Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.cer
File: cd870e0a-cc0e-44e5-9569-1ea2c38048dc.cer (raw, json)
Hash identifier: w955maZYX5QO3fp1GKr+yQYJmhJRnIkIJz8QfvNRNQI=
Subject key identifier: 74:AB:0D:8B:C7:D2:D7:51:CE:41:86:F2:28:99:0F:A5:10:01:67:1B
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584855CDF324120A1FD6EBA9B580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 26 Dec 2024 13:45:34 +0000
Certificate not after: Wed 31 Mar 2027 12:45:34 +0000
Subordinate resources: AS: 19620
IP: 23.162.136.0/24
IP: 2602:f97f::/40
Validation: Failed, certificate revoked on Wed 05 Feb 2025 15:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:cd:f3:24:12:0a:1f:d6:eb:a9:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Dec 26 13:45:34 2024 GMT
Not After : Mar 31 12:45:34 2027 GMT
Subject: CN=cd870e0a-cc0e-44e5-9569-1ea2c38048dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ec:89:bc:73:f9:20:33:24:0c:c2:54:21:b6:
20:cf:9e:a7:fc:c3:db:5b:0a:f3:72:4a:e0:81:df:
85:d3:6c:6f:25:68:40:53:5a:29:b4:c8:04:40:50:
13:f3:5d:91:89:2a:95:0c:01:cc:39:fb:ef:f1:8f:
97:d9:d8:28:ca:f2:ff:51:6a:51:2c:7f:ed:cd:0f:
a8:3c:8b:10:49:27:ea:21:b8:13:ca:a7:1d:96:ed:
81:3a:28:98:fb:ee:4a:9b:0f:b0:b9:a9:f3:e0:57:
14:8d:94:15:1a:18:d5:59:6a:bf:7f:6c:56:94:ff:
85:f4:78:cf:4b:e3:8f:fc:7b:2d:59:a6:3e:22:0b:
12:d3:33:85:6d:19:79:d6:30:7e:df:ac:b8:7c:45:
d1:9f:84:b0:92:0c:5f:24:c2:af:60:92:60:8f:97:
3a:a2:54:c4:3c:2d:58:32:56:a0:40:3a:0e:fe:4a:
97:26:00:83:77:7a:ac:44:ba:5c:d3:6f:61:21:22:
91:5a:f7:7d:10:55:37:d1:91:6e:15:47:e7:bc:3d:
8f:59:67:31:91:ec:d8:16:5e:52:64:e6:0b:f6:61:
2e:34:b5:bc:d6:55:75:05:7d:06:49:fe:5a:e2:58:
3e:b3:12:03:9c:3f:e4:6a:91:4f:49:e4:dd:f7:f1:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AB:0D:8B:C7:D2:D7:51:CE:41:86:F2:28:99:0F:A5:10:01:67:1B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.162.136.0/24
IPv6:
2602:f97f::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19620
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:60:fa:00:35:e5:19:ea:9e:57:74:64:b6:99:9a:01:eb:c8:
79:63:ff:20:69:c2:f4:fe:6b:10:de:b8:d2:d2:73:0c:a8:d8:
ee:45:cf:21:c9:c2:cb:53:d7:01:e7:45:eb:1e:fb:32:74:c6:
39:a5:91:31:d7:a8:9d:fc:f4:9b:15:ee:a8:23:d7:75:b4:24:
2c:36:64:bc:36:d1:04:b6:a0:b3:d7:a7:85:5a:06:47:23:11:
52:4b:3e:b9:2d:3e:e5:d5:65:ef:96:71:a8:3a:6a:21:88:2c:
77:6e:75:8e:c0:02:75:81:68:11:db:b0:e9:51:11:4e:9f:dc:
1e:ed:22:ea:70:40:02:3c:a7:a1:14:24:43:6f:32:75:4f:07:
02:a1:5a:c1:2a:93:3c:d7:d6:a9:6c:13:84:86:39:00:d3:b4:
81:59:ce:02:e0:71:ed:37:28:4f:0e:52:de:71:4d:dd:64:89:
4f:78:b6:cc:37:19:37:95:01:27:cc:91:3e:73:54:5c:3c:1b:
2b:31:06:7c:b7:68:53:fb:12:a7:49:29:3d:f8:78:82:33:61:
8a:61:16:07:cc:8f:94:b4:72:5a:ea:21:5c:1d:0b:66:3a:35:
64:39:e4:66:73:88:cf:ad:67:63:1c:b6:ea:7e:8c:7f:36:88:
c5:36:a7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:22:47 2025 by rpki-client