Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c463130f01175bd9ed8a6839bf00c5dbf6a8794a7.cer
File:                     a6201efd4c463130f01175bd9ed8a6839bf00c5dbf6a8794a7.cer (raw, json)
Hash identifier:          DDEHdTd/qVgYlB3LFvElKu0rvOMvQlusLRdAPlSFxQY=
Subject key identifier:   B1:AA:88:7D:CA:8F:F5:60:47:8D:55:00:38:99:02:96:1D:2A:EF:CE
Authority key identifier: DA:05:67:51:F0:7F:0E:4A:8C:98:73:1C:95:C9:7F:09:EA:0A:E5:34
Certificate issuer:       /CN=46c07e76-66d8-48d7-826a-85de29c66a22
Certificate serial:       010D0C9F432858417C563B75A106F8A1F578D440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22.cer
Manifest:                 rsync://rpki.co/repo/HYSP/16/B1AA887DCA8FF560478D5500389902961D2AEFCE.mft
caRepository:             rsync://rpki.co/repo/HYSP/16
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:32:18 +0000
Certificate not after:    Fri 11 Jul 2025 11:32:18 +0000
Subordinate resources:    IP: 23.150.8.0/22
                          IP: 2602:fa94::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7c:56:3b:75:a1:06:f8:a1:f5:78:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c07e76-66d8-48d7-826a-85de29c66a22
        Validity
            Not Before: Apr  8 11:32:18 2023 GMT
            Not After : Jul 11 11:32:18 2025 GMT
        Subject: CN=a6201efd4c463130f01175bd9ed8a6839bf00c5dbf6a8794a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:10:40:79:7c:e0:1c:99:cd:ed:64:8a:76:
                    66:f1:76:83:45:e5:ee:3d:85:36:79:54:2e:5c:66:
                    bf:24:ff:55:c2:02:bf:19:dd:1b:d8:cd:86:7f:70:
                    34:fd:23:af:ec:eb:73:48:da:d5:5f:e1:ca:1f:9c:
                    4a:fa:97:7c:73:2e:5c:56:fd:00:aa:71:34:b3:57:
                    e2:7f:3f:f2:87:bb:a7:f3:e3:3f:38:21:8a:90:ab:
                    cb:3f:7a:ca:6d:a3:15:51:9b:ad:a8:cb:0d:af:12:
                    e5:5f:3a:71:19:ed:8a:e2:c3:26:d3:6a:ef:15:6b:
                    14:9f:37:16:79:31:fc:55:70:7d:9b:75:66:6a:57:
                    72:20:3b:ff:5f:92:72:8f:94:f2:69:94:cf:5f:57:
                    40:cb:f1:23:59:fa:77:7f:3f:57:f4:a2:9a:23:8b:
                    05:1d:63:10:47:2c:e1:22:9b:07:2e:76:60:4f:a9:
                    bd:86:1e:11:44:a2:24:3b:57:fe:3b:3f:1d:65:73:
                    e2:2c:6f:42:75:e3:17:75:7a:e8:dd:fc:45:af:1e:
                    dd:5e:39:fe:b0:9f:64:bc:87:53:ea:e3:88:6d:a9:
                    8d:ec:02:fa:0f:99:2d:fb:fa:74:cb:59:c7:f1:6e:
                    11:75:e1:05:b6:d0:d9:e2:41:23:a2:55:24:f2:94:
                    d3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AA:88:7D:CA:8F:F5:60:47:8D:55:00:38:99:02:96:1D:2A:EF:CE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/16
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/16/B1AA887DCA8FF560478D5500389902961D2AEFCE.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.crl

            X509v3 Authority Key Identifier:
                keyid:DA:05:67:51:F0:7F:0E:4A:8C:98:73:1C:95:C9:7F:09:EA:0A:E5:34

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/22
