Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4a752ad53877fedca647ac61b4cdea4a2a42aa80d.cer
File:                     06fc27b2b4a752ad53877fedca647ac61b4cdea4a2a42aa80d.cer (raw, json)
Hash identifier:          A/8tsJDbAIU1ISMoDYV6N5O0FKAmVcplYSoqYvQDxNw=
Subject key identifier:   0E:C9:6B:8D:2E:A8:16:D3:BF:45:0A:2A:E6:4A:A7:D9:7E:22:76:6D
Authority key identifier: AB:3B:7F:A9:50:69:94:B8:3E:D4:04:B9:62:7A:B3:FD:4A:D6:43:78
Certificate issuer:       /CN=6efc8ae9-a0c6-428a-8a95-038468028928
Certificate serial:       010D0C9F4328583E3DB31C380977B6C652258440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
Manifest:                 rsync://rsync.rp.ki/repo/misaka/7/0EC96B8D2EA816D3BF450A2AE64AA7D97E22766D.mft
caRepository:             rsync://rsync.rp.ki/repo/misaka/7
Notify URL:               https://rrdp.rp.ki/notification.xml
Certificate not before:   Tue 14 Jun 2022 22:42:42 +0000
Certificate not after:    Mon 16 Sep 2024 22:42:42 +0000
Subordinate resources:    AS: 36260
                          IP: 23.143.176.0/24
                          IP: 64.234.232.0/22
                          IP: 170.39.224.0/22
                          IP: 199.119.64.0/23
                          IP: 209.209.56.0/22
                          IP: 2606:7140::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3d:b3:1c:38:09:77:b6:c6:52:25:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efc8ae9-a0c6-428a-8a95-038468028928
        Validity
            Not Before: Jun 14 22:42:42 2022 GMT
            Not After : Sep 16 22:42:42 2024 GMT
        Subject: CN=06fc27b2b4a752ad53877fedca647ac61b4cdea4a2a42aa80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:6a:8a:17:d6:e3:ca:4f:cf:55:5e:4b:ed:
                    69:07:3e:9b:b2:b9:8d:bc:d0:bb:b1:24:7d:35:28:
                    a2:26:00:06:24:9a:96:91:b9:f5:3d:7b:c2:34:c0:
                    ab:54:d7:14:23:f6:cf:7e:0f:3f:96:c7:1f:ab:8d:
                    15:71:b5:fe:d3:d3:d4:70:ee:38:96:f8:ad:aa:dc:
                    fe:db:27:8f:6a:95:b6:12:08:77:8f:cb:eb:e7:90:
                    6a:71:a8:00:a9:9b:aa:ea:0c:a6:0d:f6:eb:58:a3:
                    48:61:84:a9:25:9d:10:18:04:2e:01:0b:a0:58:e9:
                    63:54:7b:14:89:a5:e7:3c:03:cc:f4:0a:5e:5c:4d:
                    ef:c5:00:35:5a:f2:a1:ec:84:be:8e:29:fc:ab:77:
                    ba:94:9f:28:02:e7:31:5d:33:01:04:53:3a:cd:19:
                    dc:fb:79:1a:81:0c:29:1c:0d:ad:4f:83:79:f3:dc:
                    77:80:4c:6f:ba:75:d3:9b:43:f0:72:7c:eb:03:57:
                    77:20:27:d9:f8:57:ad:1e:69:b8:0a:5b:1c:af:15:
                    43:0e:37:80:30:c1:ab:a0:95:e3:6f:5a:a5:12:a6:
                    7e:f6:f4:1b:a9:73:77:0d:f1:c3:82:c0:dd:06:62:
                    63:3c:fb:8a:ed:05:f7:ae:ec:ff:66:de:f4:c2:de:
                    cb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C9:6B:8D:2E:A8:16:D3:BF:45:0A:2A:E6:4A:A7:D9:7E:22:76:6D
            Subject Information Access:
                CA Repository - URI:rsync://rsync.rp.ki/repo/misaka/7
                RPKI Manifest - URI:rsync://rsync.rp.ki/repo/misaka/7/0EC96B8D2EA816D3BF450A2AE64AA7D97E22766D.mft
                RPKI Notify - URI:https://rrdp.rp.ki/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl

            X509v3 Authority Key Identifier:
                keyid:AB:3B:7F:A9:50:69:94:B8:3E:D4:04:B9:62:7A:B3:FD:4A:D6:43:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.176.0/24
                  64.234.232.0/22
                  170.39.224.0/22
