Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44.cer
File:                     4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44.cer (raw, json)
Hash identifier:          R+QubG+tzjp7OCGTca+plAdoEjUoVo/0mDxiTyFqZlA=
Subject key identifier:   2F:10:9D:2D:30:06:3E:6B:C5:80:23:A5:9C:9A:87:B6:05:87:6C:32
Authority key identifier: 2B:7B:77:56:E4:AD:D2:16:5D:12:8B:55:09:D7:10:69:3D:E4:18:8F
Certificate issuer:       /CN=b150e98d-80e9-45f6-bc63-6b40a3d59e9c
Certificate serial:       010D0C9F43285841FAF5B33779E2FCB49BFA6C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/2F109D2D30063E6BC58023A59C9A87B605876C32.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 23 May 2023 20:05:28 +0000
Certificate not after:    Mon 25 Aug 2025 20:05:28 +0000
Subordinate resources:    IP: 23.153.232.0/24
                          IP: 2602:fa7a::/40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:fa:f5:b3:37:79:e2:fc:b4:9b:fa:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b150e98d-80e9-45f6-bc63-6b40a3d59e9c
        Validity
            Not Before: May 23 20:05:28 2023 GMT
            Not After : Aug 25 20:05:28 2025 GMT
        Subject: CN=4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e7:2d:d7:de:47:be:10:c5:19:40:b1:cf:d0:
                    41:8e:cc:8c:5b:f6:39:ac:2f:04:09:89:b0:5b:cc:
                    20:69:9b:f5:04:a7:69:42:f4:5f:33:81:24:e8:ad:
                    cc:ac:c1:9f:5f:b7:2a:12:8e:c4:69:fe:20:29:52:
                    e7:0d:e9:8a:91:c9:31:2c:c7:dc:d6:f1:4a:6d:90:
                    91:eb:83:a0:45:a5:fb:74:67:30:ba:b3:25:39:fc:
                    43:a6:7b:a1:3a:91:a2:13:d6:c2:86:08:55:8c:0d:
                    c4:ec:cb:ec:de:ea:80:5c:10:00:9a:69:67:5e:4b:
                    53:98:64:1b:fb:23:a6:b6:3b:52:f0:c2:18:b6:70:
                    74:a9:77:4c:57:3c:2a:aa:68:2d:b5:f7:e9:b9:95:
                    0a:4a:0d:79:3e:b4:34:81:30:96:13:b3:ba:3b:73:
                    2d:98:77:65:b2:27:45:c8:24:b7:cd:2f:ca:96:09:
                    d5:15:4c:61:59:b6:72:ca:2e:5d:f0:af:44:b7:0c:
                    49:02:65:ed:22:12:56:3a:46:05:83:54:b2:23:99:
                    ba:07:26:21:f1:22:fa:6a:43:8b:97:27:50:c8:57:
                    95:a1:9c:57:60:e1:1c:13:43:4a:45:ec:e7:00:e2:
                    b4:8c:67:8a:55:fb:fb:ed:2a:70:65:03:4e:c9:5f:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:10:9D:2D:30:06:3E:6B:C5:80:23:A5:9C:9A:87:B6:05:87:6C:32
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/2F109D2D30063E6BC58023A59C9A87B605876C32.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl

            X509v3 Authority Key Identifier:
                keyid:2B:7B:77:56:E4:AD:D2:16:5D:12:8B:55:09:D7:10:69:3D:E4:18:8F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.232.0/24
                IPv6:
                  2602:fa7a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:cc:ae:a4:5c:1f:17:db:cb:05:56:46:3a:31:2c:03:3f:15:
         2d:98:01:e3:f6:e1:2a:f4:ae:33:14:c5:fd:8a:97:a0:01:ae:
         ae:75:47:ea:a0:be:ae:f2:16:12:a0:70:05:b8:fe:fc:11:32:
         bb:35:4f:7d:43:10:8e:71:bb:35:59:c1:f1:18:3a:1b:b9:39:
         22:f3:4b:3c:27:3b:ac:f8:52:93:f4:90:28:ab:6b:9a:aa:43:
         c5:49:51:53:0f:d3:d2:b0:5d:e0:9b:d8:72:4b:90:40:6a:fb:
         67:eb:bf:fb:92:54:e3:49:ec:bd:be:7e:53:b7:dd:87:5c:5d:
         04:0a:7d:0e:24:02:52:8f:75:97:ce:a1:f9:ad:95:0f:d0:b9:
         c9:9c:02:1a:58:28:ad:c7:91:42:7a:c0:b9:a1:12:60:10:60:
         30:3a:4b:1b:da:41:3b:8c:38:a1:80:c0:bc:a4:98:51:10:7d:
         45:b5:dd:d3:5d:13:2a:8e:82:2c:3a:ed:2b:e4:71:27:df:47:
         5f:45:5c:c4:18:c0:93:7d:46:4c:d6:03:45:b8:7b:d3:b9:a5:
         91:44:d6:cb:52:fb:1e:0a:eb:45:26:85:a3:6b:b4:98:b6:0c:
         8d:26:32:2d:85:82:83:11:cb:21:e9:6c:67:75:e5:eb:24:a1:
         92:9e:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 21:19:23 2024 by rpki-client on console-ams.rpki-client.org