Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325cfea697731e6cf8324739124f71c65f77eaa87b.cer
File: 44da5d10325cfea697731e6cf8324739124f71c65f77eaa87b.cer (raw, json)
Hash identifier: XVwLqy0MjaiTj5pcU25nBgQ8vVTmBX75gu/KYMf/EB0=
Subject key identifier: 91:C4:86:3D:8E:4D:37:19:A1:90:C9:DA:6F:67:68:9A:94:70:88:44
Authority key identifier: 1D:63:CF:FC:48:10:3B:92:58:28:E1:7D:F1:BB:27:27:D2:F3:0B:10
Certificate issuer: /CN=2bd0fac6-1a46-40b5-be66-9e0f7b54df77
Certificate serial: 010D0C9F4328583D3461F9419ECFD3BC9A029580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
Manifest: rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/91C4863D8E4D3719A190C9DA6F67689A94708844.mft
caRepository: rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Fri 11 Mar 2022 21:50:01 +0000
Certificate not after: Thu 11 Mar 2032 21:50:01 +0000
Subordinate resources: AS: 15244
AS: 18650
AS: 23273
AS: 32241
AS: 40092
AS: 394738
IP: 45.56.216.0/21
IP: 45.114.224.0/22
IP: 64.50.160.0/19
IP: 66.102.128.0/20
IP: 67.210.96.0/19
IP: 74.50.0.0/19
IP: 89.35.92.0/22
IP: 103.26.140.0/22
IP: 162.213.0.0/22
IP: 172.96.176.0/21
IP: 190.92.160.0/21
IP: 192.228.112.0/20
IP: 204.44.192.0/20
IP: 208.68.104.0/22
IP: 208.76.40.0/22
IP: 208.79.216.0/22
IP: 209.200.224.0/19
IP: 216.7.88.0/21
IP: 216.97.224.0/20
IP: 216.201.96.0/20
IP: 216.227.208.0/20
IP: 2604:9780::/32
IP: 2605:6f00::/32
IP: 2606:bd00::/32
IP: 2606:c680::/32
IP: 2620:b:e000::/48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:34:61:f9:41:9e:cf:d3:bc:9a:02:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd0fac6-1a46-40b5-be66-9e0f7b54df77
Validity
Not Before: Mar 11 21:50:01 2022 GMT
Not After : Mar 11 21:50:01 2032 GMT
Subject: CN=44da5d10325cfea697731e6cf8324739124f71c65f77eaa87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:26:22:cc:f3:97:52:16:83:9a:92:ba:34:33:
62:df:57:c3:ca:e2:b0:dd:b7:17:c2:41:91:c1:41:
18:3d:71:6e:37:2b:f3:1a:71:95:95:ab:3d:2f:ca:
2f:bf:16:f6:3e:fc:ed:e1:70:e7:b3:59:3f:34:c3:
01:1a:ca:1f:e2:47:77:98:ee:ec:d5:7e:df:ef:bb:
a5:02:2e:0e:1d:17:26:86:5a:d7:07:76:11:fd:ec:
0e:27:48:42:7e:71:c0:29:fa:2d:f4:c3:7a:41:c1:
fc:d0:77:1a:0a:85:39:0c:89:74:12:e4:ee:2c:2b:
03:b4:36:db:9b:92:8a:71:04:e2:c4:e3:03:71:a5:
5e:ca:58:a8:d4:a1:70:ec:50:88:d2:46:aa:e5:d0:
0f:19:14:e2:e4:fd:37:31:6e:ee:86:3a:d6:aa:46:
40:60:2e:57:cd:75:38:eb:5c:cd:a0:25:a3:37:2a:
95:b5:55:e0:c8:6a:27:04:69:fa:b6:2e:01:f4:b2:
d2:97:47:60:ca:46:75:ef:c6:10:a9:ae:0d:a3:b8:
2c:54:46:ad:47:69:e2:bd:ef:17:0c:98:01:41:74:
4c:07:04:c2:c0:0b:29:2b:39:8e:39:9d:73:7a:cc:
3d:69:2a:cd:61:a7:88:b5:a6:85:5f:fa:d6:3d:7b:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C4:86:3D:8E:4D:37:19:A1:90:C9:DA:6F:67:68:9A:94:70:88:44
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/91C4863D8E4D3719A190C9DA6F67689A94708844.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
X509v3 Authority Key Identifier:
keyid:1D:63:CF:FC:48:10:3B:92:58:28:E1:7D:F1:BB:27:27:D2:F3:0B:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
sbgp-ipAddrBlock: critical
IPv4:
45.56.216.0/21
45.114.224.0/22
64.50.160.0/19
66.102.128.0/20
67.210.96.0/19
74.50.0.0/19
89.35.92.0/22
103.26.140.0/22
162.213.0.0/22
172.96.176.0/21
190.92.160.0/21
192.228.112.0/20
204.44.192.0/20
208.68.104.0/22
208.76.40.0/22
208.79.216.0/22
209.200.224.0/19
216.7.88.0/21
216.97.224.0/20
216.201.96.0/20
216.227.208.0/20
IPv6:
2604:9780::/32
2605:6f00::/32
2606:bd00::/32
2606:c680::/32
2620:b:e000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15244
18650
23273
32241
40092
394738
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:16:01:3f:c3:03:61:f4:47:a5:1d:9d:0a:4f:77:bb:47:38:
f8:3b:48:61:ee:ed:56:05:49:d7:ac:18:6c:da:8c:c3:80:73:
47:73:74:e1:95:04:7a:68:c0:35:e6:e6:4a:29:d6:49:70:ab:
39:4f:c0:70:a1:de:04:cc:56:5a:89:a0:e1:18:55:56:5a:09:
b9:67:1f:f0:af:34:0f:b4:0f:a9:d0:f9:e2:87:2d:fa:18:ff:
da:be:0e:b2:ed:7d:8c:6e:9c:54:93:2a:90:5a:39:de:ce:b9:
bd:96:a7:4f:1a:b7:7d:e4:68:1f:db:fb:d1:ad:30:fe:2f:60:
50:d2:2d:c5:35:1e:09:5b:d9:03:da:8d:af:03:a1:a5:59:79:
04:9a:a0:87:f3:10:94:bc:9d:c5:7f:16:0b:d5:4e:7d:1c:47:
17:70:9b:e1:5f:09:45:42:a9:6c:33:65:d6:74:30:1c:6e:10:
e3:80:43:65:98:97:3b:70:2f:d0:b0:4f:06:fc:43:34:db:a0:
e0:7a:3f:aa:fb:92:b1:b0:85:9c:bd:61:fc:7b:e5:a5:a5:7e:
34:d4:f8:5c:89:40:e2:31:69:71:61:a2:6a:98:1b:1d:ef:cd:
6b:2b:43:a7:84:c8:02:61:ef:17:86:f1:c4:f1:73:a5:c9:c0:
d9:a0:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:54 2023 by rpki-client on console-fra.rpki-client.org