Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479197abda74defbd6d0f516a881b9f29ab7763ff125b.cer
File:                     eebda479197abda74defbd6d0f516a881b9f29ab7763ff125b.cer (raw, json)
Hash identifier:          GlofqHJsEJMo+Y0q9Ijawqm+J6s/n7YvX303Evys2dk=
Subject key identifier:   D7:13:C7:91:54:AA:35:85:7D:63:48:82:EF:54:7E:F1:E1:14:FC:4A
Authority key identifier: 3E:C5:21:1F:79:C0:6E:DC:01:87:6D:D9:E7:F2:CD:2B:A5:24:7D:A5
Certificate issuer:       /CN=54c0abe8-0a04-4316-aff2-9cdff0522fbd
Certificate serial:       010D0C9F432858417C5637E88D01F71244542100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
Manifest:                 rsync://rpki.co/repo/HYSP/20/D713C79154AA35857D634882EF547EF1E114FC4A.mft
caRepository:             rsync://rpki.co/repo/HYSP/20
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:32:17 +0000
Certificate not after:    Fri 11 Jul 2025 11:32:17 +0000
Subordinate resources:    AS: 945
                          AS: 62853
                          IP: 23.133.8.0/24
                          IP: 216.146.28.0/22
                          IP: 2602:fbf6::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7c:56:37:e8:8d:01:f7:12:44:54:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54c0abe8-0a04-4316-aff2-9cdff0522fbd
        Validity
            Not Before: Apr  8 11:32:17 2023 GMT
            Not After : Jul 11 11:32:17 2025 GMT
        Subject: CN=eebda479197abda74defbd6d0f516a881b9f29ab7763ff125b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:7b:a7:04:00:65:d7:bc:e3:10:e8:82:3d:
                    f6:4a:bd:a8:39:b3:e5:4c:e0:c7:30:53:57:b0:9f:
                    ae:d4:86:fe:57:0d:29:dd:35:92:96:53:79:12:e4:
                    db:f0:ee:5c:d5:1f:60:ae:78:7f:06:7a:2b:fd:a6:
                    03:55:67:43:9a:b5:6f:dc:ae:cd:44:b2:ea:f6:23:
                    e2:db:f9:8c:e7:c3:df:32:7c:c1:2e:8e:3d:85:7f:
                    f7:53:cc:49:16:32:9d:da:37:e6:00:22:72:9b:34:
                    b9:a4:ff:02:7c:bd:50:5b:d5:a4:53:48:04:a5:9b:
                    95:28:23:91:28:0c:92:40:52:8d:d7:77:72:90:56:
                    f9:93:0b:34:7e:c8:e8:71:aa:56:ef:96:52:19:97:
                    90:b4:53:c7:a7:17:ac:98:fe:b7:f0:34:a8:96:0d:
                    c9:3f:64:38:e8:e6:ab:22:0f:13:af:27:59:99:9a:
                    1c:4a:cd:53:5d:4c:cd:bb:43:fc:9d:47:0c:ee:74:
                    c2:5d:c0:49:f8:ec:47:36:0d:cb:39:5a:45:14:d5:
                    cd:58:0d:61:83:57:ca:b9:88:ba:ab:38:f1:bc:c1:
                    1a:6e:12:be:4d:d0:89:0d:26:45:a6:e3:d4:79:79:
                    7f:f8:88:79:b0:0b:f0:f7:5f:cc:6a:60:62:1e:b5:
                    cb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:13:C7:91:54:AA:35:85:7D:63:48:82:EF:54:7E:F1:E1:14:FC:4A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/20
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/20/D713C79154AA35857D634882EF547EF1E114FC4A.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C5:21:1F:79:C0:6E:DC:01:87:6D:D9:E7:F2:CD:2B:A5:24:7D:A5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.8.0/24
                  216.146.28.0/22
                IPv6:
