Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29.cer
File:                     90e0e2fb-b856-4bab-b967-a8918ce1cb29.cer (raw, json)
Hash identifier:          kG4h9Q6aD5bezfrU34Pr1LikQXwO7+CBGfL2zwwKqvI=
Subject key identifier:   D9:F0:59:7D:DD:E5:0B:71:70:E9:D9:96:27:EB:07:0D:E8:54:20:72
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842AB61AEBA5F2C4B5204353BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/90e0e2fb-b856-4bab-b967-a8918ce1cb29.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Jul 2023 00:45:18 +0000
Certificate not after:    Tue 28 Oct 2025 00:45:18 +0000
Subordinate resources:    AS: 971
                          AS: 13830
                          IP: 142.202.220.0/22
                          IP: 161.129.152.0/22
                          IP: 163.123.204.0/22
                          IP: 192.34.100.0/22
                          IP: 208.99.4.0/22
                          IP: 2001:506:2::/48
                          IP: 2001:506:30::/48
                          IP: 2604:fbc0::/32

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 17:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ab:61:ae:ba:5f:2c:4b:52:04:35:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jul 26 00:45:18 2023 GMT
            Not After : Oct 28 00:45:18 2025 GMT
        Subject: CN=90e0e2fb-b856-4bab-b967-a8918ce1cb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:4a:42:fa:1c:21:28:0f:13:af:5e:53:f9:
                    df:e3:23:df:ad:11:72:20:4a:75:14:12:30:9f:d3:
                    f7:f7:a0:a1:14:9b:91:8f:f9:bd:fe:e3:39:84:ba:
                    8c:c5:17:9e:59:a2:19:64:e7:6d:47:92:49:ad:73:
                    ca:74:5b:2a:ba:45:d9:8e:bc:b8:3b:cd:a6:1c:31:
                    10:f4:ac:b1:3a:dd:17:5a:a3:70:c3:b6:21:ce:bd:
                    77:59:d3:86:10:59:32:45:e6:08:a3:9c:81:15:fd:
                    2b:60:40:a4:9b:79:5e:00:d2:f2:85:9b:c4:72:12:
                    46:7f:f9:ee:d7:51:0b:65:99:1a:22:4b:27:cb:4f:
                    0b:53:6b:94:bc:7e:0e:25:01:1e:03:b0:7f:94:86:
                    b6:34:7c:09:91:fd:fa:a3:c7:3e:e5:4e:a4:a4:6c:
                    a7:b3:d6:e7:ef:f1:c1:01:7b:c8:5f:56:c5:6a:92:
                    e1:9f:e1:ce:41:95:f5:2b:b3:ff:48:57:0b:d3:cf:
                    a4:d2:c6:bc:e8:be:94:57:1f:bc:7f:43:72:11:e0:
                    be:03:8d:5e:10:fe:68:d6:a3:9e:5b:8c:3f:77:ca:
                    98:fe:c4:16:c6:cb:48:86:88:5d:66:ea:82:25:8b:
                    3c:3e:e6:32:b3:b0:79:f0:a0:e4:17:e0:9f:15:60:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F0:59:7D:DD:E5:0B:71:70:E9:D9:96:27:EB:07:0D:E8:54:20:72
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/90e0e2fb-b856-4bab-b967-a8918ce1cb29.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.220.0/22
                  161.129.152.0/22
                  163.123.204.0/22
                  192.34.100.0/22
                  208.99.4.0/22
                IPv6:
                  2001:506:2::/48
                  2001:506:30::/48
                  2604:fbc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  971
                  13830

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:34:6f:99:70:fc:42:8c:c4:d7:7f:64:7b:74:cc:9d:31:b9:
         05:3c:2d:32:58:7f:3c:59:fa:5f:18:a9:25:00:a9:df:e8:33:
         92:10:24:48:eb:2a:87:77:46:b2:0a:60:72:3b:60:33:b8:ad:
         62:90:5a:4f:44:a5:e8:98:c7:08:92:41:fe:8d:3a:fd:11:80:
         da:8e:ca:a1:c9:5a:77:6a:5f:62:fd:1f:a3:7e:a7:60:6a:a4:
         91:4d:de:2a:42:e5:23:5a:42:6f:86:e7:68:21:16:94:ba:c2:
         60:f8:02:59:b0:6f:be:a5:f4:31:88:dc:24:11:e5:04:9e:73:
         7e:f9:75:1a:a6:e0:55:9d:cb:3e:c0:ed:fb:58:60:2c:e1:7b:
         4f:96:6b:79:d5:18:c7:f4:53:05:d2:c1:dd:89:63:f0:d2:bc:
         69:f5:b5:c4:bb:cc:5f:cc:92:25:3b:6d:c7:fa:a1:fe:1f:e0:
         e6:23:71:b7:38:7d:09:a2:d3:87:ed:0d:88:eb:a2:57:66:81:
         92:24:79:d5:94:69:18:ed:fa:e9:02:ae:81:a1:9d:35:9c:3e:
         64:6f:fc:f7:54:6d:6f:5d:83:ee:91:36:48:c0:0d:95:e9:73:
         88:91:01:34:12:db:39:1c:2c:63:70:0c:4d:6b:57:05:03:a6:
         f5:72:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 21:13:19 2024 by rpki-client on console-ams.rpki-client.org