Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ec02e534e80cfc11bffd45e9f6184708f18f65e0.cer
File:                     6506a66ed0ec02e534e80cfc11bffd45e9f6184708f18f65e0.cer (raw, json)
Hash identifier:          sTh3xY7mTmcDn2fpQUQ9V0v4VFc67H7NzGCPIPi5hRE=
Subject key identifier:   A4:2B:07:31:1D:81:82:27:4F:77:0B:F8:E3:E6:80:B9:82:A5:73:59
Authority key identifier: 02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50
Certificate issuer:       /CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37
Certificate serial:       010D0C9F432858417C0E652A3FC4559A89A66740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
Manifest:                 rsync://rpki.co/repo/HYSP/0/A42B07311D8182274F770BF8E3E680B982A57359.mft
caRepository:             rsync://rpki.co/repo/HYSP/0
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:07:34 +0000
Certificate not after:    Fri 11 Jul 2025 09:07:34 +0000
Subordinate resources:    AS: 54625
                          IP: 23.149.232.0/24
                          IP: 149.112.26.0/24
                          IP: 165.140.142.0/24
                          IP: 2602:fc23::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7c:0e:65:2a:3f:c4:55:9a:89:a6:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37
        Validity
            Not Before: Apr  8 09:07:34 2023 GMT
            Not After : Jul 11 09:07:34 2025 GMT
        Subject: CN=6506a66ed0ec02e534e80cfc11bffd45e9f6184708f18f65e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:53:ca:c0:e0:d6:cb:cd:04:16:19:a2:72:6c:
                    18:1b:84:7a:54:6e:eb:c7:d0:74:3d:bf:04:40:1b:
                    45:b3:06:89:b4:21:97:1c:af:c6:85:2d:cc:f5:58:
                    2e:bb:77:a4:49:7f:07:64:4e:17:dd:9f:46:91:a0:
                    25:4b:e7:7b:da:0a:6a:e8:28:fd:09:60:ad:f0:1a:
                    74:3c:b8:f0:f5:af:a1:68:9e:c3:51:f6:8c:76:81:
                    74:47:e6:99:20:c3:90:01:cd:4c:36:f5:bf:82:8d:
                    9c:6e:8a:1d:79:8f:e9:d2:b5:e4:98:2c:f7:ab:84:
                    fa:3a:42:98:7e:c9:49:8c:ff:9e:9a:c7:22:8a:36:
                    b7:5e:4b:95:be:09:57:3b:3d:a7:86:ae:b6:a1:80:
                    77:e7:6f:59:2d:06:ec:c9:7b:fd:7a:1d:f7:f8:3d:
                    6a:72:a8:61:2f:91:be:ec:c5:c8:94:56:6b:33:50:
                    c3:7b:68:17:b6:f4:93:73:d9:23:6a:0b:a8:4a:b4:
                    97:c6:e7:09:94:3c:cd:95:f5:31:4c:a3:4f:40:b4:
                    8a:c8:5b:20:62:ce:9c:76:95:3a:62:81:9b:61:2a:
                    ac:31:57:43:20:93:d5:80:df:81:63:11:f7:3b:15:
                    25:86:84:58:20:1a:9d:a3:82:00:c9:27:a2:38:50:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2B:07:31:1D:81:82:27:4F:77:0B:F8:E3:E6:80:B9:82:A5:73:59
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/0
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/0/A42B07311D8182274F770BF8E3E680B982A57359.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl

            X509v3 Authority Key Identifier:
                keyid:02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.232.0/24
                  149.112.26.0/24
                  165.140.142.0/24
