Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/ZzyxqKPX0Cf_5lGmS-91Ddo-dqo.cer
File:                     ZzyxqKPX0Cf_5lGmS-91Ddo-dqo.cer (raw, json)
Hash identifier:          c/d5Xk1CaLdX9DcZD30WoaTumiaYNM8ffjxGC8DNm8k=
Subject key identifier:   67:3C:B1:A8:A3:D7:D0:27:FF:E6:51:A6:4B:EF:75:0D:DA:3E:76:AA
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       13BD
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367F599/18B730289F1A11EABCE2D14BF8AEA228/ZzyxqKPX0Cf_5lGmS-91Ddo-dqo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367F599/18B730289F1A11EABCE2D14BF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:55:36 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 169.239.252.0/22

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 00:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5053 (0x13bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:55:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367F599AR/serialNumber=673CB1A8A3D7D027FFE651A64BEF750DDA3E76AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ca:d6:25:12:8c:a5:1f:29:ce:8c:c8:ba:b2:
                    fd:38:6c:2a:3d:f5:b6:59:24:e4:05:4e:dd:e9:6a:
                    1a:2f:32:4e:35:88:fe:11:aa:3d:2e:8a:19:7f:82:
                    86:ac:b2:25:97:74:7e:9f:06:8f:a3:a8:02:0f:7a:
                    89:26:63:c3:ab:02:4b:01:12:37:c3:08:5e:29:ff:
                    b2:f3:34:a0:08:4b:f9:3a:b1:be:39:e7:1e:c3:13:
                    94:b9:a8:22:0b:15:e7:2c:88:bc:cc:3d:8b:91:36:
                    10:82:ed:4e:42:85:63:4b:39:4e:4f:c2:73:2e:99:
                    62:a6:62:5d:68:f4:b9:95:8a:5d:6e:a3:d7:4b:81:
                    1a:9f:5e:52:38:b9:6d:3d:fe:b5:c8:7e:f1:25:ca:
                    28:d8:7c:c7:5c:72:84:a4:47:f7:56:f2:8b:b5:73:
                    3d:96:90:50:a9:21:26:dc:c4:7d:d7:2e:dd:77:7b:
                    2d:9b:86:1e:96:43:39:39:39:a6:ee:dd:29:fe:45:
                    7a:9c:32:18:d5:63:03:0e:fd:ab:fa:fe:d7:8d:db:
                    16:21:b3:b1:03:6f:9f:9c:81:6a:ef:db:88:07:11:
                    83:b3:c6:f6:7b:d6:e4:75:8a:97:72:82:8a:dd:a7:
                    8b:41:62:97:8d:0c:af:45:2a:26:e3:80:f5:75:c5:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3C:B1:A8:A3:D7:D0:27:FF:E6:51:A6:4B:EF:75:0D:DA:3E:76:AA
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F599/18B730289F1A11EABCE2D14BF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F599/18B730289F1A11EABCE2D14BF8AEA228/ZzyxqKPX0Cf_5lGmS-91Ddo-dqo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:8b:ac:fe:98:e1:70:38:9f:56:78:c1:27:e7:77:cd:f8:b9:
         d7:10:d1:bc:23:ae:05:51:7f:23:45:25:29:bd:27:d5:f5:45:
         7d:95:3d:8c:31:25:d1:42:17:3f:80:34:42:12:b1:42:d7:29:
         22:1e:52:58:1e:2c:7d:e3:c8:f8:4d:44:70:16:af:d0:82:1f:
         e7:8a:79:b8:87:16:c2:f5:78:cb:9f:c7:b1:57:15:c9:c0:a7:
         17:f6:3b:3e:76:b4:c8:40:a5:8f:db:b1:53:71:5b:81:8c:b3:
         8e:94:0e:3b:20:be:83:bd:6c:8d:37:02:7f:5c:76:7c:80:f3:
         84:a3:e5:4f:07:7d:42:aa:6a:cc:6a:68:23:d4:cc:cf:f2:ea:
         df:af:29:2f:e2:fa:91:d5:68:1f:ec:7f:40:e5:0b:4b:3a:f2:
         c6:b4:86:b0:ca:4d:85:97:f5:ac:6f:94:40:59:aa:29:87:57:
         c8:d8:99:70:fd:43:ec:7b:64:83:44:cb:16:01:36:ce:25:52:
         15:fa:4d:b9:c5:32:3b:a5:59:79:53:b0:9d:e5:cd:b2:58:54:
         34:e4:80:22:c8:54:9b:d3:5a:c5:9b:36:54:8d:0c:e6:d1:ef:
         48:26:9d:3d:35:07:aa:e9:4b:51:39:4f:0d:0a:c6:55:7c:a8:
         a5:c3:38:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 02:33:11 2024 by rpki-client on console-fra.rpki-client.org