Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be.cer
File:                     5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be.cer (raw, json)
Hash identifier:          ePcT/T71siyciFznFn9B+bfwKMEdxSEnF5OOnWbEmoc=
Subject key identifier:   F4:3E:07:03:28:FC:CF:A5:C9:99:CE:F9:7F:3D:0B:3C:2D:62:CA:19
Authority key identifier: DD:FE:47:6B:4D:D5:54:04:18:04:32:CA:56:98:1D:09:D3:A7:7B:C4
Certificate issuer:       /CN=04c12c6c-ab0e-4d03-b9c8-6c3592368c77
Certificate serial:       010D0C9F4328583B8656DE3BBE9CAB306F400680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
Manifest:                 rsync://sakuya.nat.moe/repo/NATOCA/0/F43E070328FCCFA5C999CEF97F3D0B3C2D62CA19.mft
caRepository:             rsync://sakuya.nat.moe/repo/NATOCA/0/
Notify URL:               https://sakuya.nat.moe/rrdp/notification.xml
Certificate not before:   Fri 08 Oct 2021 20:50:03 +0000
Certificate not after:    Wed 08 Oct 2031 20:50:03 +0000
Subordinate resources:    AS: 46997
                          AS: 396303
                          IP: 23.247.136.0/22
                          IP: 134.195.100.0/23
                          IP: 141.193.21.0/24
                          IP: 2602:feda::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:86:56:de:3b:be:9c:ab:30:6f:40:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04c12c6c-ab0e-4d03-b9c8-6c3592368c77
        Validity
            Not Before: Oct  8 20:50:03 2021 GMT
            Not After : Oct  8 20:50:03 2031 GMT
        Subject: CN=5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:7c:9f:6f:c3:de:d1:cc:66:8d:9c:e6:3a:
                    71:ba:55:03:1f:ef:05:a1:11:04:fa:a5:4d:6d:e7:
                    75:c8:61:b2:da:91:d9:67:04:39:41:54:7e:e7:e5:
                    7b:91:0b:51:df:d3:a4:c4:a3:4d:b8:d7:6e:e1:ac:
                    60:ca:c0:ed:a0:86:54:04:8c:fd:ce:b9:ea:65:78:
                    a4:e2:02:0b:3a:8f:cb:f8:fc:6d:3b:dc:4a:09:c0:
                    15:f3:04:81:cb:b1:75:30:1c:5d:1f:c6:c7:e7:a8:
                    8c:90:fd:e7:05:9e:0c:e4:08:b4:a6:da:c7:0f:4e:
                    0a:6c:f0:01:9f:72:1f:b5:3e:2d:4b:66:69:95:7a:
                    57:18:12:bf:91:ec:17:d9:eb:9e:48:cb:1d:04:61:
                    99:dd:26:09:5c:b5:26:f3:61:0a:96:43:a2:08:e1:
                    86:14:0e:71:32:40:9c:c4:75:eb:b6:ea:99:ea:f0:
                    2d:9f:58:99:a9:73:27:b5:c7:75:ef:6d:1d:78:0b:
                    1c:d5:d0:3b:58:9c:f1:26:81:7c:7e:ae:0c:c5:c3:
                    40:37:01:27:97:45:6a:0a:13:f0:1d:9f:a8:4f:ac:
                    99:b9:3d:fb:1f:1e:7a:81:a1:29:c0:57:6d:84:dc:
                    a7:6c:3f:4a:65:df:22:10:96:55:f6:89:80:47:6b:
                    bb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3E:07:03:28:FC:CF:A5:C9:99:CE:F9:7F:3D:0B:3C:2D:62:CA:19
            Subject Information Access:
                CA Repository - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/
                RPKI Manifest - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/F43E070328FCCFA5C999CEF97F3D0B3C2D62CA19.mft
                RPKI Notify - URI:https://sakuya.nat.moe/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl

            X509v3 Authority Key Identifier:
                keyid:DD:FE:47:6B:4D:D5:54:04:18:04:32:CA:56:98:1D:09:D3:A7:7B:C4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.136.0/22
                  134.195.100.0/23
                  141.193.21.0/24
                IPv6:
                  2602:feda::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46997
                  396303

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:34:9b:3c:f6:35:07:49:a4:ba:ec:7d:37:0e:e9:da:52:
         1b:ac:10:3a:68:6a:7a:b6:c1:0f:73:d1:08:2c:47:b5:d1:32:
         d5:b2:b3:1c:e7:45:48:ee:77:b2:bb:cf:62:d5:02:aa:41:fa:
         d8:db:2c:13:c0:34:21:f1:7d:7c:16:45:c1:23:f6:db:3b:1d:
         27:e3:fb:cb:c4:af:15:15:79:d0:6b:46:bb:5e:3a:4a:2c:a7:
         32:80:81:77:4f:d8:7d:fe:d1:d0:13:17:47:8b:6a:78:15:40:
         5a:11:3f:cb:54:8f:b2:5c:75:45:18:1d:9f:a0:c5:75:7c:9e:
         3e:15:e8:5b:e9:3f:bc:37:53:5d:3c:8d:ef:ac:fd:1a:06:ec:
         b3:40:b2:b4:26:ac:3a:b4:02:40:e3:ce:b6:27:2b:ef:42:7f:
         08:44:87:30:b0:fa:a7:14:91:78:71:b7:fc:7f:b5:7f:72:51:
         5f:20:c3:65:04:4a:2f:e4:a0:5a:1c:29:b6:b3:06:e5:cc:8a:
         30:a2:32:78:06:8c:aa:b1:0a:25:28:c4:0a:e5:2a:58:64:1f:
         6a:2d:5d:28:dc:ea:e8:bb:5b:c0:78:4a:2f:8b:f5:00:b3:22:
         9b:c2:f2:07:7d:1f:4b:9c:dc:ef:48:7b:b6:39:1f:21:58:f0:
         f2:c0:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:48 2023 by rpki-client on console-ams.rpki-client.org