Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/be76b4ca-fcb6-4d7a-9297-2a19edea98d3.cer
File: be76b4ca-fcb6-4d7a-9297-2a19edea98d3.cer (raw, json)
Hash identifier: CPE00NDr1vhEuyWpuWmde4nVZMkk78YwJtjQ1LtY+wc=
Subject key identifier: BE:5F:08:B6:21:7E:F0:2A:E0:4B:BB:8E:EF:0A:1C:91:B6:26:6A:C2
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial: 010D0C9F43285842A5CC4DA589A570B6E6841880
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/be76b4ca-fcb6-4d7a-9297-2a19edea98d3/be76b4ca-fcb6-4d7a-9297-2a19edea98d3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/be76b4ca-fcb6-4d7a-9297-2a19edea98d3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 24 Jul 2023 00:45:17 +0000
Certificate not after: Sun 26 Oct 2025 00:45:17 +0000
Subordinate resources: AS: 23225
IP: 74.114.120.0/22
IP: 192.81.176.0/22
IP: 208.78.184.0/22
IP: 2602:ff69::/36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:a5:cc:4d:a5:89:a5:70:b6:e6:84:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Validity
Not Before: Jul 24 00:45:17 2023 GMT
Not After : Oct 26 00:45:17 2025 GMT
Subject: CN=be76b4ca-fcb6-4d7a-9297-2a19edea98d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0c:8a:b1:91:83:f2:fa:e2:67:a1:1d:c2:75:
11:35:0f:4c:85:43:a6:81:94:a9:3e:d4:21:95:65:
69:5c:83:6d:b2:49:df:3c:b2:4b:d2:06:3a:2a:25:
e8:c7:7a:24:d0:9c:8b:c3:5f:e3:ad:d5:91:04:5f:
73:b8:f9:95:5d:e7:4a:87:54:e6:f3:ba:f7:97:23:
51:a0:f3:45:63:24:c8:0b:d1:39:46:cf:be:9a:47:
95:1e:70:f0:61:b1:6c:9d:e3:db:ec:54:69:5b:60:
18:84:11:cf:8e:c9:ca:89:58:9e:e4:7e:53:a6:a0:
14:e3:aa:06:ab:c1:cf:8f:5d:27:ff:7f:1a:04:d8:
a2:0f:bc:69:81:25:49:98:c7:d9:fa:ea:4e:7d:c1:
85:dc:a3:d2:77:a3:d3:8c:65:90:53:b4:1b:fe:44:
51:a7:66:99:7b:c5:aa:c6:dd:bc:3a:a8:55:62:3f:
a4:17:fb:6c:f3:a8:c2:40:74:12:47:1f:eb:8f:bb:
0c:50:43:ab:9d:f9:a7:2c:df:25:70:29:30:a9:a9:
da:9a:7d:2b:6d:b8:c8:91:2e:ad:f5:f6:df:96:12:
92:c6:71:39:d7:75:59:dd:f5:6c:dc:02:b5:44:75:
04:e0:df:36:b9:6a:85:44:0e:8f:b0:02:e4:c5:87:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5F:08:B6:21:7E:F0:2A:E0:4B:BB:8E:EF:0A:1C:91:B6:26:6A:C2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/be76b4ca-fcb6-4d7a-9297-2a19edea98d3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/be76b4ca-fcb6-4d7a-9297-2a19edea98d3/be76b4ca-fcb6-4d7a-9297-2a19edea98d3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
X509v3 Authority Key Identifier:
keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
sbgp-ipAddrBlock: critical
IPv4:
74.114.120.0/22
192.81.176.0/22
208.78.184.0/22
IPv6:
2602:ff69::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23225
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:bc:a4:40:e3:5e:03:e5:f7:b3:ba:b2:47:5f:47:11:3d:83:
a9:84:e7:59:a4:f6:f8:3a:b3:d9:a5:c0:48:0e:56:f7:6b:03:
ba:ad:69:50:cb:96:1a:f3:72:5d:80:69:f9:0f:60:e9:2b:55:
ee:3c:d8:fe:3d:49:02:98:99:55:a0:72:12:e8:61:f2:f2:2a:
76:99:0d:42:31:77:1d:3b:f0:ec:9c:5e:e5:24:fd:a8:29:e7:
87:07:ee:75:34:49:af:15:db:d4:9a:9e:c6:dc:b9:df:b7:41:
16:2b:43:22:e0:09:4d:b7:09:67:3e:06:f1:b4:75:10:db:66:
2e:e6:26:71:4e:f9:6b:6a:60:53:90:8a:b2:3e:8e:b2:fb:a5:
18:09:b2:dd:1e:b1:17:de:00:f6:1d:40:56:10:66:a2:a8:ea:
23:82:82:e9:ff:d4:57:62:34:5a:f9:1f:f9:15:cb:b5:d0:43:
8e:35:36:4d:7a:da:d4:be:19:a9:c7:ec:3c:d3:09:aa:95:35:
2d:61:ff:0b:63:12:56:58:31:92:fb:64:33:42:bb:b7:0a:39:
47:50:e2:9d:42:ca:18:0c:c4:b9:98:55:8a:26:f2:f0:9c:9a:
c6:c5:9f:64:ea:95:9c:60:d3:2f:ea:23:1e:c8:3f:20:c3:75:
45:50:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 18:33:04 2023 by rpki-client on console-fra.rpki-client.org