Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb.cer
File: 67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb.cer (raw, json)
Hash identifier: 2bnvBUS0GCtsugd6R58iLPk7T+baxDZy+WiC6ZX+OPQ=
Subject key identifier: 28:6C:35:F7:70:BA:3A:C4:56:71:8D:27:1E:E5:45:F7:1A:41:68:13
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584373C53A194712AAB6A5FCD280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 05 Oct 2023 19:27:33 +0000
Certificate not after: Wed 07 Jan 2026 20:27:33 +0000
Subordinate resources: AS: 400850
IP: 66.205.246.0/24
IP: 2620:5f:e000::/48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:73:c5:3a:19:47:12:aa:b6:a5:fc:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Oct 5 19:27:33 2023 GMT
Not After : Jan 7 20:27:33 2026 GMT
Subject: CN=67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2b:92:7c:54:3d:56:95:cf:06:4d:d7:bc:b9:
1f:0a:bc:df:4b:a3:bf:24:6b:6b:7b:13:b5:dc:90:
2a:da:b7:eb:cb:4e:ba:6a:8f:b9:f6:2f:95:ad:8a:
17:21:56:34:07:65:9f:14:cf:dd:13:c0:c5:6a:16:
8f:58:41:42:e6:a3:ec:95:b3:37:00:f6:e2:7a:1f:
31:08:70:f4:a7:27:73:a5:43:ec:18:54:71:c5:e9:
71:0a:3a:7c:ec:b7:4b:02:bf:21:ec:e9:3e:a4:c2:
ff:b8:69:0c:e1:de:d1:00:01:6f:7a:aa:f3:6c:e3:
00:45:bc:45:10:24:48:fa:fe:96:e2:68:f4:03:ec:
7b:db:b2:7a:05:52:59:91:d1:37:9c:c7:d0:da:82:
d0:08:fe:f6:17:1b:5b:89:1c:7f:9c:a4:8d:8c:6e:
4e:23:d7:fd:63:6c:2b:63:db:7b:bf:1b:79:50:8d:
69:63:a3:6a:d2:0d:0a:a0:ad:2f:28:86:da:ac:7b:
9f:1f:cb:bc:b7:c2:2c:be:f6:f2:45:a9:cd:fa:3d:
65:bc:f6:5e:fa:63:f5:66:a6:61:f6:aa:da:19:5c:
2b:4a:37:5d:68:15:33:c3:e2:0c:9e:bd:47:d7:ab:
1b:57:fe:8b:f7:45:39:a2:89:88:c6:ba:c7:4f:2e:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6C:35:F7:70:BA:3A:C4:56:71:8D:27:1E:E5:45:F7:1A:41:68:13
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
66.205.246.0/24
IPv6:
2620:5f:e000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400850
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:50:dd:d8:7e:91:ed:46:ee:ff:f9:d2:33:f4:01:e9:f9:ce:
c6:b6:f6:9e:e6:35:40:84:47:90:6f:cd:8f:fc:ff:bc:53:7b:
27:af:a2:22:99:a8:80:80:36:ce:07:68:10:be:aa:da:8b:9e:
29:63:aa:86:0e:9b:c2:aa:32:05:89:42:02:6a:f6:66:c4:49:
e6:c8:c9:8f:25:0d:1d:59:d4:bd:be:57:24:30:0f:14:d0:14:
60:61:00:0e:8b:e8:8f:b0:86:ad:20:9d:b8:ee:fc:25:cc:09:
c3:70:f2:e4:70:d2:9b:c0:dd:6c:8b:ad:71:f4:ba:c4:f6:dc:
7b:34:3b:16:57:67:f6:fa:87:79:1a:99:d1:7a:8a:6f:69:fe:
d1:37:9d:ec:64:a2:3c:e1:93:08:a3:f5:cb:48:a7:a8:fd:f4:
db:93:5c:32:f8:30:f3:79:d9:c3:22:aa:7b:01:70:7c:21:3a:
44:2f:5e:33:dd:0a:7d:b0:4f:36:5b:5b:d7:14:2a:e6:d9:78:
f9:cc:56:88:d9:c8:21:1e:05:be:8d:48:d9:a5:5c:93:df:56:
97:29:42:3b:4c:9c:4e:17:6f:0e:4f:ac:45:08:dc:b9:42:3b:
6a:58:f6:5b:e7:34:f3:9a:66:22:82:a0:3d:6e:99:51:fb:2e:
2c:69:10:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 9 16:19:10 2023 by rpki-client on console-ams.rpki-client.org