Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924.cer
File: de865b2a-8f4f-483a-937a-3947af6e6924.cer (raw, json)
Hash identifier: WyALJoUtIYUa5gxKVlpOahB/cueSDIcEDbyvUHbVtns=
Subject key identifier: D5:8A:FC:33:7A:DB:C0:F3:D6:54:00:8E:A1:6B:0A:08:D9:7D:D1:55
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F432858445E62CE4ED87E2F7B90389680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/de865b2a-8f4f-483a-937a-3947af6e6924.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 28 Dec 2023 20:24:12 +0000
Certificate not after: Wed 18 Mar 2026 16:43:21 +0000
Subordinate resources: AS: 26340
AS: 399970
IP: 149.112.152.0/22
IP: 205.196.98.0/24
IP: 2602:fc3b::/36
Validation: Failed, certificate revoked on Fri 09 Feb 2024 17:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:5e:62:ce:4e:d8:7e:2f:7b:90:38:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Dec 28 20:24:12 2023 GMT
Not After : Mar 18 16:43:21 2026 GMT
Subject: CN=de865b2a-8f4f-483a-937a-3947af6e6924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:f4:63:c0:83:e5:69:db:f1:e3:7b:92:5d:
0c:89:bb:97:fb:6f:5a:f9:af:4c:db:ec:b9:2c:b1:
3f:81:b6:29:b4:6f:76:19:9c:f0:7c:6f:6f:4b:e4:
7a:ee:de:7c:18:ad:d2:a3:fe:36:ae:b6:b0:f0:4b:
a8:4a:ad:e9:82:f3:32:2d:ee:ed:01:42:b6:42:1c:
6c:b0:89:a6:96:02:7c:af:7a:54:83:ae:d4:24:c2:
b8:5e:f8:6f:7d:2e:6b:59:b6:3c:0e:a6:fa:c5:6f:
0d:ad:86:26:fb:8c:42:0e:92:ab:2f:7e:d3:e0:d3:
2f:d5:8d:e2:c5:fd:0c:f7:57:17:dc:b0:66:cc:65:
49:d2:c6:b6:b2:ee:a0:7b:cd:d4:68:13:35:35:f1:
51:9d:ed:c0:0b:f1:0c:ec:e2:06:5a:46:c2:98:3e:
ac:c5:0d:c2:bb:98:2e:e5:3a:ae:7b:d8:4a:02:b3:
05:88:f4:99:67:b4:e6:c2:3f:dd:aa:f7:75:17:f6:
58:bc:4d:bb:c1:3d:25:77:d7:63:8d:e1:37:08:37:
07:bf:c0:07:e1:6d:75:77:9e:3d:6d:61:10:04:6a:
bf:87:b0:87:1d:8f:14:aa:9d:99:eb:3b:f2:e5:7d:
f7:25:fb:7c:26:55:d7:4e:20:1f:69:80:e6:c7:5e:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8A:FC:33:7A:DB:C0:F3:D6:54:00:8E:A1:6B:0A:08:D9:7D:D1:55
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/de865b2a-8f4f-483a-937a-3947af6e6924.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
205.196.98.0/24
IPv6:
2602:fc3b::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26340
399970
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:d6:48:32:61:df:58:1c:65:6e:28:e6:e4:e3:dc:26:0c:e0:
40:2a:e7:e3:b5:c4:36:84:2a:5c:2f:dd:69:96:ea:9c:48:1d:
53:79:e0:e7:e8:5d:87:6c:d9:02:ff:94:ed:7d:fc:a4:e5:52:
7b:73:f4:40:30:b1:f1:24:22:8e:dd:47:0c:0f:53:47:cf:86:
70:e1:a4:8f:54:72:23:d4:47:07:a1:6b:6a:f9:15:18:a6:d6:
11:99:38:a1:cf:d5:a7:48:59:eb:75:69:23:4b:c7:7b:42:f1:
64:d6:87:c6:41:1d:a8:c3:fb:fd:7e:70:e8:0a:aa:40:6e:5a:
8b:c2:1e:08:af:99:e0:49:e6:a9:73:15:5d:a1:5f:3d:0c:56:
f6:a1:b5:9a:b2:6b:e4:3d:4f:7c:58:f9:e8:33:fd:62:ee:28:
6d:0c:1a:61:96:8f:de:83:e2:46:bf:11:f4:b8:3f:a1:46:71:
b0:bd:df:c1:8d:7e:78:9c:86:11:30:ae:69:dd:65:db:d4:e2:
f6:a7:ea:83:1a:92:31:bf:61:85:27:bc:e0:87:9e:d5:a9:53:
f9:dc:ed:2b:15:53:55:92:f8:8b:60:02:ad:14:f0:3c:31:53:
a5:3d:bb:dc:0d:e5:d2:9f:3c:83:c3:c5:78:ef:ef:09:b1:41:
fb:da:89:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 21:17:59 2024 by rpki-client on console-fra.rpki-client.org