Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer
File: d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer (raw, json)
Hash identifier: FkvZGEtVrNJkrmVZawPZPaqXOnSYvrWWeCJZ6j5JlEE=
Subject key identifier: B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB
Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63
Certificate issuer: /CN=0ec17157-66de-4aab-85e7-28af4de430e2
Certificate serial: 010D0C9F4328584B70163D9BB9EFDAF3DDC980C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 07 Oct 2025 02:03:03 +0000
Certificate not after: Mon 10 Jan 2028 03:03:03 +0000
Subordinate resources: AS: 26561
IP: 23.164.152.0/23
IP: 206.251.56.0/22
IP: 2602:f9fa::/36
Validation: Failed, certificate revoked on Wed 08 Oct 2025 20:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:70:16:3d:9b:b9:ef:da:f3:dd:c9:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2
Validity
Not Before: Oct 7 02:03:03 2025 GMT
Not After : Jan 10 03:03:03 2028 GMT
Subject: CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:ca:d1:1f:43:52:ad:ca:e7:f1:c2:04:71:
16:ef:61:d1:3a:39:a7:e5:80:47:54:e1:2e:7f:76:
b6:05:72:56:77:00:79:38:0f:e1:44:38:73:a4:9d:
54:20:27:c7:e4:9c:94:ec:d2:8f:66:83:2a:bf:fd:
b6:0e:55:7f:28:7b:54:37:aa:da:b6:ca:ad:1e:92:
43:66:5c:0b:98:71:08:27:bd:18:81:25:0d:d8:54:
ed:aa:79:6c:b6:70:c7:fd:12:b2:a1:45:7f:7d:bd:
42:f5:4d:08:e7:f1:40:af:de:d1:f8:64:bb:17:57:
18:08:27:41:12:f8:32:73:52:0c:d1:36:fd:e8:0b:
18:83:a9:ca:73:f6:c5:c8:d3:2f:58:4b:62:e0:7e:
49:b0:63:7c:b4:87:c2:b2:43:b7:b3:05:ba:07:79:
39:b4:22:50:cf:37:ad:6e:de:d3:3c:96:6b:09:a3:
62:45:97:1d:8d:6c:64:ef:df:3d:88:58:a0:09:58:
d0:8b:a9:2a:9c:c4:a8:b6:2a:4e:b1:09:c2:39:a4:
5c:dc:b5:cb:96:d9:78:d8:78:d9:66:ed:60:85:e6:
c4:6b:c9:e0:12:81:70:9b:41:2f:e4:57:87:f7:76:
13:94:93:95:d9:a9:ac:6d:75:5e:f0:22:91:2d:88:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl
X509v3 Authority Key Identifier:
keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.152.0/23
206.251.56.0/22
IPv6:
2602:f9fa::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26561
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:6b:3c:d3:9a:6c:7a:23:55:57:bb:e3:9e:c4:40:8c:9a:c3:
b0:b0:fa:3c:38:f5:34:4b:c5:75:27:70:6f:c2:2c:59:51:88:
e8:95:ea:b7:13:3c:8b:19:18:1b:a8:c6:16:ef:29:bd:b9:bc:
7e:41:35:a1:4a:46:b8:34:cb:fa:cd:5b:04:6d:5b:0f:3e:c1:
63:24:7e:2c:dd:e4:f0:f4:43:62:8f:fe:b9:be:73:11:5a:3f:
5a:3f:bb:49:f9:d4:82:12:6f:87:16:2b:19:b6:76:a0:7b:9b:
6c:2d:51:b7:bc:ad:93:f7:66:1c:d3:e0:a0:a8:5d:40:e6:d2:
68:eb:93:01:9e:a5:3d:7c:e5:fd:be:3f:c2:b2:76:6c:19:2f:
48:f1:07:51:1f:73:c8:ab:92:01:32:07:1c:02:f7:1c:bd:3a:
3f:21:a1:9c:c9:db:04:36:22:4d:92:eb:0c:b0:b0:8e:1a:b3:
fe:ed:6c:4c:72:93:14:41:2c:a7:85:f5:48:17:d0:b3:96:4c:
84:79:16:4c:33:34:c2:62:a2:b0:11:87:47:56:9a:58:06:e5:
29:6c:3f:b1:da:71:bf:b6:aa:c7:7e:d9:88:ac:92:49:e2:99:
fb:8a:63:e8:8e:04:51:9f:a9:74:32:31:79:a0:6f:87:7a:2f:
53:27:b2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 19:22:22 2025 by rpki-client