Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d765c4c6-963d-413e-b79d-bbd13dd7908d.cer
File:                     d765c4c6-963d-413e-b79d-bbd13dd7908d.cer (raw, json)
Hash identifier:          GAGH1Gy9QTYU8E+CbT57pJ3pogy/zcisEPzRT8ncc38=
Subject key identifier:   AD:DF:B1:F0:67:1F:E1:9C:5C:B0:B2:6E:5D:79:54:63:41:AB:C1:2B
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584444E4DB035CF1EF037F5127C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d765c4c6-963d-413e-b79d-bbd13dd7908d/d765c4c6-963d-413e-b79d-bbd13dd7908d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d765c4c6-963d-413e-b79d-bbd13dd7908d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 Dec 2023 17:15:13 +0000
Certificate not after:    Sun 22 Feb 2026 01:45:16 +0000
Subordinate resources:    IP: 23.140.40.0/24
                          IP: 141.195.112.0/22
                          IP: 2602:fb26::/36

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 14:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:44:e4:db:03:5c:f1:ef:03:7f:51:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec 19 17:15:13 2023 GMT
            Not After : Feb 22 01:45:16 2026 GMT
        Subject: CN=d765c4c6-963d-413e-b79d-bbd13dd7908d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:e9:30:4a:1d:57:7a:18:57:3a:47:69:9e:
                    5e:30:d0:85:f7:b3:99:6b:80:ed:ce:3e:c7:b2:b3:
                    91:63:ae:b0:5a:15:c7:95:09:49:1c:34:7d:2d:f4:
                    8a:41:7e:b0:87:71:20:d6:7e:b5:ae:6d:e7:34:b4:
                    f2:59:5b:ba:73:ef:a4:4d:55:d4:64:9d:16:19:d6:
                    6d:9b:2e:a1:aa:63:18:76:ee:b6:c4:d0:85:3c:68:
                    54:d1:a4:fa:5e:5f:55:c8:6d:9b:ca:12:d0:3e:5b:
                    b7:70:14:3a:65:56:50:2d:99:36:93:fc:32:2a:db:
                    1c:7e:e7:5a:62:33:db:70:75:f1:4c:3f:ce:8d:3d:
                    0f:4f:22:44:75:51:7c:ee:f7:e3:59:ee:73:65:2f:
                    1f:24:c1:7a:4b:61:35:9f:b9:89:0f:e4:1f:8f:79:
                    52:d8:53:46:14:41:28:77:14:f2:5e:d9:07:ac:13:
                    21:2c:23:a7:37:ad:d5:c2:b8:e2:7f:f0:35:38:a9:
                    39:3b:4a:45:8f:52:08:52:91:bc:8b:4a:11:3c:a4:
                    e1:3c:29:3a:1d:c4:1b:d3:34:88:7c:8b:ac:c7:7b:
                    e9:55:f7:d0:2c:ed:c5:16:62:02:c9:ff:6b:c0:d7:
                    6d:15:7a:ea:4c:71:73:b8:d1:3c:a8:c5:28:84:87:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DF:B1:F0:67:1F:E1:9C:5C:B0:B2:6E:5D:79:54:63:41:AB:C1:2B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d765c4c6-963d-413e-b79d-bbd13dd7908d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d765c4c6-963d-413e-b79d-bbd13dd7908d/d765c4c6-963d-413e-b79d-bbd13dd7908d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.40.0/24
