![](/console.gif)
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0.cer
File: 2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0.cer (raw, json)
Hash identifier: zp2P2CFyKtcubJh+5pCrwEX7s58djEOOoFyECdIGu/w=
Subject key identifier: E6:93:D1:C7:7F:F6:45:B5:C9:57:59:A0:D6:CE:A4:88:2D:05:9D:34
Authority key identifier: 9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF
Certificate issuer: /CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a
Certificate serial: 010D0C9F432858417C149A492B819D5134BC9180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
Manifest: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/E693D1C77FF645B5C95759A0D6CEA4882D059D34.mft
caRepository: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Sat 08 Apr 2023 09:20:04 +0000
Certificate not after: Fri 11 Jul 2025 09:20:04 +0000
Subordinate resources: IP: 23.147.120.0/24
IP: 2602:faa8::/40
Validation: Failed, certificate revoked on Thu 13 Apr 2023 15:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:7c:14:9a:49:2b:81:9d:51:34:bc:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a
Validity
Not Before: Apr 8 09:20:04 2023 GMT
Not After : Jul 11 09:20:04 2025 GMT
Subject: CN=2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:64:87:30:89:96:1d:f6:bf:67:c9:45:3f:
85:2c:86:66:d0:d4:b0:f5:7a:db:16:5b:43:b5:a2:
c6:fe:16:96:99:d6:61:c0:05:6d:b8:67:70:fe:25:
1b:49:a7:84:66:b4:fc:78:26:09:d6:bc:3e:db:4c:
ac:2c:3a:dd:4a:b3:51:3a:0f:d7:52:8b:83:df:a2:
f2:26:05:d8:79:ef:de:a9:d7:e4:3a:ce:66:31:fc:
de:4b:25:9a:9c:47:ec:70:03:c6:ba:f3:e0:1b:28:
65:38:14:cf:bd:b7:bb:9d:a1:70:93:33:3d:a0:5f:
0f:8c:ff:24:75:30:ce:7f:3c:0e:67:ce:ba:e9:5b:
d8:72:8b:e0:54:6c:7b:3e:93:73:61:b8:28:7c:af:
d5:59:93:e2:cd:1f:58:d7:a5:54:4c:73:5c:d3:5c:
f7:42:ed:df:6e:ce:82:cd:02:ff:35:8a:ac:c5:7b:
8c:15:4f:a5:b0:ff:88:c1:67:6a:23:25:83:0a:e5:
82:75:7a:28:4f:c3:eb:f2:64:d7:48:69:60:5a:92:
ab:b0:eb:d1:23:f6:58:7c:f5:6f:e1:a7:ca:4e:e4:
bb:b1:ed:01:0c:a9:d3:a4:fe:41:9d:95:af:99:08:
b8:b5:83:56:20:87:07:4a:ea:29:1e:d6:11:3a:56:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:93:D1:C7:7F:F6:45:B5:C9:57:59:A0:D6:CE:A4:88:2D:05:9D:34
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/E693D1C77FF645B5C95759A0D6CEA4882D059D34.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
X509v3 Authority Key Identifier:
keyid:9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.120.0/24
IPv6:
2602:faa8::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:cd:3f:73:40:22:28:d9:94:25:0c:00:24:08:b3:fa:19:dc:
fb:cd:a9:5c:81:e5:39:26:0b:fe:ff:d6:2f:94:9a:ab:b9:d7:
8e:a7:c0:79:54:f2:cc:c5:51:75:fa:74:8f:a7:91:34:76:46:
e1:17:e9:cc:87:96:38:39:4f:d4:30:f3:d1:65:59:80:ce:67:
46:e2:c2:50:47:81:2d:b7:38:0c:7e:12:34:5d:7a:2a:c7:33:
ee:17:20:ce:22:6f:1b:7b:6c:2a:c8:db:4d:30:ea:bd:6f:e2:
2b:37:7d:28:f7:d6:4a:74:42:37:a7:4a:f1:ec:3e:bf:19:f7:
77:73:a1:b3:62:7d:8e:83:3e:72:05:e3:6a:41:de:8d:9b:ae:
f2:e1:fb:16:87:06:ee:39:e7:34:85:92:74:dc:51:0e:c3:6d:
3a:d6:6f:9e:f2:14:d5:82:f4:47:c1:10:a5:0d:7f:44:1c:a6:
6a:97:0a:b7:53:54:e4:31:81:25:40:78:b1:16:b0:9c:7d:c7:
1c:df:89:4f:3b:cd:f1:e3:72:ac:06:78:3d:26:22:6f:db:18:
e9:5a:94:8f:bd:ce:c8:c0:88:12:3c:8f:4c:2c:bc:9e:d0:92:
f4:fb:3f:bf:f8:e6:89:8b:e6:ec:f0:21:81:5d:29:28:58:66:
b8:ba:99:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:42 2025 by rpki-client