Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7.cer
File: 20f6a64b-91b3-442e-a7bd-5821a82b2db7.cer (raw, json)
Hash identifier: tSGDuHHwq6g9lUBHlhiSSmZd5Qc6AWk+Cjq7l/JAt4k=
Subject key identifier: ED:3D:EF:48:02:A5:D4:E1:93:64:7E:B7:BC:94:59:F2:20:2A:51:07
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F432858437068043B54687BBDE85A4A20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7/20f6a64b-91b3-442e-a7bd-5821a82b2db7.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 04 Oct 2023 14:32:19 +0000
Certificate not after: Tue 06 Jan 2026 15:32:19 +0000
Subordinate resources: AS: 26340
AS: 399970
IP: 149.112.152.0/22
IP: 205.196.98.0/24
IP: 2602:fc3b::/36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:70:68:04:3b:54:68:7b:bd:e8:5a:4a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Oct 4 14:32:19 2023 GMT
Not After : Jan 6 15:32:19 2026 GMT
Subject: CN=20f6a64b-91b3-442e-a7bd-5821a82b2db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:d7:69:b6:01:06:9a:0c:f3:ed:bb:8c:3a:
7f:f4:46:f5:f5:10:6f:d6:01:e2:4b:1c:8c:40:97:
a6:b9:bb:ed:dc:69:70:df:c7:a4:32:44:90:52:89:
df:c6:ff:b6:00:05:3c:f1:4a:38:cd:7c:db:88:52:
bc:aa:f8:54:15:27:34:43:d5:97:65:94:39:ba:ee:
21:e3:c6:4a:a2:52:73:a4:6e:0f:f1:b6:47:48:52:
03:7e:da:bf:20:95:8e:9d:28:d5:e6:2e:d1:47:e7:
dd:a9:77:c9:0d:af:8e:93:92:c2:50:4d:da:28:8f:
bf:d0:3f:4f:56:eb:4f:f9:11:f4:83:1f:e0:65:44:
b1:63:b1:25:d2:ac:35:64:f1:2c:d1:b6:a3:8c:6f:
e6:31:ed:ae:2a:67:32:28:ce:b0:bb:97:0d:22:78:
49:e0:98:99:2c:5c:5d:fa:04:ef:64:47:34:44:f4:
80:04:55:a9:5c:70:f9:6e:40:7c:3c:46:6a:4e:ff:
a2:b3:2c:c8:36:ad:60:18:3b:03:73:05:e9:47:ed:
f0:ee:77:e1:bf:e1:88:69:a9:46:91:a1:85:56:cb:
d0:60:a0:17:98:4b:86:cb:d5:81:b9:d5:4b:08:e3:
22:9e:b3:97:3b:77:6f:7f:68:f3:5e:16:6f:ef:52:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3D:EF:48:02:A5:D4:E1:93:64:7E:B7:BC:94:59:F2:20:2A:51:07
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7/20f6a64b-91b3-442e-a7bd-5821a82b2db7.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
205.196.98.0/24
IPv6:
2602:fc3b::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26340
399970
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:1a:57:bb:2d:e3:0f:6d:46:12:8e:ca:69:97:09:c0:d2:db:
94:3d:41:ef:7c:c0:e0:ac:2f:cb:3b:f8:20:c5:42:db:61:d1:
f7:f0:f1:8b:2b:59:07:3d:96:d2:b6:68:da:c9:6c:64:36:b6:
4a:3a:97:dd:28:28:da:96:24:5b:8d:88:5f:ff:75:7b:40:d6:
f7:d6:ae:03:dd:ef:e7:70:42:de:81:3c:40:62:d3:3b:cf:de:
7e:d2:c5:a6:02:1f:9a:32:79:d0:db:fc:9a:05:94:8c:99:85:
a9:bf:5b:7a:8f:b6:e3:4e:f6:67:5c:96:a5:7a:b5:77:d3:08:
0b:63:5e:68:3d:a9:2c:da:d0:86:ad:6c:06:c9:3f:a6:da:e2:
7f:3d:54:96:b6:f2:98:b4:b6:21:ff:8b:14:9e:14:00:87:27:
cb:c2:db:26:70:97:51:46:51:46:1b:c9:a0:b7:d7:cc:cf:70:
aa:03:5b:ff:c5:85:23:fe:e4:a7:ba:b1:47:b8:c4:2e:3f:95:
3e:6e:0f:1a:34:d9:58:23:e1:e2:15:1d:56:3f:fa:2e:46:76:
34:16:f4:e9:f0:f0:9d:b9:60:cc:48:c9:02:26:4a:9c:a0:4b:
05:1a:c1:1b:26:34:f6:83:7e:dc:68:4a:e8:91:1d:64:d8:5a:
fa:22:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 16:53:21 2023 by rpki-client on console-ams.rpki-client.org