Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ce9625c-a1e4-4275-8861-584fe296c1dd.cer
File:                     3ce9625c-a1e4-4275-8861-584fe296c1dd.cer (raw, json)
Hash identifier:          boFBfUDaQQxP28dX7H60c8HIasmNMLKQXknCoTSCT78=
Subject key identifier:   67:37:6D:A3:EE:69:8A:26:2B:1E:61:1A:CD:0A:48:02:25:B5:B1:E6
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584235D36F8F45EAA715BD5B1100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ce9625c-a1e4-4275-8861-584fe296c1dd/3ce9625c-a1e4-4275-8861-584fe296c1dd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ce9625c-a1e4-4275-8861-584fe296c1dd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 13 Jun 2023 22:09:07 +0000
Certificate not after:    Mon 15 Sep 2025 22:09:07 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:d3:6f:8f:45:ea:a7:15:bd:5b:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jun 13 22:09:07 2023 GMT
            Not After : Sep 15 22:09:07 2025 GMT
        Subject: CN=3ce9625c-a1e4-4275-8861-584fe296c1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:7a:5c:25:ba:75:7f:3c:60:b6:9b:4a:95:
                    8d:a0:10:be:ba:78:1c:22:57:64:57:ff:fe:74:e3:
                    59:d5:11:f1:52:b9:59:22:a8:93:51:a0:31:68:23:
                    47:18:a6:8a:ff:23:c0:9b:92:5d:f8:3b:25:ca:52:
                    21:90:a6:e7:d1:14:39:a7:68:95:4b:e3:b8:6a:36:
                    32:87:b4:55:61:ed:fa:05:d2:f6:6f:ee:74:f0:02:
                    25:f7:e1:31:8c:1e:d3:09:69:b4:57:eb:4a:45:89:
                    94:b4:ac:18:00:dc:17:79:d8:2b:3e:69:bc:db:64:
                    89:d4:7f:86:c6:05:58:c8:b7:07:ba:f8:97:9d:dc:
                    e0:b6:d8:bc:66:fb:17:36:d5:5e:0d:aa:2e:0e:14:
                    39:c7:14:5d:83:10:6a:d4:65:0d:ca:53:c1:e1:60:
                    62:92:dd:7b:a5:8f:7a:46:8c:e6:0a:3b:75:22:65:
                    0b:ef:93:17:98:f6:7b:ee:a5:de:0b:9c:6b:8c:8f:
                    b8:1f:94:46:06:3a:60:fb:d6:04:dc:41:7b:c5:4d:
                    66:94:e4:30:c2:e5:37:ab:51:33:3b:8d:da:6b:cf:
                    23:d4:40:8d:59:f5:14:e2:59:c8:ff:b3:63:0e:60:
                    d1:c7:25:16:e5:3b:55:18:fc:78:e6:99:64:bc:0e:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:37:6D:A3:EE:69:8A:26:2B:1E:61:1A:CD:0A:48:02:25:B5:B1:E6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ce9625c-a1e4-4275-8861-584fe296c1dd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ce9625c-a1e4-4275-8861-584fe296c1dd/3ce9625c-a1e4-4275-8861-584fe296c1dd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:5d:3c:ae:0c:03:02:da:61:91:fd:e9:14:84:8f:d7:66:20:
         80:62:24:36:1a:32:1e:59:3a:10:0f:b7:1e:85:de:b5:33:cc:
         a0:80:f1:8a:5c:35:57:7b:af:b9:d7:5e:d2:8f:bd:90:5a:90:
         5c:fe:cd:7a:c8:6e:31:c2:24:ca:a9:03:83:5b:fe:ce:8e:17:
         89:42:41:29:3c:e7:ab:c9:06:92:ec:7c:b9:a6:21:18:26:6f:
         a7:83:e7:78:5f:50:d1:d7:a8:57:6a:bb:8a:78:60:eb:ac:82:
         32:f2:cb:0b:75:cc:e3:a5:e5:0a:13:bc:6b:a8:f1:d0:46:6a:
         61:be:b5:18:39:04:a5:21:d4:8c:10:85:64:1d:ab:77:f7:a6:
         ea:19:c5:53:8c:0e:a4:10:ee:1a:6d:84:11:88:4d:fe:52:77:
         eb:c1:e7:a0:fc:7c:3a:7f:57:f8:11:c8:cb:c6:ce:8f:d3:b9:
         60:ff:d4:46:c3:92:2f:4e:7a:13:db:dd:60:fa:b7:8f:d3:da:
         a5:e2:ad:e8:ea:1a:c2:2d:cb:45:fe:3c:35:1b:be:81:ae:ab:
         4b:a2:9a:dd:36:38:36:92:68:95:43:16:3e:16:58:63:8d:7d:
         d9:48:7a:12:b1:78:d6:9d:66:82:f8:e3:32:ca:9b:68:9c:88:
         91:e6:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:45 2023 by rpki-client on console-ams.rpki-client.org