                IPv6:
                  2602:fa94::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:4f:87:7e:02:4b:cd:95:22:c5:11:a8:d7:6b:1f:57:ed:62:
         4f:0e:61:4d:d5:85:d9:14:34:fd:9e:16:8b:be:dd:c2:4a:87:
         c0:23:4b:59:51:c9:b7:3d:55:22:ec:17:9b:03:ad:52:cf:d5:
         ac:32:8a:70:bd:12:69:87:69:f5:50:99:fb:da:1a:68:e9:0d:
         21:50:46:ec:29:f3:37:73:60:9c:fe:f5:9d:10:ec:5c:0c:66:
         46:9f:fc:16:23:db:7d:63:34:21:2c:f2:96:2f:68:59:4b:d3:
         ba:e0:5f:96:68:b6:5c:87:62:5a:f6:08:6c:a9:74:5b:b9:63:
         33:c2:f7:cc:cf:9f:5c:03:9c:6e:3d:2c:85:b4:d9:b2:92:30:
         b6:59:70:1f:da:a9:31:3c:26:96:70:c2:1a:ec:c5:7f:b8:43:
         4e:6d:d5:85:ee:84:e3:5c:c0:6c:3a:60:b0:6b:30:b1:c0:42:
         6c:ed:67:a7:e9:a3:d0:ec:57:99:05:04:fd:8a:b4:60:2b:fa:
         8c:0e:d2:e8:f2:e3:e6:b7:6d:a1:1a:9d:87:ed:24:ea:84:b7:
         91:c6:82:b2:9d:80:ec:b4:b8:46:9c:1d:07:a0:8b:a8:6e:75:
         a9:a0:c9:f1:01:61:7a:2c:a5:b0:1e:9e:f6:c9:c4:eb:62:4a:
         1e:d5:4d:9a
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEF8Vjt1oQb4ofV41EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDZjMDdlNzYtNjZkOC00OGQ3LTgyNmEtODVkZTI5YzY2
YTIyMB4XDTIzMDQwODExMzIxOFoXDTI1MDcxMTExMzIxOFowPTE7MDkGA1UEAxMy
YTYyMDFlZmQ0YzQ2MzEzMGYwMTE3NWJkOWVkOGE2ODM5YmYwMGM1ZGJmNmE4Nzk0
YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVRBAeXzgHJnN7WSK
dmbxdoNF5e49hTZ5VC5cZr8k/1XCAr8Z3RvYzYZ/cDT9I6/s63NI2tVf4cofnEr6
l3xzLlxW/QCqcTSzV+J/P/KHu6fz4z84IYqQq8s/esptoxVRm62oyw2vEuVfOnEZ
7YriwybTau8VaxSfNxZ5MfxVcH2bdWZqV3IgO/9fknKPlPJplM9fV0DL8SNZ+nd/
P1f0opojiwUdYxBHLOEimwcudmBPqb2GHhFEoiQ7V/47Px1lc+Isb0J14xd1eujd
/EWvHt1eOf6wn2S8h1Pq44htqY3sAvoPmS37+nTLWcfxbhF14QW20NniQSOiVSTy
lNPDAgMBAAGjggNVMIIDUTAdBgNVHQ4EFgQUsaqIfcqP9WBHjVUAOJkClh0q784w
gcQGCCsGAQUFBwELBIG3MIG0MCgGCCsGAQUFBzAFhhxyc3luYzovL3Jwa2kuY28v
cmVwby9IWVNQLzE2MFUGCCsGAQUFBzAKhklyc3luYzovL3Jwa2kuY28vcmVwby9I
WVNQLzE2L0IxQUE4ODdEQ0E4RkY1NjA0NzhENTUwMDM4OTkwMjk2MUQyQUVGQ0Uu
bWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY28vcnJkcC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNj
Yy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQ2YzA3ZTc2LTY2ZDgtNDhkNy04MjZh
LTg1ZGUyOWM2NmEyMi80NmMwN2U3Ni02NmQ4LTQ4ZDctODI2YS04NWRlMjljNjZh
MjIuY3JsMB8GA1UdIwQYMBaAFNoFZ1Hwfw5KjJhzHJXJfwnqCuU0MA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2NjLTRiMDMt
YmRhNy0xYmUyMDQ5MzNhZTUvNDZjMDdlNzYtNjZkOC00OGQ3LTgyNmEtODVkZTI5
YzY2YTIyLmNlcjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAheWCDAOBAIA
AjAIAwYEJgL6lAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAIE+HfgJLzZUixRGo12sfV+1iTw5hTdWF2RQ0
/Z4Wi77dwkqHwCNLWVHJtz1VIuwXmwOtUs/VrDKKcL0SaYdp9VCZ+9oaaOkNIVBG
7CnzN3NgnP71nRDsXAxmRp/8FiPbfWM0ISzyli9oWUvTuuBflmi2XIdiWvYIbKl0
W7ljM8L3zM+fXAOcbj0shbTZspIwtllwH9qpMTwmlnDCGuzFf7hDTm3Vhe6E41zA
bDpgsGswscBCbO1np+mj0OxXmQUE/Yq0YCv6jA7S6PLj5rdtoRqdh+0k6oS3kcaC
sp2A7LS4RpwdB6CLqG51qaDJ8QFheiylsB6e9snE62JKHtVNmg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:45 2023 by rpki-client on console-ams.rpki-client.org