Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493.cer
File: 70d4429d-87bd-4cd8-8a69-e77cf29b9493.cer (raw, json)
Hash identifier: K7Suh+1SMCCZL30HGMRqKwaX3iSMpalw4/A3VugjYkw=
Subject key identifier: E3:3A:FA:19:C2:5B:C1:C3:3B:BB:09:80:81:10:1B:09:E7:80:B3:F1
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F43285841E4834EC19AE0F0BDA25477C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493/70d4429d-87bd-4cd8-8a69-e77cf29b9493.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 15 May 2023 19:06:39 +0000
Certificate not after: Sat 28 Jun 2025 19:06:39 +0000
Subordinate resources: AS: 843
AS: 397144
IP: 23.158.32.0/24
IP: 72.19.3.0/24
IP: 2602:fe2b::/36
Validation: Failed, certificate revoked on Tue 20 Jun 2023 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:83:4e:c1:9a:e0:f0:bd:a2:54:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: May 15 19:06:39 2023 GMT
Not After : Jun 28 19:06:39 2025 GMT
Subject: CN=70d4429d-87bd-4cd8-8a69-e77cf29b9493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:82:b5:1b:dc:22:5b:4a:27:cf:c4:cd:90:
fb:8e:09:dc:96:1a:37:05:4a:59:26:0a:12:48:f6:
0d:e3:4e:45:20:ec:e6:ef:2b:72:5e:df:10:0a:d8:
b6:95:69:7c:0c:86:fa:db:da:a4:b6:41:20:6d:57:
74:28:65:90:01:d3:51:dd:42:d1:0b:d6:6a:c0:57:
b5:2b:c5:ff:37:4c:b9:26:d8:79:15:be:94:1c:4d:
81:74:18:7d:8f:47:3a:36:59:60:d2:6b:18:c2:4c:
f4:6b:d1:75:91:6f:68:06:d5:d6:b3:9f:6b:be:4e:
f2:4e:28:93:86:14:9b:a8:75:7e:77:65:bb:30:40:
31:c2:ac:94:22:0f:56:bc:ec:de:ae:ec:55:ef:33:
a5:d4:69:71:8b:7f:c1:87:64:ab:62:61:9f:3e:9b:
73:32:1b:60:6e:62:60:53:b1:0c:36:d3:1b:89:e1:
51:d3:e6:92:8e:7c:89:8c:8b:0e:33:3f:04:74:4c:
23:fc:f2:2f:ac:a2:a3:83:a4:6d:db:ef:25:f6:a7:
e4:e6:cc:04:09:e3:92:d7:30:23:61:26:10:ea:a1:
25:dc:5b:ef:d6:e9:f9:e7:ba:b8:fb:20:fb:f2:65:
8c:9e:8c:2d:4d:df:41:0b:e0:7f:f9:95:a7:25:92:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3A:FA:19:C2:5B:C1:C3:3B:BB:09:80:81:10:1B:09:E7:80:B3:F1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493/70d4429d-87bd-4cd8-8a69-e77cf29b9493.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.32.0/24
72.19.3.0/24
IPv6:
2602:fe2b::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
843
397144
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:1e:66:e0:0b:13:2c:0d:97:7f:5d:9b:15:0e:61:22:a4:5e:
3b:7b:dc:30:92:41:dd:24:9a:c4:3b:60:f8:23:27:35:25:75:
6d:d0:b2:8d:71:e6:48:17:e3:51:a8:77:9b:bf:5d:66:8a:14:
c6:65:cd:bc:ae:51:bb:a0:6b:27:ad:68:4d:5a:3e:8e:1d:3b:
13:5e:87:c4:97:64:42:83:ff:e7:ee:4d:f1:8d:e5:ac:9c:5d:
96:4e:9e:4f:7d:57:79:86:63:ca:59:01:63:3d:2b:e4:ca:0d:
cc:61:6b:a3:0b:ec:5d:28:d9:20:33:09:cc:80:98:3d:2d:df:
1f:98:42:50:49:74:66:ab:aa:42:6a:a5:d0:16:4d:dd:fa:e0:
83:e9:d5:cb:32:cb:7e:de:e9:30:8d:da:65:17:fe:a8:5e:fa:
5b:7c:e9:35:a9:a9:30:e9:df:19:6d:54:bc:f8:c3:17:c0:56:
5c:86:5e:0d:a4:74:03:90:06:1d:d5:f6:33:9e:5f:b8:6f:d9:
c7:7e:6e:88:30:bd:ad:6f:4d:95:d5:b8:98:e2:18:f2:42:6a:
79:89:e6:e8:b5:d1:5f:cf:8c:98:a9:de:9f:91:d2:cd:78:24:
81:f1:2c:5e:96:0c:3d:aa:b2:f0:a1:26:74:70:39:e2:82:f6:
7b:90:8a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:25 2024 by rpki-client on console-ams.rpki-client.org