Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8ac74274-337c-47f6-83af-fa21cf5ab89a/b374b829da24f35dc24688a9ebce5b7c72a492009aa51edde9.cer
File: b374b829da24f35dc24688a9ebce5b7c72a492009aa51edde9.cer (raw, json)
Hash identifier: iMH6ea0D4Jpvp40PZ+LQcaf0UAitwwf5XX5Nzz6/zts=
Subject key identifier: 24:04:AC:A1:3A:EF:29:52:5C:14:D4:63:9D:5D:93:B5:49:83:03:74
Authority key identifier: BE:91:46:21:78:05:EC:33:A6:1F:48:DB:7B:91:1F:8C:1A:06:4E:44
Certificate issuer: /CN=8ac74274-337c-47f6-83af-fa21cf5ab89a
Certificate serial: 010D0C9F4328584425F1FBCE42951233AEBB4290
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8ac74274-337c-47f6-83af-fa21cf5ab89a.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/4/2404ACA13AEF29525C14D4639D5D93B549830374.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 08 Dec 2023 15:11:37 +0000
Certificate not after: Thu 12 Mar 2026 14:11:37 +0000
Subordinate resources: AS: 398467
IP: 2602:f9cc::/40
Validation: Failed, certificate revoked on Wed 13 Dec 2023 11:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:25:f1:fb:ce:42:95:12:33:ae:bb:42:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac74274-337c-47f6-83af-fa21cf5ab89a
Validity
Not Before: Dec 8 15:11:37 2023 GMT
Not After : Mar 12 14:11:37 2026 GMT
Subject: CN=b374b829da24f35dc24688a9ebce5b7c72a492009aa51edde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:1a:41:4e:0f:a8:bd:15:62:27:80:f2:cf:
69:37:59:15:42:e6:ca:bc:ad:64:60:1a:ac:eb:e1:
4c:57:20:84:85:f8:03:bf:cc:08:94:11:10:9b:b8:
f0:de:42:78:a3:16:a7:1c:a2:e3:d4:d6:5f:1f:2b:
2f:94:a0:c1:31:35:97:56:68:78:c5:b5:6c:19:09:
6b:7f:db:5f:c8:18:9d:f1:93:9f:fc:48:82:ff:27:
45:73:30:21:ed:a0:59:1f:52:96:77:cc:fa:e3:15:
8f:7e:12:64:51:70:ff:20:df:30:3b:dd:62:4d:b6:
d1:0d:94:db:e4:ac:6d:3c:3a:e6:45:13:28:97:a6:
20:12:ad:8a:93:ca:e5:a3:52:ca:d5:85:9e:5e:8f:
de:15:88:f9:99:70:d2:78:bd:ff:90:ff:c1:7c:68:
d6:ca:13:94:25:04:96:cc:22:0d:6e:d8:85:ee:74:
63:79:52:18:e0:85:4f:8d:24:ac:70:93:b1:f7:43:
13:c0:55:1a:24:f7:4d:65:16:67:f5:73:e9:ba:26:
60:3d:35:3f:54:96:78:ee:75:8f:0a:fc:b4:d3:57:
98:35:9e:9f:ed:4c:d2:3c:42:b1:cc:2c:a8:5e:e4:
dc:66:cf:eb:74:9d:03:73:b3:64:08:ff:7f:27:4c:
05:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:04:AC:A1:3A:EF:29:52:5C:14:D4:63:9D:5D:93:B5:49:83:03:74
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/4/2404ACA13AEF29525C14D4639D5D93B549830374.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8ac74274-337c-47f6-83af-fa21cf5ab89a/8ac74274-337c-47f6-83af-fa21cf5ab89a.crl
X509v3 Authority Key Identifier:
keyid:BE:91:46:21:78:05:EC:33:A6:1F:48:DB:7B:91:1F:8C:1A:06:4E:44
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8ac74274-337c-47f6-83af-fa21cf5ab89a.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9cc::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398467
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:8b:af:05:58:9a:d1:7f:30:4e:a4:78:df:9c:dd:fe:9b:c6:
8b:30:76:22:29:78:59:85:7e:6e:e7:ee:ef:ed:b4:4a:ca:4a:
41:4f:c1:14:9b:0e:5f:c7:4e:61:42:3f:1b:5e:59:47:dc:7a:
79:91:4d:50:4a:04:8c:63:f3:c5:af:63:4e:18:66:99:c4:05:
7b:14:f2:00:a3:2b:c3:66:54:b6:bd:d2:60:fd:ea:fa:57:7f:
19:9d:f6:cb:4d:17:96:0a:dc:25:a8:6d:96:d7:74:a7:5a:d1:
aa:c5:db:7b:e9:2a:4c:02:87:bb:e8:a2:b2:3b:f3:95:83:ae:
4c:9d:5f:27:e8:f0:37:bd:16:1c:23:9d:4e:8a:3c:2f:82:d3:
ca:c4:d2:c5:42:f8:7e:b3:4d:ea:00:06:00:31:e0:43:e8:28:
a4:55:e0:3f:f4:dd:81:6f:4d:d4:5d:91:0a:34:2d:85:94:10:
8b:f8:82:10:a9:f6:bf:9e:f3:f2:b0:43:7d:72:41:5b:64:97:
a2:45:fb:f8:f1:91:e2:93:48:cd:c0:f2:08:69:05:cc:0b:0e:
f1:4d:02:5d:6a:f8:2e:b6:e0:a7:d9:b3:1c:c5:d5:ad:a3:14:
56:f4:5a:a3:6e:bf:be:2e:3e:08:cd:e2:33:69:91:34:39:7c:
1a:a1:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org