                IPv6:
                  2602:fc23::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54625

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:65:73:30:5f:b6:3c:cf:59:0b:3c:67:05:9d:51:97:45:32:
         26:0f:34:37:31:f2:11:4e:8a:c3:d7:e8:4d:d5:ea:70:cd:a0:
         6c:37:1b:22:92:b5:75:d9:4e:1d:dd:6a:75:18:69:eb:a2:63:
         74:0f:7e:e9:1f:0e:c9:c0:6f:fc:5f:07:c4:7f:a9:60:d2:af:
         5c:1d:a4:b4:de:0b:7e:d6:68:cb:fd:b7:2e:e4:57:c3:6d:ff:
         62:af:41:29:2b:8d:89:04:fa:f6:dc:74:4b:1b:9a:1b:8b:e2:
         a3:42:2d:f7:19:2e:f7:82:8c:ca:76:2d:88:ce:49:10:59:2a:
         9f:cb:ef:7f:2c:a8:07:3e:fd:62:41:9b:2a:4f:e3:db:16:c5:
         34:2d:c4:60:be:af:f1:7e:45:99:a2:bb:bc:ca:f4:d5:95:55:
         43:93:19:4c:c7:6d:15:b3:2f:85:12:1b:bf:45:1a:27:a1:f5:
         81:57:f8:4e:4b:09:bc:03:50:fe:17:9c:df:f6:8a:84:cf:50:
         e8:bc:bf:8a:52:23:59:dd:7c:83:45:c2:4e:ba:d0:e8:c8:bd:
         6d:e6:c5:8f:ee:1c:22:0f:a5:5d:3b:9e:a2:ee:42:be:32:a9:
         af:42:7d:93:8c:3e:9f:25:06:c9:cc:4a:97:c1:d6:2e:e1:54:
         c3:43:9b:6d
-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWEF8DmUqP8RVmommZ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRkNjYz
ZjM3MB4XDTIzMDQwODA5MDczNFoXDTI1MDcxMTA5MDczNFowPTE7MDkGA1UEAxMy
NjUwNmE2NmVkMGVjMDJlNTM0ZTgwY2ZjMTFiZmZkNDVlOWY2MTg0NzA4ZjE4ZjY1
ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWU8rA4NbLzQQWGaJy
bBgbhHpUbuvH0HQ9vwRAG0WzBom0IZccr8aFLcz1WC67d6RJfwdkThfdn0aRoCVL
53vaCmroKP0JYK3wGnQ8uPD1r6FonsNR9ox2gXRH5pkgw5ABzUw29b+CjZxuih15
j+nSteSYLPerhPo6Qph+yUmM/56axyKKNrdeS5W+CVc7PaeGrrahgHfnb1ktBuzJ
e/16Hff4PWpyqGEvkb7sxciUVmszUMN7aBe29JNz2SNqC6hKtJfG5wmUPM2V9TFM
o09AtIrIWyBizpx2lTpigZthKqwxV0Mgk9WA34FjEfc7FSWGhFggGp2jggDJJ6I4
UN5ZAgMBAAGjggN7MIIDdzAdBgNVHQ4EFgQUpCsHMR2BgidPdwv44+aAuYKlc1kw
gcIGCCsGAQUFBwELBIG1MIGyMCcGCCsGAQUFBzAFhhtyc3luYzovL3Jwa2kuY28v
cmVwby9IWVNQLzAwVAYIKwYBBQUHMAqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvMC9BNDJCMDczMTFEODE4MjI3NEY3NzBCRjhFM0U2ODBCOTgyQTU3MzU5Lm1m
dDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNvL3JyZHAvbm90aWZpY2F0aW9u
LnhtbDAPBgNVHRMBAf8EBTADAQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzIt
NGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMWFiOGQ0NS1hMWFlLTQwOGEtOWU0NS1i
MDRmZGQ2NjNmMzcvZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRkNjYzZjM3
LmNybDAfBgNVHSMEGDAWgBQC6FurR77aaGrUQFWUhCZZ3m+rUDAOBgNVHQ8BAf8E
BAMCAQYwgcAGCCsGAQUFBwEBBIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2
M2YzNy5jZXIwOwYIKwYBBQUHAQcBAf8ELDAqMBgEAgABMBIDBAAXlegDBACVcBoD
BACljI4wDgQCAAIwCAMGBCYC/CMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDV
YTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQBAZXMwX7Y8z1kLPGcFnVGXRTImDzQ3MfIRTorD1+hN1epwzaBs
NxsikrV12U4d3Wp1GGnromN0D37pHw7JwG/8XwfEf6lg0q9cHaS03gt+1mjL/bcu
5FfDbf9ir0EpK42JBPr23HRLG5obi+KjQi33GS73gozKdi2IzkkQWSqfy+9/LKgH
Pv1iQZsqT+PbFsU0LcRgvq/xfkWZoru8yvTVlVVDkxlMx20Vsy+FEhu/RRonofWB
V/hOSwm8A1D+F5zf9oqEz1DovL+KUiNZ3XyDRcJOutDoyL1t5sWP7hwiD6VdO56i
7kK+MqmvQn2TjD6fJQbJzEqXwdYu4VTDQ5tt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:41 2023 by rpki-client on console-ams.rpki-client.org