Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566a646e41b685f6b19da291c37f87318291de90ff97.cer
File: a3d7c4566a646e41b685f6b19da291c37f87318291de90ff97.cer (raw, json)
Hash identifier: CKYrpqWNr7PTMrKSCK8kuq7LCb4lHhf+kqndungMvXk=
Subject key identifier: B2:17:82:C1:3C:39:F3:0E:43:98:FC:AA:71:68:96:8E:A1:3A:D5:1F
Authority key identifier: 83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8
Certificate issuer: /CN=d8ea1081-bccb-41d5-b0fe-1b9724cced3f
Certificate serial: 010D0C9F432858417C5639E250167F337F0F3A40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer
Manifest: rsync://rpki.co/repo/HYSP/17/B21782C13C39F30E4398FCAA7168968EA13AD51F.mft
caRepository: rsync://rpki.co/repo/HYSP/17
Notify URL: https://rpki.co/rrdp/notification.xml
Certificate not before: Sat 08 Apr 2023 11:32:18 +0000
Certificate not after: Fri 11 Jul 2025 11:32:18 +0000
Subordinate resources: IP: 23.149.248.0/24
IP: 149.112.53.0/24
IP: 2602:fa90::/36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:7c:56:39:e2:50:16:7f:33:7f:0f:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ea1081-bccb-41d5-b0fe-1b9724cced3f
Validity
Not Before: Apr 8 11:32:18 2023 GMT
Not After : Jul 11 11:32:18 2025 GMT
Subject: CN=a3d7c4566a646e41b685f6b19da291c37f87318291de90ff97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:c3:5e:57:6c:1c:2d:18:b7:8b:64:a7:4f:
49:d7:c6:09:a3:0d:db:42:3c:a1:bd:ff:dd:3f:c2:
61:c0:13:bf:da:bf:3d:64:be:d3:94:f1:5a:87:92:
1c:b7:d2:3d:aa:ba:35:6f:54:8e:5e:ab:68:09:20:
4b:1e:cd:41:67:9b:33:27:33:4e:9e:81:b6:6b:63:
8f:4d:d5:4f:e5:76:7a:8b:78:15:83:24:f9:30:10:
bd:3f:9c:42:f6:be:fe:ce:26:ae:13:3e:c7:6b:2e:
19:39:71:a7:72:c3:35:e2:1b:60:59:24:f1:97:e5:
c7:44:71:75:5c:a5:8c:78:67:33:00:50:85:df:cb:
f4:b5:90:2f:20:85:19:8b:aa:43:6d:c6:fd:0a:db:
ab:d8:e1:a8:6c:bf:02:09:a1:bb:53:65:3c:12:d9:
e7:d5:a8:f9:3d:67:8a:38:2a:73:9a:87:e8:fc:7b:
d0:ef:98:ec:03:a0:d5:26:6f:bc:d3:15:eb:ad:77:
60:11:6e:59:fb:bf:c1:c2:ca:b0:00:18:ba:2e:2f:
f1:69:77:d9:8d:9a:de:4b:ad:a1:fd:60:76:dd:1b:
63:69:fd:ea:da:f8:ea:4e:c0:3e:f8:25:87:13:62:
bf:55:d7:8c:97:ef:69:8b:dc:04:5c:5c:45:8c:09:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:17:82:C1:3C:39:F3:0E:43:98:FC:AA:71:68:96:8E:A1:3A:D5:1F
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/HYSP/17
RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/17/B21782C13C39F30E4398FCAA7168968EA13AD51F.mft
RPKI Notify - URI:https://rpki.co/rrdp/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.crl
X509v3 Authority Key Identifier:
keyid:83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.248.0/24
149.112.53.0/24
IPv6:
2602:fa90::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:6d:0f:da:75:29:60:f5:06:3f:c7:4b:ad:53:d0:16:00:99:
c4:92:f2:74:af:56:d4:f0:89:29:cb:79:20:07:23:16:16:95:
c5:a6:55:d2:24:06:46:5e:0f:c4:4a:df:cd:9b:91:6c:2c:e9:
ac:44:06:8a:57:18:ea:ab:9c:ef:d3:cb:32:bd:a9:93:74:ce:
43:1c:45:1a:0b:1f:4e:0f:ed:d9:fb:5a:f7:51:95:2a:90:ce:
97:1e:e9:f8:f0:29:a2:39:fa:49:19:ea:db:48:cd:f3:5a:01:
b9:f0:da:e1:0f:d9:be:25:15:29:ed:3f:5f:fc:9b:60:32:a7:
af:e3:05:d9:65:3d:9e:77:4f:f1:46:17:22:be:2c:7e:ba:eb:
21:fa:6f:93:7b:4d:ff:ca:01:5c:a8:bf:fa:79:55:0a:db:15:
8a:41:71:cd:8e:08:65:3b:22:17:17:95:0f:26:03:08:ce:ff:
b8:28:ec:47:91:fc:92:85:2d:06:45:82:fd:42:aa:e1:e3:5b:
d4:1c:19:98:3a:5c:ab:92:cc:c0:bd:44:20:bb:5c:68:52:58:
43:4e:f4:9a:52:02:09:86:0b:d0:c1:fb:8d:65:04:b8:e8:26:
9e:7b:ae:65:f1:7f:22:2b:a1:10:9e:ef:dc:4c:38:1c:d5:64:
2f:f2:88:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:47 2023 by rpki-client on console-ams.rpki-client.org