Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158/96a2b0e2d1e5670b763908dae343a4bb519a1396ee5a23dce8.cer
File:                     96a2b0e2d1e5670b763908dae343a4bb519a1396ee5a23dce8.cer (raw, json)
Hash identifier:          MQa7ZVxNqiUc0J5wuOKMR72f7cAzhHNHGJ6cisfE3Uo=
Subject key identifier:   90:D5:59:9F:5E:99:C9:58:60:99:3A:48:1D:04:26:0C:5A:59:4F:A8
Authority key identifier: 92:EF:4E:0A:DA:47:CB:9F:E7:CE:87:B6:A6:4D:AD:22:04:98:3E:97
Certificate issuer:       /CN=3c85ceae-9f38-49c6-ad1e-39e9bfeab158
Certificate serial:       010D0C9F43285845C9733B1DB9437F811C1DA400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/5/90D5599F5E99C95860993A481D04260C5A594FA8.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/5
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 06 May 2024 21:35:44 +0000
Certificate not after:    Sun 09 Aug 2026 21:35:44 +0000
Subordinate resources:    IP: 23.177.88.0/24
                          IP: 2602:f8ff::/40

Validation:               Failed, certificate revoked on Wed 22 May 2024 18:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c9:73:3b:1d:b9:43:7f:81:1c:1d:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c85ceae-9f38-49c6-ad1e-39e9bfeab158
        Validity
            Not Before: May  6 21:35:44 2024 GMT
            Not After : Aug  9 21:35:44 2026 GMT
        Subject: CN=96a2b0e2d1e5670b763908dae343a4bb519a1396ee5a23dce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:39:24:35:61:ef:46:9f:0b:92:fd:b0:f7:
                    b3:27:7b:8c:71:6d:fd:a3:85:b2:60:27:15:55:b9:
                    db:67:37:6c:b7:2f:7a:b3:6a:2d:c7:8d:44:cf:8e:
                    01:dc:eb:c0:6f:79:1a:60:cb:76:6b:c4:7c:0a:1f:
                    d2:95:10:f6:23:fc:c2:2a:18:c6:0a:94:71:1a:0b:
                    34:9f:75:c3:ea:c0:29:f8:c9:c5:f1:b9:83:32:a7:
                    e6:39:90:0e:00:c7:d2:4e:fc:23:b5:26:5d:d3:66:
                    9a:2e:82:26:1b:7f:ca:d1:02:12:7b:d2:4d:bc:6c:
                    2f:04:ee:8b:73:8c:0e:27:1b:0a:88:d8:df:92:48:
                    73:a8:bd:59:e0:e0:9d:9b:60:1e:19:c0:a9:54:af:
                    da:40:71:b5:fd:08:63:d8:f8:29:e1:be:35:e6:05:
                    ae:4d:aa:7c:61:cd:c3:9f:54:98:e8:25:d4:5e:a8:
                    b0:8d:f0:fb:f8:bc:1c:c5:48:cd:06:1d:ba:94:38:
                    d0:88:4a:0f:35:a8:f2:83:b6:33:f5:35:36:61:bc:
                    49:e3:61:a4:11:60:6c:58:5c:b7:1e:2d:cd:7b:2b:
                    80:f4:9a:c6:6f:96:bc:83:80:0a:1a:be:6f:be:90:
                    4f:48:a2:67:14:d3:82:07:a8:2d:fa:77:43:83:3d:
                    b8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D5:59:9F:5E:99:C9:58:60:99:3A:48:1D:04:26:0C:5A:59:4F:A8
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/5
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/5/90D5599F5E99C95860993A481D04260C5A594FA8.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158/3c85ceae-9f38-49c6-ad1e-39e9bfeab158.crl

            X509v3 Authority Key Identifier:
                keyid:92:EF:4E:0A:DA:47:CB:9F:E7:CE:87:B6:A6:4D:AD:22:04:98:3E:97

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.88.0/24
                IPv6:
                  2602:f8ff::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ce:5b:e2:7f:46:b1:86:de:b9:4b:3b:72:0f:18:d8:23:ea:
         3b:21:3c:ea:06:be:68:69:aa:8b:e6:90:51:88:4d:70:d3:34:
         df:4e:15:de:5d:f6:06:88:0f:85:9c:e4:63:b3:e5:8c:f8:40:
         bc:3e:2d:4b:58:57:32:44:5a:3f:38:d9:2a:82:34:45:e6:e3:
         29:1d:e5:9e:9e:52:7a:83:a7:d3:26:2a:ea:53:82:70:7a:24:
         f7:57:fd:c6:d2:49:10:70:37:f2:ab:d2:07:3f:a7:5c:5d:78:
         ed:ce:08:82:82:37:bb:d5:4d:b6:19:c7:c3:de:5e:ec:1d:29:
         db:1f:09:05:2c:0d:cb:c0:6b:a0:47:8f:16:89:8b:78:80:93:
         16:1e:1a:4b:c7:b6:93:40:a8:13:83:aa:ae:fb:66:39:b2:b3:
         ff:79:40:43:17:d0:93:d9:d2:e0:65:7f:30:29:0a:5c:d9:97:
         54:a0:ce:30:c7:db:de:31:bb:9a:ff:ed:16:1b:eb:ad:42:9b:
         1d:fc:b4:5a:67:ea:e3:3c:6f:27:3d:55:43:b5:96:a0:6f:1d:
         2b:3f:d8:82:ff:80:fa:86:60:55:53:fa:e0:21:1a:54:97:eb:
         27:06:c9:85:a9:45:20:19:16:b6:3b:8e:6c:c6:b8:0e:19:a4:
         5c:4a:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:15 2024 by rpki-client on console-fra.rpki-client.org