                  199.119.64.0/23
                  209.209.56.0/22
                IPv6:
                  2606:7140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36260

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:73:db:b4:09:0b:e4:32:43:0b:88:b9:bf:c2:00:ed:91:2b:
         b1:c0:f8:a8:a3:ae:51:b3:c3:5e:29:9c:31:24:54:ba:35:f5:
         65:44:4f:44:30:a6:00:8c:ff:21:ca:c7:f6:3c:29:de:c0:8d:
         35:66:f4:11:f7:36:64:1e:6d:25:22:51:9d:69:c1:3a:57:f2:
         e2:c0:ef:1e:44:e9:3e:ac:4e:8f:ff:78:12:be:2e:f3:c1:1f:
         59:f4:e7:65:df:1c:b1:e8:62:4f:2f:51:73:3b:7a:79:59:65:
         06:2e:24:c8:00:48:7a:62:2f:91:d7:8e:c9:89:16:87:3c:47:
         87:3b:7f:b5:3e:77:67:74:60:17:20:08:c7:61:bc:f1:7d:aa:
         f9:32:d7:e4:10:b0:7b:e3:24:ef:19:a4:0b:4e:16:ff:32:c5:
         e1:b2:88:da:58:fc:3d:13:fd:12:18:79:24:64:48:2a:a2:8a:
         13:64:10:e2:af:f1:f1:0a:3d:4e:8d:d2:00:47:66:49:0b:39:
         a7:c1:4c:31:69:df:77:6a:8f:19:f7:06:5f:c9:fa:06:b4:6e:
         d0:3b:cd:11:87:d2:ee:75:d8:28:cb:42:2a:47:cb:6d:28:ed:
         a8:8e:cb:fe:8e:1d:68:e8:8f:f2:d5:2c:4f:d8:9f:2d:1c:ef:
         16:d0:34:30
-----BEGIN CERTIFICATE-----
MIIGjDCCBXSgAwIBAgIUAQ0Mn0MoWD49sxw4CXe2xlIlhEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVmYzhhZTktYTBjNi00MjhhLThhOTUtMDM4NDY4MDI4
OTI4MB4XDTIyMDYxNDIyNDI0MloXDTI0MDkxNjIyNDI0MlowPTE7MDkGA1UEAxMy
MDZmYzI3YjJiNGE3NTJhZDUzODc3ZmVkY2E2NDdhYzYxYjRjZGVhNGEyYTQyYWE4
MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWDGqKF9bjyk/PVV5L
7WkHPpuyuY280LuxJH01KKImAAYkmpaRufU9e8I0wKtU1xQj9s9+Dz+Wxx+rjRVx
tf7T09Rw7jiW+K2q3P7bJ49qlbYSCHePy+vnkGpxqACpm6rqDKYN9utYo0hhhKkl
nRAYBC4BC6BY6WNUexSJpec8A8z0Cl5cTe/FADVa8qHshL6OKfyrd7qUnygC5zFd
MwEEUzrNGdz7eRqBDCkcDa1Pg3nz3HeATG+6ddObQ/ByfOsDV3cgJ9n4V60eabgK
WxyvFUMON4AwwaugleNvWqUSpn729Bupc3cN8cOCwN0GYmM8+4rtBfeu7P9m3vTC
3subAgMBAAGjggOQMIIDjDAdBgNVHQ4EFgQUDslrjS6oFtO/RQoq5kqn2X4idm0w
gcwGCCsGAQUFBwELBIG/MIG8MC0GCCsGAQUFBzAFhiFyc3luYzovL3JzeW5jLnJw
LmtpL3JlcG8vbWlzYWthLzcwWgYIKwYBBQUHMAqGTnJzeW5jOi8vcnN5bmMucnAu
a2kvcmVwby9taXNha2EvNy8wRUM5NkI4RDJFQTgxNkQzQkY0NTBBMkFFNjRBQTdE
OTdFMjI3NjZELm1mdDAvBggrBgEFBQcwDYYjaHR0cHM6Ly9ycmRwLnJwLmtpL25v
dGlmaWNhdGlvbi54bWwwDwYDVR0TAQH/BAUwAwEB/zCB3AYDVR0fBIHUMIHRMIHO
oIHLoIHIhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1y
cGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZl
MTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmVmYzhhZTktYTBjNi00
MjhhLThhOTUtMDM4NDY4MDI4OTI4LzZlZmM4YWU5LWEwYzYtNDI4YS04YTk1LTAz
ODQ2ODAyODkyOC5jcmwwHwYDVR0jBBgwFoAUqzt/qVBplLg+1AS5Ynqz/UrWQ3gw
DgYDVR0PAQH/BAQDAgEGMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKG
gaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEv
NWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQz
NTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWZjOGFlOS1hMGM2LTQyOGEtOGE5
NS0wMzg0NjgwMjg5MjguY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQA
F4+wAwQCQOroAwQCqifgAwQBx3dAAwQC0dE4MA0EAgACMAcDBQAmBnFAMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwCNpDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFc9u0CQvkMkMLiLm/wgDt
kSuxwPioo65Rs8NeKZwxJFS6NfVlRE9EMKYAjP8hysf2PCnewI01ZvQR9zZkHm0l
IlGdacE6V/LiwO8eROk+rE6P/3gSvi7zwR9Z9Odl3xyx6GJPL1FzO3p5WWUGLiTI
AEh6Yi+R147JiRaHPEeHO3+1PndndGAXIAjHYbzxfar5MtfkELB74yTvGaQLThb/
MsXhsojaWPw9E/0SGHkkZEgqoooTZBDir/HxCj1OjdIAR2ZJCzmnwUwxad93ao8Z
9wZfyfoGtG7QO80Rh9Luddgoy0IqR8ttKO2ojsv+jh1o6I/y1SxP2J8tHO8W0DQw
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:36 2023 by rpki-client on console-fra.rpki-client.org