Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
File: eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer (raw, json)
Hash identifier: +V+etWqRYKnMvADgrTdULAj1R3ITjI+Pbq2RZ7/ptIg=
Subject key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority key identifier: 34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C
Certificate issuer: /CN=a01e997c-b89e-47c2-8d79-d31e58bc3ca4
Certificate serial: 010D0C9F432858404F6957FF507C08FD3D334200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
Manifest: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.mft
caRepository: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1
Notify URL: https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before: Wed 21 Dec 2022 16:32:30 +0000
Certificate not after: Tue 25 Mar 2025 15:32:30 +0000
Subordinate resources: AS: 926
AS: 1018
IP: 23.132.184.0/23
IP: 128.254.204.0/22
IP: 192.138.210.0/23
IP: 192.209.62.0/23
IP: 216.73.156.0/22
IP: 2606:b940::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4f:69:57:ff:50:7c:08:fd:3d:33:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01e997c-b89e-47c2-8d79-d31e58bc3ca4
Validity
Not Before: Dec 21 16:32:30 2022 GMT
Not After : Mar 25 15:32:30 2025 GMT
Subject: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:01:6d:a8:b1:78:86:ae:f4:73:9b:85:7e:
2d:e4:e1:44:ab:4f:7b:9c:6c:42:7b:8b:92:ff:6a:
8f:a2:2b:55:aa:a8:07:c1:ac:08:5b:1f:55:9e:19:
74:30:34:4a:bb:ac:0d:37:9b:c7:1a:6c:c8:dd:9a:
e3:74:33:bd:d6:b8:04:b9:10:a2:ef:8e:d2:c2:7a:
6b:7d:da:2b:b2:cb:7c:a9:e1:0e:66:8a:d2:d0:79:
8c:68:0f:55:0a:47:f2:4f:3e:28:0d:e8:34:63:cd:
63:f5:73:01:5b:bc:63:2e:dd:a8:0c:2f:78:75:28:
5f:b4:25:ad:55:94:e5:d6:f8:eb:15:ce:7a:c6:50:
50:7a:95:0a:95:37:a9:5c:5f:e4:de:fe:eb:7a:8d:
4a:92:bd:ba:c1:77:f4:3d:57:b1:83:c8:86:e1:f9:
f3:a9:43:2c:77:12:79:a0:21:19:b5:d7:50:f1:d0:
fc:98:cc:a9:80:3e:16:3e:1a:20:5f:80:07:77:21:
f1:31:a3:56:9f:c9:ae:ca:1e:1e:58:d4:48:59:a6:
14:6b:c5:bd:db:89:37:ea:88:ac:60:6d:aa:f4:52:
96:95:d3:de:33:29:70:56:39:91:47:14:54:bb:f2:
88:1b:b5:dd:10:63:5d:0a:ed:88:c3:47:4f:7d:76:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Subject Information Access:
CA Repository - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1
RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.mft
RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
X509v3 Authority Key Identifier:
keyid:34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.184.0/23
128.254.204.0/22
192.138.210.0/23
192.209.62.0/23
216.73.156.0/22
IPv6:
2606:b940::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
926
1018
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:7c:87:7d:5a:ad:9b:7a:a4:e5:75:f8:01:88:9d:41:22:ba:
e2:d2:3a:fd:9f:d5:77:60:11:49:e0:d4:e5:ad:45:8e:dc:43:
