Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df.cer
File: d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df.cer (raw, json)
Hash identifier: Q9VaapjQjXwCW1XKbV/RLZ7F5/ZS54TYS5P68Oj6tAc=
Subject key identifier: 1A:E9:05:CA:D2:46:1E:1C:76:66:49:9F:2F:7D:68:BA:DF:E7:81:BB
Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63
Certificate issuer: /CN=0ec17157-66de-4aab-85e7-28af4de430e2
Certificate serial: 010D0C9F43285845F2906A5E990432C501FF0740
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/1AE905CAD2461E1C7666499F2F7D68BADFE781BB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 21 May 2024 15:02:40 +0000
Certificate not after: Mon 24 Aug 2026 15:02:40 +0000
Subordinate resources: AS: 26561
IP: 23.164.152.0/23
IP: 2602:f9fa::/36
Validation: Failed, certificate revoked on Wed 22 May 2024 18:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f2:90:6a:5e:99:04:32:c5:01:ff:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2
Validity
Not Before: May 21 15:02:40 2024 GMT
Not After : Aug 24 15:02:40 2026 GMT
Subject: CN=d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:c9:cd:85:03:5a:34:c3:4a:58:d9:ff:db:
e5:35:da:f1:3f:16:c4:96:02:ad:9d:8a:49:06:20:
33:f0:2d:a8:66:3f:ab:c6:b4:ba:09:20:f7:d1:46:
4e:23:aa:6d:c4:48:ae:e6:58:ee:53:86:5f:70:ae:
ba:f3:3f:b2:19:35:84:93:23:f4:61:8f:be:70:65:
47:50:be:62:5a:65:04:59:f7:f8:79:d7:79:b6:05:
e4:fc:1e:18:c2:32:15:0f:14:42:99:5c:4d:46:5b:
84:88:f4:f2:2f:91:3a:95:b7:5e:7b:eb:b9:7c:93:
56:fe:33:5e:60:4a:51:96:47:31:d2:72:41:cc:92:
62:97:79:3e:1f:6b:3f:e7:84:6b:15:38:f3:16:0d:
e0:32:f3:65:32:db:4e:99:bd:4d:9a:93:1e:7e:47:
94:48:92:fd:f0:f1:ca:27:92:a9:36:90:87:73:b7:
65:88:67:6b:82:ee:5d:b8:10:d8:45:85:0e:cf:81:
2a:18:4c:5d:7b:4d:f0:65:86:f1:60:ce:53:78:36:
fa:89:d5:5d:71:b5:0f:4a:22:ff:9b:b9:c8:0d:78:
15:63:c9:9e:22:64:48:e2:00:b7:0a:3a:ac:40:7e:
e5:d3:1f:17:26:27:00:1c:23:a8:b4:2a:c4:4e:aa:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:05:CA:D2:46:1E:1C:76:66:49:9F:2F:7D:68:BA:DF:E7:81:BB
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/1AE905CAD2461E1C7666499F2F7D68BADFE781BB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl
X509v3 Authority Key Identifier:
keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.152.0/23
IPv6:
2602:f9fa::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26561
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:a9:4b:9e:e4:42:bc:80:d7:2d:29:74:88:a8:1a:43:52:57:
83:66:35:f9:05:13:be:98:49:d4:75:3d:0a:51:0f:3b:0f:1e:
4a:72:9d:d7:bf:c1:0f:d3:51:14:db:91:4e:90:ee:51:77:3a:
c9:10:4e:f8:8b:5d:ee:9c:8d:fd:74:97:3d:52:43:95:55:c6:
16:e6:a6:af:0e:bd:fc:d0:97:69:bc:78:94:de:8a:7b:d6:77:
a2:dd:f1:9e:9d:12:07:36:ec:f8:fb:f5:f0:69:e2:f5:a6:13:
68:24:67:f8:2d:54:3f:03:3f:10:e7:f8:16:bb:fc:b6:79:9f:
5c:56:73:03:92:47:c9:99:0d:b7:68:62:1a:2a:41:55:df:78:
77:ad:da:03:22:96:9b:71:8b:8d:4a:8b:e1:2e:1d:e4:71:0d:
d6:60:e5:ee:02:71:bd:5a:84:e4:62:a6:5e:9b:c5:e3:d1:b1:
c4:ca:47:f6:f6:67:ad:d4:35:c1:83:8f:b4:a3:e4:83:b8:a1:
e1:31:2a:67:70:a1:d3:71:6c:c9:65:49:43:13:7b:80:20:e3:
43:f4:54:b0:40:bd:5d:00:5b:15:ce:52:9c:2f:24:45:29:d9:
48:1f:cd:db:cb:73:f5:19:78:41:29:18:80:0f:4b:23:3a:e1:
d7:58:02:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 22:05:50 2024 by rpki-client on console-fra.rpki-client.org