                  141.195.112.0/22
                IPv6:
                  2602:fb26::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:ec:98:5f:14:1e:d4:40:98:d2:d1:ef:4e:58:14:6c:62:
         c1:f0:7d:68:8b:6b:57:fe:18:5e:4c:8c:f9:c0:88:c9:cb:ea:
         ed:be:9b:39:fc:80:5e:7c:ce:0d:9d:6e:b8:71:28:53:8d:22:
         b3:a2:4f:96:03:74:f9:7d:6c:65:b6:12:c9:81:5b:04:6b:ba:
         6f:b1:02:5b:df:de:d5:2f:69:12:ea:21:c4:de:49:ef:b0:6a:
         5e:a3:93:12:1f:2f:49:79:e0:6e:41:07:e2:b7:32:c1:59:60:
         48:69:fa:3b:17:79:cc:dd:63:22:71:af:a8:c9:f4:3b:d2:5e:
         e6:05:ae:a5:cc:14:f6:28:00:c1:8e:17:dd:5e:39:fa:98:4c:
         3e:06:37:e7:38:c2:1e:2a:52:1c:f9:5a:0f:29:88:49:d5:86:
         98:43:99:44:e2:49:ac:3a:08:37:ab:d9:ff:fe:ce:47:f6:1a:
         9d:94:2e:18:62:f5:04:ab:2f:ec:00:dd:bf:ea:48:d4:55:19:
         f5:f6:9b:84:51:85:9d:f7:e5:12:f3:16:47:a9:77:e5:d7:e0:
         8b:3b:1c:9e:eb:1a:b1:ae:19:fc:bf:aa:7d:05:0c:f2:b0:c8:
         86:c9:cb:91:6c:c5:f5:e7:2a:52:e8:2a:a4:34:eb:c3:48:92:
         3f:c2:f4:bd
-----BEGIN CERTIFICATE-----
MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWERE5NsDXPHvA39RJ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTIzMTIxOTE3MTUxM1oXDTI2MDIyMjAxNDUxNlowLzEtMCsGA1UEAxMk
ZDc2NWM0YzYtOTYzZC00MTNlLWI3OWQtYmJkMTNkZDc5MDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaTpMEodV3oYVzpHaZ5eMNCF97OZa4Dtzj7H
srORY66wWhXHlQlJHDR9LfSKQX6wh3Eg1n61rm3nNLTyWVu6c++kTVXUZJ0WGdZt
my6hqmMYdu62xNCFPGhU0aT6Xl9VyG2byhLQPlu3cBQ6ZVZQLZk2k/wyKtscfuda
YjPbcHXxTD/OjT0PTyJEdVF87vfjWe5zZS8fJMF6S2E1n7mJD+Qfj3lS2FNGFEEo
dxTyXtkHrBMhLCOnN63Vwrjif/A1OKk5O0pFj1IIUpG8i0oRPKThPCk6HcQb0zSI
fIusx3vpVffQLO3FFmICyf9rwNdtFXrqTHFzuNE8qMUohIcZOwIDAQABo4IEFTCC
BBEwHQYDVR0OBBYEFK3fsfBnH+GcXLCybl15VGNBq8ErMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k
NzY1YzRjNi05NjNkLTQxM2UtYjc5ZC1iYmQxM2RkNzkwOGQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q3NjVjNGM2LTk2M2QtNDEzZS1i
NzlkLWJiZDEzZGQ3OTA4ZC9kNzY1YzRjNi05NjNkLTQxM2UtYjc5ZC1iYmQxM2Rk
NzkwOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXjCgDBAKNw3AwDgQCAAIwCAMGBCYC+yYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvk7JhfFB7UQJjS0e9OWBRsYsHwfWiLa1f+GF5MjPnAiMnL6u2+mzn8
gF58zg2dbrhxKFONIrOiT5YDdPl9bGW2EsmBWwRrum+xAlvf3tUvaRLqIcTeSe+w
al6jkxIfL0l54G5BB+K3MsFZYEhp+jsXeczdYyJxr6jJ9DvSXuYFrqXMFPYoAMGO
F91eOfqYTD4GN+c4wh4qUhz5Wg8piEnVhphDmUTiSaw6CDer2f/+zkf2Gp2ULhhi
9QSrL+wA3b/qSNRVGfX2m4RRhZ335RLzFkepd+XX4Is7HJ7rGrGuGfy/qn0FDPKw
yIbJy5FsxfXnKlLoKqQ068NIkj/C9L0=
-----END CERTIFICATE-----
Generated at Wed Feb 7 17:43:41 2024 by rpki-client on console-fra.rpki-client.org