b0:01:21:c7:4c:db:55:07:4b:b2:9c:90:84:a4:fb:43:c5:5f:
cb:da:8d:b6:6b:b0:38:90:b5:ad:75:bc:7a:1a:63:c0:bf:b0:
0f:a9:8f:cd:9f:12:10:df:8f:3d:7b:48:b0:73:3b:a1:0d:cc:
99:57:f3:58:ed:e1:a7:52:e7:65:e1:c8:f1:ca:6c:92:54:6c:
91:a7:9c:28:9f:09:9a:11:51:5f:86:75:ce:ba:6c:b5:22:12:
10:42:b6:60:0b:a4:24:19:f7:35:87:23:a8:2a:9c:1d:16:3e:
c1:62:a6:46:8b:4f:0c:2d:83:57:4e:03:d4:b7:79:01:d1:58:
b9:fd:ca:79:1e:49:49:60:5e:a3:cd:bb:e4:f5:e3:fc:55:eb:
93:b7:c7:99:04:f3:c0:50:65:38:f1:6d:fa:e5:7c:47:9e:fe:
44:e3:27:02:fc:06:3a:27:d3:57:1e:ce:83:ac:0e:8b:61:fb:
5f:fc:5d:0c:08:21:6e:77:99:e1:80:fb:54:f2:56:d7:7b:3a:
9f:75:53:a5:25:f1:f3:07:25:4d:9d:d8:cf:08:bc:a7:a5:c9:
fa:39:54:31
-----BEGIN CERTIFICATE-----
MIIGtzCCBZ+gAwIBAgIUAQ0Mn0MoWEBPaVf/UHwI/T0zQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTAxZTk5N2MtYjg5ZS00N2MyLThkNzktZDMxZTU4YmMz
Y2E0MB4XDTIyMTIyMTE2MzIzMFoXDTI1MDMyNTE1MzIzMFowPTE7MDkGA1UEAxMy
ZWVjZjg0N2Q3YTYwN2YwY2E4MWI4NGUyYmNjNzBhNDc0OTg0NDQyMDc4NDdhODZh
OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgDgFtqLF4hq70c5uF
fi3k4USrT3ucbEJ7i5L/ao+iK1WqqAfBrAhbH1WeGXQwNEq7rA03m8cabMjdmuN0
M73WuAS5EKLvjtLCemt92iuyy3yp4Q5mitLQeYxoD1UKR/JPPigN6DRjzWP1cwFb
vGMu3agML3h1KF+0Ja1VlOXW+OsVznrGUFB6lQqVN6lcX+Te/ut6jUqSvbrBd/Q9
V7GDyIbh+fOpQyx3EnmgIRm111Dx0PyYzKmAPhY+GiBfgAd3IfExo1afya7KHh5Y
1EhZphRrxb3biTfqiKxgbar0UpaV094zKXBWOZFHFFS78ogbtd0QY10K7YjDR099
dm1xAgMBAAGjggO7MIIDtzAdBgNVHQ4EFgQU3m8YtGGVjd0gdMtaGRpkDTILtYAw
gfQGCCsGAQUFBwELBIHnMIHkMDoGCCsGAQUFBzAFhi5yc3luYzovL3Jwa2kuemFw
cGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8xMGcGCCsGAQUFBzAKhltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8xL0RFNkYx
OEI0NjE5NThEREQyMDc0Q0I1QTE5MUE2NDBEMzIwQkI1ODAubWZ0MD0GCCsGAQUF
BzANhjFodHRwczovL3Jwa2kuemFwcGllaG9zdC5jb20vcnJkcC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5
LWQzMWU1OGJjM2NhNC9hMDFlOTk3Yy1iODllLTQ3YzItOGQ3OS1kMzFlNThiYzNj
YTQuY3JsMB8GA1UdIwQYMBaAFDQ1dBUz3+hWW/5/DpEELFC3waFsMA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvYTAxZTk5N2MtYjg5ZS00N2MyLThkNzktZDMxZTU4
YmMzY2E0LmNlcjBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAReEuAMEAoD+
zAMEAcCK0gMEAcDRPgMEAthJnDANBAIAAjAHAwUAJga5QDAdBggrBgEFBQcBCAEB
/wQOMAygCjAIAgIDngICA/owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPnyHfVqtm3qk5XX4AYidQSK64tI6
/Z/Vd2ARSeDU5a1FjtxDsAEhx0zbVQdLspyQhKT7Q8Vfy9qNtmuwOJC1rXW8ehpj
wL+wD6mPzZ8SEN+PPXtIsHM7oQ3MmVfzWO3hp1LnZeHI8cpsklRskaecKJ8JmhFR
X4Z1zrpstSISEEK2YAukJBn3NYcjqCqcHRY+wWKmRotPDC2DV04D1Ld5AdFYuf3K
eR5JSWBeo8275PXj/FXrk7fHmQTzwFBlOPFt+uV8R57+ROMnAvwGOifTVx7Og6wO
i2H7X/xdDAghbneZ4YD7VPJW13s6n3VTpSXx8wclTZ3Yzwi8p6XJ+jlUMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:41 2024 by rpki-client on console-ams.rpki-client.org