This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1ab9ccc427bbab9603e829c3208bbda705fcaa5c1.cer
File:                     772ca8b9b1ab9ccc427bbab9603e829c3208bbda705fcaa5c1.cer (raw, json)
Hash identifier:          GtvcQx+eKmEG3Xk5kdoVT2+kG+BqPww9a9k1N1MPFvE=
Subject key identifier:   B2:C4:AE:12:24:5F:95:D4:C2:25:9D:07:E1:34:7C:3A:73:A8:57:0A
Authority key identifier: 8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38
Certificate issuer:       /CN=da044fca-c418-4088-8a66-0c6896769f77
Certificate serial:       010D0C9F43285848756CBBFADCC933B254BDAA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/16572ddf-e835-4805-a726-8ade060c5747/0/B2C4AE12245F95D4C2259D07E1347C3A73A8570A.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/16572ddf-e835-4805-a726-8ade060c5747/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 06 Jan 2025 21:35:33 +0000
Certificate not after:    Sun 11 Apr 2027 20:35:33 +0000
Subordinate resources:    AS: 53343
                          IP: 23.131.12.0/24
                          IP: 2602:f765::/36
Validation:               Failed, certificate revoked on Mon 06 Jan 2025 22:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:75:6c:bb:fa:dc:c9:33:b2:54:bd:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da044fca-c418-4088-8a66-0c6896769f77
        Validity
            Not Before: Jan  6 21:35:33 2025 GMT
            Not After : Apr 11 20:35:33 2027 GMT
        Subject: CN=772ca8b9b1ab9ccc427bbab9603e829c3208bbda705fcaa5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:56:b2:9e:38:54:3d:f0:ad:8d:45:ce:35:
                    8e:bb:91:e4:05:ba:16:cc:8b:6d:f9:b9:44:2e:e6:
                    41:98:7b:8e:d8:5a:6c:7d:a6:db:fc:c6:53:c2:46:
                    37:f8:13:17:35:11:5a:4a:f2:7a:04:cf:16:30:85:
                    5b:e0:f3:80:88:b8:f4:ed:8e:e9:7d:04:ff:c1:82:
                    91:41:e5:d1:eb:e1:8f:3a:b0:fb:59:5a:a1:78:ab:
                    47:c5:76:47:b5:3b:f8:95:43:2e:55:8a:65:ba:e9:
                    97:b9:6c:53:6d:92:c3:56:01:db:a6:55:fd:dd:86:
                    a0:b0:1e:27:e2:18:03:e6:2a:ae:ea:cb:ed:68:fd:
                    7c:16:f9:d0:95:64:e0:3f:1f:7c:1d:26:5f:aa:79:
                    6d:c7:17:a3:c7:90:8f:a5:0a:df:a8:fc:20:fd:31:
                    39:12:f9:b2:c5:13:4d:7a:5b:04:4f:56:69:a7:1f:
                    e9:a3:d6:67:a0:8d:7c:e3:e4:07:b3:11:3e:a5:c2:
                    20:7d:71:a8:fd:a7:a3:0b:ab:2c:72:92:63:fb:65:
                    85:29:7c:f8:cb:9a:21:5c:63:4b:9b:27:ee:12:25:
                    ca:95:08:62:b1:11:b8:5a:bc:d3:ae:e5:97:c4:37:
                    01:a0:5b:a0:33:ab:f3:f5:34:40:bf:70:30:0b:1c:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C4:AE:12:24:5F:95:D4:C2:25:9D:07:E1:34:7C:3A:73:A8:57:0A
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/16572ddf-e835-4805-a726-8ade060c5747/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/16572ddf-e835-4805-a726-8ade060c5747/0/B2C4AE12245F95D4C2259D07E1347C3A73A8570A.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl

            X509v3 Authority Key Identifier:
                keyid:8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.12.0/24
                IPv6:
                  2602:f765::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53343

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fd:96:c6:73:1f:a0:d6:ec:6a:0f:4c:2e:95:25:75:62:44:
         13:5d:06:4e:4e:d5:eb:39:89:e2:69:a0:dc:e5:a5:91:e9:9c:
         6f:ef:89:cc:2c:5f:b1:a0:01:d5:d1:6b:d6:e3:89:c5:b4:c6:
         55:61:51:9a:59:7e:90:61:83:45:e4:9c:13:1b:a5:61:2d:88:
         e1:82:ed:72:d5:78:ee:78:c8:43:4e:30:19:7a:cd:9f:3f:b9:
         63:31:8c:fd:d2:70:30:f5:86:f2:2e:0a:85:e0:7a:cc:a8:a4:
         15:37:b1:78:e2:eb:7e:7c:12:9b:64:85:fa:86:a2:3d:9b:ff:
         08:3b:7e:b8:a2:e8:01:f6:5a:53:37:73:ac:2b:78:6b:34:fc:
         c6:30:cb:32:30:4b:a5:f1:7b:11:de:14:b5:f6:03:b0:d9:9d:
         62:10:13:32:f9:a7:cd:c4:7c:99:8d:96:18:7c:42:06:ae:25:
         0a:83:90:7e:59:8a:8e:de:67:a4:4b:c5:7d:96:1a:1a:f7:ce:
         ba:95:3b:12:0e:55:51:0d:0b:ac:bb:ad:f7:f1:e9:3a:d6:d2:
         4e:15:03:e7:83:de:9f:d4:a1:ae:d4:ff:4c:0b:1c:31:15:5b:
         f0:6c:92:29:50:59:f0:f4:7b:92:68:f0:cc:ce:fb:6e:c4:fb:
         ee:49:0c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 05:38:22 2025 by rpki-client