Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75.cer
File:                     d6079eed-a495-405f-87a5-c0ee09e31c75.cer (raw, json)
Hash identifier:          GiGjAs0WCBpgjvU/0tDe/vOf4rm1bK+hFg5HwbxDCgA=
Subject key identifier:   DC:6E:92:F8:0A:29:39:C2:7E:9A:03:AB:B6:BD:31:BD:D3:CB:72:22
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285844A4B569472DD839A957372180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/d6079eed-a495-405f-87a5-c0ee09e31c75.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Jan 2024 00:57:14 +0000
Certificate not after:    Fri 05 Dec 2025 01:45:26 +0000
Subordinate resources:    AS: 33733
                          IP: 23.147.168.0/24
                          IP: 2602:faa5::/36

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a4:b5:69:47:2d:d8:39:a9:57:37:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jan 23 00:57:14 2024 GMT
            Not After : Dec  5 01:45:26 2025 GMT
        Subject: CN=d6079eed-a495-405f-87a5-c0ee09e31c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:77:a8:ea:36:6f:39:99:e4:b6:83:fd:97:
                    d8:d4:92:d4:5f:8f:7a:ad:f2:79:11:8c:e1:b2:01:
                    b5:f8:f7:60:c1:10:2e:7d:fa:ce:54:cd:e0:60:bf:
                    4a:ee:3d:2f:7a:e5:b2:cd:af:73:18:8b:c4:18:54:
                    88:03:fd:1c:be:64:d9:8a:ad:bf:12:0f:63:40:97:
                    b4:03:2f:eb:fb:15:c2:a8:63:f1:6b:a7:6b:0a:47:
                    0b:b0:06:e7:d7:87:a7:1f:0c:b8:d2:e4:c1:b3:59:
                    13:31:53:19:e0:d8:98:31:17:8d:e0:f6:75:9a:36:
                    9c:24:d2:f0:42:82:5e:a7:c3:81:0a:67:11:6d:1e:
                    53:a1:47:de:04:02:70:d8:66:30:9e:4f:0a:4a:15:
                    a6:f3:0d:17:f9:84:9e:9b:d3:e2:67:77:f3:dc:3e:
                    49:c1:34:a1:68:a6:1b:3f:64:65:ff:d5:ae:89:92:
                    02:80:e5:cb:8e:61:5b:39:a3:f3:50:5a:6b:d4:cb:
                    53:1b:1d:c7:bb:ed:1a:24:13:ae:8d:f4:38:35:52:
                    d4:af:53:6e:ae:d3:d8:41:bb:6a:28:e3:17:03:c3:
                    1a:a9:c1:a3:37:bb:fb:27:b6:c4:e8:c5:7e:22:e4:
                    d2:7f:91:aa:ef:1e:b6:63:8d:1b:05:77:a2:7c:68:
                    6b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6E:92:F8:0A:29:39:C2:7E:9A:03:AB:B6:BD:31:BD:D3:CB:72:22
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/d6079eed-a495-405f-87a5-c0ee09e31c75.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.168.0/24
                IPv6:
                  2602:faa5::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33733

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fb:0e:e7:c4:62:c4:48:b1:45:c8:11:72:98:2d:a4:38:01:
         1e:2a:c6:ef:b7:83:67:60:f8:c1:1d:49:04:f9:57:92:ba:e4:
         ab:78:3f:fe:2f:bc:4e:e7:2c:04:ad:a0:57:9e:92:d6:ff:cb:
         65:c5:2f:be:44:97:52:aa:92:0e:1d:73:a0:fc:bc:d7:48:4b:
         c9:b9:ef:13:e7:e8:dd:8a:9c:0b:35:36:27:52:bf:62:9f:3b:
         37:d8:38:0c:aa:6f:f8:06:fd:c2:92:d6:22:24:48:bc:50:89:
         29:76:46:90:34:dc:bd:84:cd:98:91:8e:38:ff:57:86:dd:29:
         ab:8f:a5:42:ea:6e:7e:c9:57:f0:41:04:60:21:e3:a6:d8:39:
         6e:34:29:e5:20:39:3c:1f:62:12:32:b9:db:47:01:29:37:20:
         56:0d:51:7e:c0:7b:29:e9:4f:7b:3c:04:55:46:18:b4:a1:68:
         07:f7:51:2d:43:00:99:5b:dc:bc:13:a2:77:02:b5:5c:8a:d6:
         cb:91:70:fb:f8:ab:85:d9:56:af:d5:f4:02:d1:9b:34:66:9e:
         65:13:e0:56:a1:1d:2a:dc:44:3e:be:a9:68:d9:af:ea:ed:52:
         8e:48:0a:18:15:18:d2:a3:d7:a7:49:aa:fb:b7:ab:6b:bf:8b:
         77:4d:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 17:49:57 2024 by rpki-client on console-ams.rpki-client.org