Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13a9839f-42f4-47ea-9a18-648974a5ed48.cer
File: 13a9839f-42f4-47ea-9a18-648974a5ed48.cer (raw, json)
Hash identifier: YUqFmKEPqU70cEyRqpAtGxM7TTnjYUPIysD/zjl/BGg=
Subject key identifier: 86:C8:AC:62:8A:E5:9F:A1:02:BA:72:F2:A1:A6:B4:A4:BC:45:D0:72
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F43285843D6D81C2ED53981ED9D6DE180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13a9839f-42f4-47ea-9a18-648974a5ed48/13a9839f-42f4-47ea-9a18-648974a5ed48.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13a9839f-42f4-47ea-9a18-648974a5ed48/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 10 Nov 2023 07:10:37 +0000
Certificate not after: Thu 12 Feb 2026 07:10:37 +0000
Subordinate resources: AS: 26340
AS: 399970
IP: 149.112.152.0/22
IP: 205.196.98.0/24
IP: 2602:fc3b::/36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d6:d8:1c:2e:d5:39:81:ed:9d:6d:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Nov 10 07:10:37 2023 GMT
Not After : Feb 12 07:10:37 2026 GMT
Subject: CN=13a9839f-42f4-47ea-9a18-648974a5ed48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c3:a8:93:ab:c7:fe:ba:89:40:88:0c:96:82:
46:ab:77:ef:f6:03:4b:8f:59:66:b5:b3:d2:cb:d9:
70:24:c3:55:69:e1:92:27:a6:62:82:14:3b:0f:c2:
22:da:fd:a7:5e:ff:15:a8:b1:95:ef:c1:f5:99:3c:
a3:cf:d4:5d:60:fc:c8:02:b9:b8:4c:74:93:42:5c:
79:c6:45:88:0a:58:09:91:11:b1:52:4e:32:aa:ef:
13:47:dd:96:3a:65:92:49:19:c7:91:cf:d6:2c:87:
14:00:b6:a7:38:80:eb:d7:86:31:ec:6d:4f:60:79:
ae:30:09:01:2a:b5:41:a5:c3:ab:1c:8d:7b:76:67:
8c:84:43:ef:c7:7e:01:f3:74:56:80:f2:d8:51:ba:
0e:dd:5b:92:72:08:1c:94:41:fd:9d:c0:90:0d:7a:
8c:ce:ef:92:fe:11:8c:63:04:19:85:a3:c2:6b:2f:
cd:7a:49:dc:0d:cd:ba:da:92:a6:d0:20:84:3b:0e:
fe:d3:6a:71:db:25:8d:02:db:ca:d5:cb:24:ec:b9:
b0:ed:8b:3a:fa:7c:8a:14:8e:7b:1d:d4:ca:96:be:
36:fa:bc:c8:e5:dd:eb:79:d9:7b:4c:14:af:f2:77:
7b:43:a1:10:4b:ab:43:03:90:a4:f8:db:35:08:3c:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C8:AC:62:8A:E5:9F:A1:02:BA:72:F2:A1:A6:B4:A4:BC:45:D0:72
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13a9839f-42f4-47ea-9a18-648974a5ed48/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13a9839f-42f4-47ea-9a18-648974a5ed48/13a9839f-42f4-47ea-9a18-648974a5ed48.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
205.196.98.0/24
IPv6:
2602:fc3b::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26340
399970
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:3f:15:e7:98:3b:69:24:c8:14:b8:4f:00:46:28:10:66:c2:
41:a7:f6:3f:af:84:ae:6d:64:87:a3:7d:c9:5e:67:dc:38:70:
3f:a6:37:cb:ed:57:ac:50:eb:e9:33:cd:cd:6e:4c:bf:eb:0f:
df:a8:8f:5e:51:20:69:a3:19:a7:09:d6:1c:83:9a:9d:88:24:
6c:11:bb:31:b4:10:c1:ef:96:14:5a:98:54:2e:aa:2e:32:51:
32:46:12:63:e9:41:a4:b8:d9:67:29:f3:a1:71:1b:44:38:c7:
e8:97:11:88:08:9c:98:bb:9b:09:92:17:94:fe:2a:af:d5:c2:
c5:f4:f9:41:04:32:aa:a6:90:c7:29:d8:62:f8:02:7d:4a:b9:
bf:0c:e9:f4:1f:54:83:ef:ed:c6:41:c0:02:df:23:af:43:0f:
f0:7e:13:a6:48:20:f1:c7:90:ad:3c:c1:19:66:12:4f:bf:19:
23:ed:35:22:21:e4:ec:9b:84:8e:d9:25:ac:e0:e1:4b:db:8a:
bb:96:34:5f:59:ef:0d:67:3e:71:a5:71:c8:e4:ec:b9:16:a3:
4e:b9:45:c9:85:d0:a6:ee:7e:90:20:98:c8:35:8f:39:28:b3:
93:62:a1:c3:89:08:0e:1b:92:61:80:bf:30:37:98:35:8e:d7:
7e:a3:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 16:00:17 2023 by rpki-client on console-fra.rpki-client.org