Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4dc9eda-4013-4376-83db-153d6e4a4733.cer
File:                     c4dc9eda-4013-4376-83db-153d6e4a4733.cer (raw, json)
Hash identifier:          9oIuXn2dhqW8mPg1dunjv6sNNjcXNrz5inNqvMPIVGk=
Subject key identifier:   24:99:BF:CD:8D:87:3E:DE:A4:66:8D:6F:5E:6E:E0:94:BE:12:C0:3F
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285840FC73554EF6E346DED7B52D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4dc9eda-4013-4376-83db-153d6e4a4733/c4dc9eda-4013-4376-83db-153d6e4a4733.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4dc9eda-4013-4376-83db-153d6e4a4733/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Feb 2023 16:07:28 +0000
Certificate not after:    Mon 26 May 2025 15:07:28 +0000
Subordinate resources:    AS: 25830
                          IP: 68.234.96.0/19
                          IP: 199.195.52.0/22
                          IP: 2604:a40::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:fc:73:55:4e:f6:e3:46:de:d7:b5:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb 21 16:07:28 2023 GMT
            Not After : May 26 15:07:28 2025 GMT
        Subject: CN=c4dc9eda-4013-4376-83db-153d6e4a4733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e8:cb:3d:e3:e4:81:6e:ff:ae:f7:04:de:d7:
                    82:0b:7c:f4:a0:4a:12:ad:7a:18:a1:8d:f4:53:e1:
                    d2:52:f0:29:0e:07:6c:85:d6:68:b1:e4:ac:50:96:
                    f5:c6:9e:45:48:85:44:c7:3c:ec:35:42:fb:7f:eb:
                    96:49:e3:19:64:55:dd:25:0d:76:1b:d8:62:a9:45:
                    a9:a3:01:a0:da:ba:51:06:8d:e1:79:19:1a:7f:14:
                    64:8c:ed:80:26:21:4c:ec:97:04:b9:ac:b1:b2:75:
                    4f:97:79:df:12:fa:d4:76:14:3f:a7:a5:97:c5:5f:
                    f1:1c:46:96:55:3b:57:41:20:5d:d3:fd:1e:88:b7:
                    f2:f0:2d:d0:9b:91:04:40:59:49:a1:69:7a:c4:f9:
                    dc:24:b2:0a:91:24:ad:2b:ef:47:35:88:19:6f:d7:
                    cd:ab:8b:f8:64:77:32:cb:8c:69:56:cd:10:fd:d2:
                    76:87:18:43:54:03:37:02:46:4d:2d:7e:f3:f0:1e:
                    db:e2:9e:7b:a0:a4:31:7f:6f:59:b0:0d:bd:a0:d9:
                    42:58:31:28:bb:57:b3:de:4d:2a:57:f9:97:75:ca:
                    aa:16:86:d2:9a:2d:c7:0a:41:55:70:58:82:08:17:
                    3f:f1:40:d9:03:53:d3:31:4a:74:7f:5c:2d:aa:c5:
                    4d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:99:BF:CD:8D:87:3E:DE:A4:66:8D:6F:5E:6E:E0:94:BE:12:C0:3F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4dc9eda-4013-4376-83db-153d6e4a4733/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4dc9eda-4013-4376-83db-153d6e4a4733/c4dc9eda-4013-4376-83db-153d6e4a4733.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.96.0/19
                  199.195.52.0/22
                IPv6:
                  2604:a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25830

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d7:30:39:db:75:c3:c6:8b:ca:61:a2:d4:b0:bf:a8:e4:31:
         46:c8:75:7f:de:8f:48:80:ec:30:68:1c:6e:b0:69:b2:e1:4b:
         44:d3:91:70:0e:22:98:e3:0a:3b:3b:ed:34:31:61:cd:9b:fa:
         00:4d:97:09:f4:a2:a5:65:92:6b:e0:f1:98:6a:f6:58:af:4c:
         01:1c:57:3a:fc:0f:da:f4:29:c8:25:aa:78:92:4c:01:35:e2:
         51:b7:cc:ff:14:c4:c9:0a:b8:40:36:dc:6b:de:85:2a:2d:da:
         3c:68:70:4f:5f:25:a3:cd:43:0c:4e:2a:5e:d6:f7:05:33:75:
         dd:4d:31:5e:dc:b6:40:7f:17:43:df:a5:af:c8:21:11:78:3e:
         f7:53:71:f4:12:33:fd:a6:38:74:e6:8b:d6:47:9f:bb:fe:a1:
         a3:37:da:7c:ed:dd:4f:56:16:0e:f1:56:36:74:42:42:1e:05:
         a0:69:ca:71:65:aa:27:61:9d:bd:ba:34:b8:05:bc:03:f8:54:
         1f:b9:14:07:d3:6b:1d:d4:49:62:ed:34:57:24:54:27:f8:09:
         c1:87:ed:58:ad:79:18:b6:c2:36:3c:a3:c1:57:0d:96:93:13:
         48:89:c8:35:6a:c1:08:55:2a:3e:ad:d6:88:a2:2b:e0:2b:32:
         58:2d:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:51 2023 by rpki-client on console-fra.rpki-client.org