Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a907be57f9dc75792911782fb554870788d513206.cer
File: eecf847d7a907be57f9dc75792911782fb554870788d513206.cer (raw, json)
Hash identifier: 6q/WL1oIV+cHl6FPL2l/NtqEGKAe+QbwOz+TsRtFJGc=
Subject key identifier: 3C:98:31:8A:97:2D:85:24:6C:A2:90:2F:5B:3F:09:84:3D:E3:C8:5D
Authority key identifier: 34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C
Certificate issuer: /CN=a01e997c-b89e-47c2-8d79-d31e58bc3ca4
Certificate serial: 010D0C9F432858404A11422F3162103B3F4B0500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3C98318A972D85246CA2902F5B3F09843DE3C85D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 19 Dec 2022 18:35:59 +0000
Certificate not after: Sun 23 Mar 2025 17:35:59 +0000
Subordinate resources: AS: 926
AS: 1018
IP: 23.132.184.0/23
IP: 128.254.204.0/22
IP: 192.138.210.0/23
IP: 192.209.62.0/23
IP: 216.73.156.0/22
IP: 2606:b940::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4a:11:42:2f:31:62:10:3b:3f:4b:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01e997c-b89e-47c2-8d79-d31e58bc3ca4
Validity
Not Before: Dec 19 18:35:59 2022 GMT
Not After : Mar 23 17:35:59 2025 GMT
Subject: CN=eecf847d7a907be57f9dc75792911782fb554870788d513206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:90:82:ff:a4:00:4d:fb:40:aa:f6:ec:23:
2a:6e:cc:09:34:be:64:22:9c:93:28:9f:5c:69:92:
dc:af:84:b2:c1:93:5a:0e:42:d9:f6:63:f9:b4:2e:
0e:ae:f5:38:42:8a:5c:34:d5:02:62:4b:e2:09:5a:
0a:1d:23:ca:4b:94:36:8a:9b:c4:de:8d:85:6f:35:
b1:e9:01:97:a9:bc:67:bf:53:cf:eb:f4:2f:15:66:
81:19:e8:86:ca:eb:c5:7e:05:e0:fc:a0:a2:45:75:
66:a6:7f:6b:6a:53:da:a0:0d:fc:85:31:b1:13:5b:
54:70:35:0d:ea:ba:96:f1:9c:37:75:cb:3a:22:19:
f4:4f:52:1a:57:c2:5c:6c:e2:ea:b3:8b:a9:02:de:
0b:e4:ac:90:e1:36:a8:99:f5:b3:8c:07:2b:af:79:
1b:55:df:cd:ca:79:4b:e1:cf:d6:bc:79:85:2f:f4:
fd:db:b9:5a:72:4c:c3:db:88:89:e6:d6:26:2d:90:
c5:e0:5b:b4:eb:bf:22:73:fe:d9:a7:0d:a6:44:60:
4c:fb:27:eb:90:b7:df:f4:97:6e:64:99:af:e9:74:
34:f7:2c:59:63:0c:b4:71:75:d3:07:e2:6b:a7:5e:
7a:11:b0:5d:f9:d4:5d:ea:d2:52:bb:c3:a6:65:a3:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:98:31:8A:97:2D:85:24:6C:A2:90:2F:5B:3F:09:84:3D:E3:C8:5D
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/1/3C98318A972D85246CA2902F5B3F09843DE3C85D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
X509v3 Authority Key Identifier:
keyid:34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.184.0/23
128.254.204.0/22
192.138.210.0/23
192.209.62.0/23
216.73.156.0/22
IPv6:
2606:b940::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
926
1018
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:58:c9:40:0e:c9:b6:01:75:53:99:d2:f1:87:15:0e:93:1b:
b9:f3:f4:ae:ef:a1:34:60:1e:87:96:f6:82:22:09:38:6f:da:
09:b4:75:ae:b4:fd:f3:39:96:20:c9:60:3c:8c:6d:45:b9:fc:
59:ff:48:cb:14:c7:b9:b7:31:c3:e1:0c:2d:91:32:c1:41:6b:
bd:a1:fa:8a:72:a8:20:09:67:75:82:ad:da:fc:ce:21:cb:74:
77:a4:01:02:86:c5:7d:38:d2:52:4e:fc:3e:fc:5a:58:85:bd:
29:ae:76:c8:5d:98:5d:b4:b7:d0:42:aa:7d:73:6c:80:d0:74:
7e:ea:4f:dd:aa:a1:67:61:dd:77:f6:6b:e7:bf:5a:e6:96:67:
c0:8b:81:32:50:b6:1c:29:11:20:c1:ef:57:30:0a:65:d9:b7:
80:11:21:7e:76:b2:1e:7b:e8:c2:70:48:c3:aa:4d:1d:8f:8a:
38:e9:23:bb:2a:1f:79:92:d9:df:a4:a2:04:16:49:38:d3:a9:
63:a4:80:e1:39:85:b4:0c:37:2c:34:3a:59:f8:19:de:4b:b8:
26:07:2a:18:60:a9:c0:fa:9e:da:07:59:a9:f2:73:f9:ad:68:
bc:7c:11:b0:c3:0a:91:c8:09:bf:43:1b:cd:8f:5c:35:ef:d3:
ba:73:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:45 2025 by rpki-client