Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b4415611c8f002e34925fb621ecf702bd114726d1.cer
File:                     724139ef2b4415611c8f002e34925fb621ecf702bd114726d1.cer (raw, json)
Hash identifier:          QjZBISmPKyVpmYQiAbuK9wEGzTcwZcM0NfJSdcVmdsU=
Subject key identifier:   D9:D9:6A:61:9F:9E:E6:CB:9A:CA:C5:38:C7:5D:CD:05:08:3A:5E:46
Authority key identifier: FC:BB:FA:44:DE:5C:A7:DA:73:E8:8F:76:11:9E:E5:DB:26:A6:B1:F5
Certificate issuer:       /CN=bc942f68-cb33-4a05-a727-3f93e610393e
Certificate serial:       010D0C9F432858449AE687D77DEB685515A66480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D9D96A619F9EE6CB9ACAC538C75DCD05083A5E46.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 19 Jan 2024 12:38:07 +0000
Certificate not after:    Thu 23 Apr 2026 11:38:07 +0000
Subordinate resources:    AS: 54218
                          IP: 23.148.232.0/24
                          IP: 2602:fa9b::/36

Validation:               Failed, certificate revoked on Mon 26 Feb 2024 12:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:9a:e6:87:d7:7d:eb:68:55:15:a6:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc942f68-cb33-4a05-a727-3f93e610393e
        Validity
            Not Before: Jan 19 12:38:07 2024 GMT
            Not After : Apr 23 11:38:07 2026 GMT
        Subject: CN=724139ef2b4415611c8f002e34925fb621ecf702bd114726d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:48:e0:bc:94:48:20:d8:1f:2a:70:8c:04:4e:
                    10:3b:c6:2a:60:32:f1:53:01:d4:7b:fd:97:1c:7d:
                    23:59:d8:a5:f8:82:58:36:76:93:d8:0a:b7:98:e6:
                    58:6c:b7:03:e9:1a:bc:d5:c1:9d:9c:ac:6f:57:2d:
                    a4:0c:a7:bc:cb:b9:12:16:bc:49:b1:4d:b5:1b:c6:
                    13:79:8a:28:c2:ae:5b:69:63:95:42:e7:38:9c:7d:
                    7b:58:95:c9:39:c1:fc:9d:16:f3:52:8d:58:5d:e0:
                    47:dc:a5:c0:9f:e3:d1:58:8f:8d:2c:a7:15:d4:78:
                    19:5e:09:ef:e5:52:1f:ba:67:b5:54:7c:2b:fc:5b:
                    8e:2c:df:a6:be:52:7f:f9:95:c3:ad:88:37:8d:bc:
                    82:bd:10:e1:d2:7f:bf:93:ca:46:7a:3a:8f:01:82:
                    e8:1c:9e:54:30:50:b2:92:25:4e:d6:c2:34:ab:b4:
                    e4:13:d8:0d:49:a2:47:26:ef:4b:f2:92:be:2e:ac:
                    c8:53:a6:89:c1:9c:d8:a6:d5:b1:da:24:4e:03:61:
                    29:bb:65:9c:b3:8a:f0:09:74:1c:bf:8b:cc:b4:58:
                    3e:4d:1f:5a:5c:10:09:f0:68:10:7e:40:67:3a:6d:
                    b0:fc:85:8a:87:99:db:5f:6b:5c:32:6f:b8:1c:f7:
                    1e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D9:6A:61:9F:9E:E6:CB:9A:CA:C5:38:C7:5D:CD:05:08:3A:5E:46
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D9D96A619F9EE6CB9ACAC538C75DCD05083A5E46.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:BB:FA:44:DE:5C:A7:DA:73:E8:8F:76:11:9E:E5:DB:26:A6:B1:F5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.232.0/24
                IPv6:
                  2602:fa9b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54218

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:19:df:2f:62:20:d9:c9:9c:18:ec:a6:0f:9b:7e:8f:19:
         0e:b3:85:99:44:e3:58:70:ba:13:79:10:63:ed:1c:0d:98:c1:
         64:c1:6d:9b:e7:e0:6a:db:63:90:7a:13:2c:cb:e9:20:07:0d:
         de:cc:2d:79:c4:e9:d5:79:df:04:f0:b8:7b:62:7e:a4:7c:08:
         53:aa:d5:2a:6b:21:51:99:6d:9a:cf:20:7b:68:b9:77:f0:b9:
         e2:05:a7:67:39:ee:a0:43:c9:94:63:15:24:2b:c8:1f:5f:e1:
         07:e1:49:bd:ba:b9:0b:fb:ee:14:93:b2:07:59:b4:91:4e:7f:
         66:84:e6:4a:81:7f:7f:d2:6c:ab:15:38:41:f6:c7:d9:fb:a5:
         f6:d6:48:6d:f4:7a:7b:1b:aa:35:46:83:57:e7:c7:a1:1f:24:
         3d:6f:ab:e5:89:39:3f:18:d9:26:d3:e5:29:cc:fa:25:b1:77:
         19:00:cf:6c:b8:9a:0c:4b:16:99:3c:01:b1:3f:89:c0:a1:ef:
         0a:52:94:e5:6b:ab:92:a1:87:20:52:65:74:2c:37:38:dc:4f:
         35:f5:55:60:73:6e:21:bb:33:ee:5c:31:da:8f:e3:21:07:e3:
         cb:a5:ef:03:aa:72:36:78:a4:74:d0:09:8b:ee:d5:ca:8a:2f:
         39:6f:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 17:25:41 2024 by rpki-client on console-fra.rpki-client.org