:b5:1c:9f:4f:de:2e:e9:c2:10:98:
c0:ee:cc:37:d2:b1:95:a2:d6:4d:95:e7:72:da:96:79:6e:b5:
63:bb:da:58:9f:20:6c:f5:01:eb:a2:a5:2d:5c:e6:dc:16:ef:
3a:31:54:13:65:85:e0:9e:1c:48:6e:eb:98:10:bf:0a:21:2c:
d1:7f:ef:0a:a6:5f:74:a2:58:6e:eb:74:83:e0:40:f7:08:b1:
15:5d:4f:bb:d3:2f:f7:d6:29:64:74:78:7c:39:9d:c1:50:5e:
39:fb:c5:69:e8:03:b3:fb:50:9b:bc:09:cd:bf:75:48:23:79:
a7:2a:1a:80:23:38:0a:b8:9a:e2:0f:8d:36:67:cb:3a:f4:a4:
b9:12:22:95:74:e0:ce:4d:c3:cc:99:13:5d:9c:c1:73:e8:92:
20:e1:15:e3:dd:aa:63:85:f1:de:b5:8e:13:e4:a6:b4:b7:a6:
d4:8e:a0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 19:41:24 2024 by rpki-client on console-ams.rpki-client.org