Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fdfd81ee-0204-487b-a8cf-baa679176128.cer
File: fdfd81ee-0204-487b-a8cf-baa679176128.cer (raw, json)
Hash identifier: SvyOXvP4Y8yDQSMRRmAliadKgRJb+7FGsyqGinhGloI=
Subject key identifier: 0E:B8:65:74:47:1D:FA:90:FF:53:ED:9D:2A:85:96:2E:84:21:61:00
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584913BA71D1218564976D495B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fdfd81ee-0204-487b-a8cf-baa679176128/fdfd81ee-0204-487b-a8cf-baa679176128.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fdfd81ee-0204-487b-a8cf-baa679176128/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 04 Mar 2025 14:29:51 +0000
Certificate not after: Mon 07 Jun 2027 13:29:51 +0000
Subordinate resources: AS: 3448
AS: 16572
AS: 17258
AS: 19540
AS: 20057
AS: 27522
AS: 46164
IP: 66.102.160.0/19
IP: 66.209.0.0/19
IP: 107.64.0.0/10
IP: 107.224.0.0/11
IP: 108.144.0.0 -- 108.155.255.255
IP: 155.165.0.0/16
IP: 184.128.0.0/12
IP: 199.4.236.0 -- 199.4.240.255
IP: 209.183.32.0/19
IP: 2001:506:4000::/35
IP: 2600:300::/24
IP: 2606:ae00::/32
Validation: Failed, certificate revoked on Tue 18 Mar 2025 19:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ba:71:d1:21:85:64:97:6d:49:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Mar 4 14:29:51 2025 GMT
Not After : Jun 7 13:29:51 2027 GMT
Subject: CN=fdfd81ee-0204-487b-a8cf-baa679176128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:be:93:26:c9:41:7d:a1:f4:6a:47:f5:b9:a7:
7a:aa:7d:56:16:d7:20:68:64:21:b2:44:b3:27:7d:
6a:89:a9:74:4d:e9:6c:6e:a6:f3:95:03:6f:be:d6:
7c:d6:14:c2:53:83:87:de:a5:85:07:b4:28:77:dd:
bb:02:90:50:72:bd:3c:20:5e:5e:91:fe:cc:7a:5e:
8a:f9:eb:fb:a2:b0:b2:ea:d8:82:c9:ec:36:cb:19:
90:77:9b:e6:df:a3:0f:be:a6:4b:ff:08:58:21:b8:
41:46:b5:9f:f6:b4:53:ac:89:b7:99:5e:b7:90:c5:
76:b3:5e:d4:6e:8f:ee:c7:32:c6:6d:d3:c8:b2:06:
15:0c:fa:f7:43:e4:1b:af:51:93:bb:e3:f6:0e:94:
0c:e1:2c:88:57:33:ad:20:08:dd:b6:87:44:3d:9d:
a5:03:13:70:49:e7:84:f5:1b:a5:80:7b:8c:1b:e3:
db:47:c4:1e:a6:ed:41:c4:ae:db:a5:21:cc:70:5a:
03:f3:df:c1:d2:2f:28:70:55:c2:c1:c4:ef:a9:a2:
41:98:fa:75:62:37:36:d5:1e:ee:9d:e2:74:4b:8a:
69:30:1d:94:4d:e7:f7:3b:8a:1d:1b:86:b4:ef:43:
57:ec:c5:8e:50:39:34:0f:cb:36:69:18:7f:bd:c5:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:65:74:47:1D:FA:90:FF:53:ED:9D:2A:85:96:2E:84:21:61:00
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fdfd81ee-0204-487b-a8cf-baa679176128/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fdfd81ee-0204-487b-a8cf-baa679176128/fdfd81ee-0204-487b-a8cf-baa679176128.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.160.0/19
66.209.0.0/19
107.64.0.0/10
107.224.0.0/11
108.144.0.0-108.155.255.255
155.165.0.0/16
184.128.0.0/12
199.4.236.0-199.4.240.255
209.183.32.0/19
IPv6:
2001:506:4000::/35
2600:300::/24
2606:ae00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3448
16572
17258
19540
20057
27522
46164
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:bc:80:77:df:e9:cd:d4:85:8a:fe:c7:35:d0:2f:a5:a0:d3:
0d:ad:20:f3:cc:70:8d:a6:a1:c8:72:1f:d0:2c:57:22:e6:b1:
e5:97:9f:bf:f6:80:3f:f8:f3:a0:e6:b6:d6:0d:b0:3a:b1:33:
47:07:00:2c:56:89:03:81:9a:88:46:7e:fb:18:a7:78:e6:51:
b0:c3:14:48:56:68:2c:4f:44:b1:aa:5d:c1:02:33:5a:72:3d:
89:7c:38:66:63:e0:18:83:80:6c:4d:38:7d:81:38:1b:81:40:
52:04:ba:7a:29:af:3c:a5:e8:91:96:bf:b7:b2:12:5b:d6:08:
e9:86:5a:0e:13:db:aa:59:13:34:3c:09:e8:33:f9:c7:8b:88:
02:2c:da:eb:01:36:a1:e9:94:47:a6:b4:99:72:c0:e2:81:03:
1a:0e:a5:5f:59:20:6d:65:60:c0:02:38:a3:6f:3d:e4:c5:4a:
78:d4:33:27:b6:3e:91:f5:98:81:ea:90:15:79:65:19:b5:dc:
8d:cb:8e:b1:1f:47:ca:63:08:34:79:78:2f:6b:f2:75:57:0d:
fa:39:41:60:a3:58:69:aa:b2:d4:e0:67:48:10:6c:0f:45:54:
07:90:e1:68:f7:6b:22:2e:88:51:09:99:42:6c:be:63:cc:b4:
19:d9:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:21:03 2025 by rpki-client