Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31.cer
File:                     06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31.cer (raw, json)
Hash identifier:          LL1/EIMKU5pARc+8ys+GiEROTk0Xn1KVqTRybWgr3aA=
Subject key identifier:   16:93:1D:F4:91:69:3F:02:F4:41:1C:3C:35:6A:DF:EE:35:71:3A:A0
Authority key identifier: AB:3B:7F:A9:50:69:94:B8:3E:D4:04:B9:62:7A:B3:FD:4A:D6:43:78
Certificate issuer:       /CN=6efc8ae9-a0c6-428a-8a95-038468028928
Certificate serial:       010D0C9F43285844179D08CE56BB742D47882580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
Manifest:                 rsync://rsync.rp.ki/repo/misakaio/1/16931DF491693F02F4411C3C356ADFEE35713AA0.mft
caRepository:             rsync://rsync.rp.ki/repo/misakaio/1/
Notify URL:               https://rrdp.rp.ki/notification.xml
Certificate not before:   Sun 03 Dec 2023 11:59:08 +0000
Certificate not after:    Sat 07 Mar 2026 11:59:08 +0000
Subordinate resources:    AS: 917
                          AS: 969
                          AS: 36260
                          IP: 23.143.176.0/24
                          IP: 64.234.232.0/22
                          IP: 65.97.52.0/22
                          IP: 170.39.224.0/22
                          IP: 199.119.64.0/23
                          IP: 209.209.56.0/22
                          IP: 2606:7140::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:17:9d:08:ce:56:bb:74:2d:47:88:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efc8ae9-a0c6-428a-8a95-038468028928
        Validity
            Not Before: Dec  3 11:59:08 2023 GMT
            Not After : Mar  7 11:59:08 2026 GMT
        Subject: CN=06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:36:54:3a:f9:7e:85:a1:d1:44:c3:13:9f:
                    46:79:08:1c:03:0b:a4:37:e5:ff:c0:62:05:db:6d:
                    f5:35:a6:c5:51:cb:63:3d:b4:fe:1a:74:2e:39:65:
                    61:2b:91:b7:85:3d:f5:ec:c9:95:a3:cb:43:bc:c2:
                    fe:0d:4f:14:bc:40:45:01:e7:15:26:bb:f6:03:de:
                    fb:c7:38:b0:93:7e:f1:90:ad:fa:5c:a9:61:08:67:
                    2f:6d:bf:29:62:69:cc:41:13:6c:a5:f2:6e:92:b3:
                    d5:35:cc:c7:ff:e8:3e:fa:8c:6c:35:df:35:c5:4e:
                    57:7b:29:3c:f4:55:8c:0e:7a:e6:f6:b3:11:d7:8c:
                    39:69:93:c7:0a:70:36:26:f4:e8:38:c1:15:2b:95:
                    5e:c3:a7:ec:54:db:77:76:63:25:da:17:6d:da:87:
                    1a:47:01:d1:bd:25:17:eb:a7:91:f9:ee:bf:e6:f3:
                    20:b7:9d:d8:09:3b:fa:7e:12:fc:5b:13:ff:fe:f2:
                    27:09:1f:1f:3b:eb:16:2f:3f:b1:ef:b9:99:e1:f9:
                    4f:ba:55:c6:c0:d0:18:16:eb:39:d4:3c:f4:36:fb:
                    88:17:2b:ab:9a:ba:af:4b:ea:5a:ec:4c:c4:17:57:
                    61:a0:f4:83:5a:ba:27:3a:bc:9e:73:c3:ca:6c:a7:
                    7b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:93:1D:F4:91:69:3F:02:F4:41:1C:3C:35:6A:DF:EE:35:71:3A:A0
            Subject Information Access:
                CA Repository - URI:rsync://rsync.rp.ki/repo/misakaio/1/
                RPKI Manifest - URI:rsync://rsync.rp.ki/repo/misakaio/1/16931DF491693F02F4411C3C356ADFEE35713AA0.mft
                RPKI Notify - URI:https://rrdp.rp.ki/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl

            X509v3 Authority Key Identifier:
                keyid:AB:3B:7F:A9:50:69:94:B8:3E:D4:04:B9:62:7A:B3:FD:4A:D6:43:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.176.0/24
                  64.234.232.0/22
                  65.97.52.0/22
                  170.39.224.0/22
                  199.119.64.0/23
                  209.209.56.0/22
                IPv6:
                  2606:7140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  917
                  969
                  36260

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:4a:91:12:0f:4c:bd:f2:d8:ba:a8:19:0d:59:d0:03:55:e6:
         dc:f5:98:e7:08:d9:14:8c:7c:49:97:e1:26:1b:b1:58:92:f8:
         65:f4:f8:fb:e2:82:3d:f1:cb:c1:77:96:df:28:99:13:d6:6a:
         4d:55:1a:f4:19:82:5a:8c:27:b5:88:ed:c4:cd:2a:13:88:cb:
         f5:6e:37:25:27:60:24:9b:84:b2:4e:da:c6:c0:f4:ce:c8:3f:
         a4:e1:fe:d3:d3:59:a4:bd:99:8b:96:76:18:08:07:57:f9:aa:
         bc:ac:5b:00:98:4b:3d:fd:9b:f3:e4:88:5e:39:77:3b:c0:93:
         95:b4:42:53:de:ec:b2:70:86:8d:d8:a4:3b:11:b6:8c:68:5b:
         3b:da:1c:46:b9:50:55:d8:11:32:f7:51:bc:e7:42:a1:b3:e4:
         6e:ff:10:78:e7:e3:a0:26:0b:6d:f0:b5:42:15:87:f6:d9:bb:
         a1:3c:0e:55:ca:8b:9e:c1:b8:eb:f6:48:e9:79:52:4b:1f:8f:
         7a:90:2c:f2:f4:36:69:cc:f4:b7:e6:68:8d:e0:aa:a0:90:f3:
         07:7d:cb:0e:64:61:64:fb:9c:b5:aa:ba:6b:d3:d8:c3:fb:55:
         b4:c6:c7:a5:8b:a7:c6:ba:80:39:76:53:41:31:a9:66:d9:21:
         89:24:fb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 3 22:11:15 2023 by rpki-client on console-fra.rpki-client.org