                  2602:fbf6::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  945
                  62853

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:63:23:22:0a:8e:8b:eb:7f:bf:47:10:2e:7d:ed:98:5a:66:
         e1:5f:e9:1e:29:c5:f4:a4:a1:b1:0e:01:7e:8b:b5:57:e3:18:
         9d:d4:f5:78:5d:79:4a:c5:b9:5e:d1:38:ee:20:4d:11:69:1d:
         56:91:40:67:a6:82:ff:2c:e4:80:aa:e4:6c:95:d7:45:13:c8:
         27:e7:a6:36:1b:6d:01:4c:3e:76:e0:f7:22:d9:b5:5e:63:30:
         ce:f6:36:15:4b:20:e2:99:bf:16:3b:51:bd:93:4e:a0:b3:5a:
         d3:9f:ea:07:b1:2f:cc:ae:48:38:27:41:a1:c4:c7:b3:b5:d9:
         80:5f:de:94:87:b4:c5:84:27:72:a8:19:b8:de:8f:a6:4a:39:
         dc:8b:c1:44:4c:ab:b2:cb:53:92:e6:a7:06:d9:95:98:8a:ca:
         c2:d4:33:54:77:ff:f4:3b:c1:e0:1e:5c:86:68:58:a2:29:41:
         01:64:52:18:63:e5:df:c3:f5:51:da:76:e7:55:5e:9f:66:8c:
         82:01:24:65:9c:b4:d8:da:8a:5f:67:f3:64:5a:f1:35:3a:18:
         17:a5:e4:30:ea:0d:d6:ae:7b:b5:4a:03:cc:23:33:f7:89:47:
         78:f9:1e:ef:34:03:11:7e:08:bd:93:24:55:a9:6e:ef:b3:c6:
         7b:80:9d:2c
-----BEGIN CERTIFICATE-----
MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWEF8VjfojQH3EkRUIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTRjMGFiZTgtMGEwNC00MzE2LWFmZjItOWNkZmYwNTIy
ZmJkMB4XDTIzMDQwODExMzIxN1oXDTI1MDcxMTExMzIxN1owPTE7MDkGA1UEAxMy
ZWViZGE0NzkxOTdhYmRhNzRkZWZiZDZkMGY1MTZhODgxYjlmMjlhYjc3NjNmZjEy
NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXV3unBABl17zjEOiC
PfZKvag5s+VM4McwU1ewn67Uhv5XDSndNZKWU3kS5Nvw7lzVH2CueH8Geiv9pgNV
Z0OatW/crs1Esur2I+Lb+Yznw98yfMEujj2Ff/dTzEkWMp3aN+YAInKbNLmk/wJ8
vVBb1aRTSASlm5UoI5EoDJJAUo3Xd3KQVvmTCzR+yOhxqlbvllIZl5C0U8enF6yY
/rfwNKiWDck/ZDjo5qsiDxOvJ1mZmhxKzVNdTM27Q/ydRwzudMJdwEn47Ec2Dcs5
WkUU1c1YDWGDV8q5iLqrOPG8wRpuEr5N0IkNJkWm49R5eX/4iHmwC/D3X8xqYGIe
tcsPAgMBAAGjggN6MIIDdjAdBgNVHQ4EFgQU1xPHkVSqNYV9Y0iC71R+8eEU/Eow
gcQGCCsGAQUFBwELBIG3MIG0MCgGCCsGAQUFBzAFhhxyc3luYzovL3Jwa2kuY28v
cmVwby9IWVNQLzIwMFUGCCsGAQUFBzAKhklyc3luYzovL3Jwa2kuY28vcmVwby9I
WVNQLzIwL0Q3MTNDNzkxNTRBQTM1ODU3RDYzNDg4MkVGNTQ3RUYxRTExNEZDNEEu
bWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY28vcnJkcC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3
Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzU0YzBhYmU4LTBhMDQtNDMxNi1hZmYy
LTljZGZmMDUyMmZiZC81NGMwYWJlOC0wYTA0LTQzMTYtYWZmMi05Y2RmZjA1MjJm
YmQuY3JsMB8GA1UdIwQYMBaAFD7FIR95wG7cAYdt2efyzSulJH2lMA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDkt
YWNjZS0xMzcyMjdlOTcxYWMvNTRjMGFiZTgtMGEwNC00MzE2LWFmZjItOWNkZmYw
NTIyZmJkLmNlcjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEABeFCAMEAtiS
HDANBAIAAjAHAwUAJgL79jAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgIDsQIDAPWF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABpjIyIKjovrf79HEC597ZhaZuFf6R4pxfSkobEOAX6LtVfjGJ3U
9XhdeUrFuV7ROO4gTRFpHVaRQGemgv8s5ICq5GyV10UTyCfnpjYbbQFMPnbg9yLZ
tV5jMM72NhVLIOKZvxY7Ub2TTqCzWtOf6gexL8yuSDgnQaHEx7O12YBf3pSHtMWE
J3KoGbjej6ZKOdyLwURMq7LLU5LmpwbZlZiKysLUM1R3//Q7weAeXIZoWKIpQQFk
Uhhj5d/D9VHadudVXp9mjIIBJGWctNjail9n82Ra8TU6GBel5DDqDdaue7VKA8wj
M/eJR3j5Hu80AxF+CL2TJFWpbu+zxnuAnSw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:33 2023 by rpki-client on console-ams.rpki-client.org