Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/EEA617E7347563A86C63E921D8841FA17CEF04B0.cer
File:                     EEA617E7347563A86C63E921D8841FA17CEF04B0.cer (raw, json)
Hash identifier:          JcIebub5Se0sgxYHqvQOp8B8YKpdB/ZN6ZO3bnaACZ8=
Subject key identifier:   EE:A6:17:E7:34:75:63:A8:6C:63:E9:21:D8:84:1F:A1:7C:EF:04:B0
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       025116935A3F1EC4FD9CD8DAD65F3C50614C0AE1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/2/EEA617E7347563A86C63E921D8841FA17CEF04B0.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 07 Feb 2025 18:22:19 +0000
Certificate not after:    Fri 06 Feb 2026 18:27:19 +0000
Subordinate resources:    IP: 128.254.205.0/24
Validation:               Failed, certificate revoked on Fri 04 Apr 2025 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:51:16:93:5a:3f:1e:c4:fd:9c:d8:da:d6:5f:3c:50:61:4c:0a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Feb  7 18:22:19 2025 GMT
            Not After : Feb  6 18:27:19 2026 GMT
        Subject: CN=EEA617E7347563A86C63E921D8841FA17CEF04B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:a9:1b:e0:0d:b8:d5:93:49:7c:ab:8a:c5:
                    1e:ee:41:18:fb:60:2c:5e:6e:3d:81:6e:2a:e1:b5:
                    9b:a6:0f:7d:4f:0b:cd:b3:16:89:de:32:0d:b3:f8:
                    a1:ee:0e:15:a4:4e:53:d3:93:ec:29:9c:bb:ed:c4:
                    a1:ac:4d:80:8e:89:5c:64:c6:cb:65:76:7d:13:ee:
                    d0:23:62:45:ad:8f:28:d7:65:ed:1e:18:78:90:6b:
                    41:ca:21:4a:f7:ca:f8:6e:d2:f4:99:01:22:08:8e:
                    1c:06:65:03:b9:7f:c3:a7:d1:a3:0c:63:1b:79:29:
                    d9:72:0c:1f:94:97:a7:39:a7:05:d1:ba:16:bc:fe:
                    7e:c9:89:59:55:05:6f:64:72:eb:a3:d8:b4:c3:6a:
                    2e:93:e9:4d:e8:cd:63:5a:f6:d7:e6:32:a3:a4:09:
                    fb:15:7f:61:9d:4b:00:5a:67:ef:53:26:cb:e9:3b:
                    a3:bc:00:03:0d:04:71:6c:94:58:bb:e4:7a:14:c0:
                    9f:5d:52:c3:e9:ec:9d:e5:e4:a5:2f:d0:28:ae:a8:
                    07:86:a5:1e:2f:e0:62:7b:6b:01:81:b6:fd:f6:04:
                    b2:91:98:a8:64:42:0c:56:89:c5:14:db:ce:d3:da:
                    2b:a2:8f:0e:03:ae:55:f3:3c:30:14:fe:65:9a:ef:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:A6:17:E7:34:75:63:A8:6C:63:E9:21:D8:84:1F:A1:7C:EF:04:B0
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/2/EEA617E7347563A86C63E921D8841FA17CEF04B0.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:45:3b:a8:5a:47:de:8d:84:6d:6b:a5:0b:ff:a4:d0:e1:a5:
         ef:0c:70:aa:72:08:67:31:27:db:1f:4f:85:32:2f:d6:ad:b7:
         70:23:a9:4f:31:2a:fc:72:45:ff:23:93:97:3a:32:62:51:c2:
         6e:42:13:f9:02:8d:9f:33:6f:a4:e6:b1:c3:96:fb:60:ed:0e:
         76:bf:b6:a2:6e:fa:e9:56:68:3a:31:c9:db:2e:ac:bb:12:84:
         1c:a5:5e:e9:ea:b9:90:07:b5:68:54:2e:db:03:80:55:1d:fd:
         d2:a2:1d:b4:e7:06:43:25:59:b6:57:5e:12:5c:62:64:de:a9:
         6b:7f:ff:7d:50:18:bb:a8:24:2f:4d:79:31:6c:2d:1e:ef:32:
         56:a2:fe:54:cc:a8:37:3d:6f:76:88:9c:06:c3:d0:47:c9:c4:
         b2:6c:d5:79:90:14:31:6f:4a:4b:6c:8f:53:22:f6:bd:8e:c7:
         89:d5:22:81:7f:93:05:c0:22:ff:b9:cf:c2:3f:b9:b5:1b:e3:
         da:55:c1:77:3a:bd:b5:a7:03:7b:20:e6:24:a1:ff:f4:64:5f:
         cc:34:dc:fc:16:80:80:35:90:1c:49:d0:88:b3:9c:41:0c:2f:
         4f:37:b1:bf:a2:9b:8c:60:d4:07:88:22:03:22:fb:27:83:d2:
         26:91:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:27 2025 by rpki-client