Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95d43d71-f3d5-447a-81ad-461ba7068a30.cer
File:                     95d43d71-f3d5-447a-81ad-461ba7068a30.cer (raw, json)
Hash identifier:          /F8RybEgaHdU7JPgMg2BXkW4Qvy/4c+UrLUXsaFWwaA=
Subject key identifier:   C0:F9:95:D7:FB:C7:06:E4:44:74:41:5C:43:6F:18:D7:7F:F0:AF:38
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328583DCD9D70AB7235CD67EAAD9FA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95d43d71-f3d5-447a-81ad-461ba7068a30/95d43d71-f3d5-447a-81ad-461ba7068a30.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95d43d71-f3d5-447a-81ad-461ba7068a30/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 05 May 2022 19:08:31 +0000
Certificate not after:    Wed 05 May 2032 19:08:31 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cd:9d:70:ab:72:35:cd:67:ea:ad:9f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: May  5 19:08:31 2022 GMT
            Not After : May  5 19:08:31 2032 GMT
        Subject: CN=95d43d71-f3d5-447a-81ad-461ba7068a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:c3:38:3f:f1:7a:7a:50:0d:ae:c3:6c:ea:
                    c1:11:80:25:81:ba:3f:d3:b0:e9:f6:ac:88:df:4c:
                    08:ae:1c:ba:13:87:79:86:2a:7a:17:4c:63:21:18:
                    3a:d8:d1:97:5a:6a:e8:34:2f:48:da:3b:43:e3:3e:
                    dd:ff:2f:3b:92:12:ee:21:2d:7f:e4:76:0e:2e:9d:
                    20:5e:a7:20:75:8a:49:3a:30:be:ab:1a:b5:7a:d9:
                    4d:ed:c2:e6:67:bb:72:48:a6:c4:40:6d:fb:83:a0:
                    8f:a5:a2:8d:fc:ac:f1:07:2d:67:0d:01:19:16:93:
                    2f:e6:6f:57:d8:cb:21:6b:cc:83:9e:ef:7f:f6:81:
                    1a:04:a5:95:02:95:78:9e:5e:cf:00:80:de:0f:4a:
                    97:4c:86:09:96:dc:48:61:aa:cb:88:ab:72:a9:63:
                    79:19:54:47:f3:c7:18:da:42:08:23:96:03:1b:10:
                    27:3b:f6:b1:b7:b1:0f:db:f0:56:22:1b:a3:ef:72:
                    72:ea:af:8b:45:c4:cc:74:1e:a1:52:91:b1:91:57:
                    7d:59:05:7d:7b:ca:b8:2d:87:53:b5:e9:95:13:f6:
                    e6:c8:2a:9b:d1:c8:0b:0a:b7:9f:33:43:a2:80:ed:
                    cd:79:f8:f3:ec:78:55:ee:b4:34:bf:7c:a6:81:b9:
                    ae:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F9:95:D7:FB:C7:06:E4:44:74:41:5C:43:6F:18:D7:7F:F0:AF:38
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95d43d71-f3d5-447a-81ad-461ba7068a30/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95d43d71-f3d5-447a-81ad-461ba7068a30/95d43d71-f3d5-447a-81ad-461ba7068a30.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:1d:ed:a7:8c:88:ce:3e:28:be:cf:fb:fd:96:24:84:2b:32:
         03:77:9c:44:d2:92:7f:9d:53:ff:22:ea:1d:1d:08:66:f0:5f:
         e8:10:28:19:ce:43:ba:93:46:34:4c:58:e0:34:e7:84:f3:d6:
         1d:11:f7:67:0d:2d:05:be:5c:ee:f4:4f:e2:7c:c8:b1:b3:5a:
         6c:44:9f:69:7d:26:de:79:84:e2:23:9f:eb:fe:90:ea:ad:6c:
         b3:09:86:9c:46:cd:20:18:d1:f1:a3:12:f1:9c:2a:9a:00:02:
         8f:b3:41:cb:6c:79:92:76:de:cf:bb:fc:ac:03:7f:6b:ad:f3:
         ae:c5:14:2b:ab:93:cb:bf:22:dd:d3:59:0c:2d:85:e0:f7:63:
         c8:17:ab:c7:80:5d:59:47:79:a3:3b:0a:b7:4a:2b:68:51:ca:
         6a:a3:9d:cd:96:9d:96:47:9e:9e:a8:6b:61:26:5a:6a:e5:d9:
         46:ed:51:1b:bd:79:f7:45:33:fa:da:5a:04:3d:a0:a5:ba:13:
         5c:71:e0:bd:8b:ee:81:cd:0f:b9:3e:3a:92:a4:3a:af:70:14:
         69:c6:ec:71:0a:8d:9c:80:8d:0b:b4:fc:da:84:59:b6:d3:94:
         de:e6:9d:7a:99:6d:9d:99:24:75:ed:50:6e:52:61:d6:4c:32:
         6a:e8:c5:2b
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWD3NnXCrcjXNZ+qtn6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTIyMDUwNTE5MDgzMVoXDTMyMDUwNTE5MDgzMVowLzEtMCsGA1UEAxMk
OTVkNDNkNzEtZjNkNS00NDdhLTgxYWQtNDYxYmE3MDY4YTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zDDOD/xenpQDa7DbOrBEYAlgbo/07Dp9qyI
30wIrhy6E4d5hip6F0xjIRg62NGXWmroNC9I2jtD4z7d/y87khLuIS1/5HYOLp0g
XqcgdYpJOjC+qxq1etlN7cLmZ7tySKbEQG37g6CPpaKN/KzxBy1nDQEZFpMv5m9X
2Msha8yDnu9/9oEaBKWVApV4nl7PAIDeD0qXTIYJltxIYarLiKtyqWN5GVRH88cY
2kIII5YDGxAnO/axt7EP2/BWIhuj73Jy6q+LRcTMdB6hUpGxkVd9WQV9e8q4LYdT
temVE/bmyCqb0cgLCrefM0OigO3Nefjz7HhV7rQ0v3ymgbmuqQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFMD5ldf7xwbkRHRBXENvGNd/8K84MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85
NWQ0M2Q3MS1mM2Q1LTQ0N2EtODFhZC00NjFiYTcwNjhhMzAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzk1ZDQzZDcxLWYzZDUtNDQ3YS04
MWFkLTQ2MWJhNzA2OGEzMC85NWQ0M2Q3MS1mM2Q1LTQ0N2EtODFhZC00NjFiYTcw
NjhhMzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAKVcJgwDgQCAAIwCAMGBCYC/DsAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYaYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtHe2njIjOPii+z/v9liSEKzID
d5xE0pJ/nVP/IuodHQhm8F/oECgZzkO6k0Y0TFjgNOeE89YdEfdnDS0Fvlzu9E/i
fMixs1psRJ9pfSbeeYTiI5/r/pDqrWyzCYacRs0gGNHxoxLxnCqaAAKPs0HLbHmS
dt7Pu/ysA39rrfOuxRQrq5PLvyLd01kMLYXg92PIF6vHgF1ZR3mjOwq3SitoUcpq
o53Nlp2WR56eqGthJlpq5dlG7VEbvXn3RTP62loEPaCluhNcceC9i+6BzQ+5PjqS
pDqvcBRpxuxxCo2cgI0LtPzahFm205Te5p16mW2dmSR17VBuUmHWTDJq6MUr
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:21 2023 by rpki-client on console-fra.rpki-client.org