Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121.cer
File:                     1ffb2b5c-791f-4fbb-883d-0cc94ab7a121.cer (raw, json)
Hash identifier:          /bFhq9I3UsAzANgaKtSyeKTHLOPJnSc6CshpA7kRA6g=
Subject key identifier:   E1:8B:75:E4:46:D4:AA:12:AD:43:47:F6:B1:5B:94:E3:44:C6:75:8C
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328583DAEFB4397A2A1A75A75446080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 24 Apr 2022 19:47:30 +0000
Certificate not after:    Sat 24 Apr 2032 19:47:30 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked on Mon 25 Apr 2022 14:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ae:fb:43:97:a2:a1:a7:5a:75:44:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Apr 24 19:47:30 2022 GMT
            Not After : Apr 24 19:47:30 2032 GMT
        Subject: CN=1ffb2b5c-791f-4fbb-883d-0cc94ab7a121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:d2:4f:de:b2:0b:72:58:dd:19:e7:0f:e5:
                    b3:b9:9b:25:1a:88:5c:96:a8:83:7d:f4:0b:7c:4b:
                    08:48:d8:9a:0f:8b:19:fd:5b:a2:04:59:b1:08:c5:
                    68:7b:37:8c:05:f2:af:6b:2f:52:66:8e:02:78:f4:
                    4d:5e:c3:51:d0:8f:3f:b6:d4:07:a2:11:e3:89:fe:
                    2a:c0:63:5c:69:5f:4c:90:fc:94:73:e9:f3:7b:8f:
                    b7:3c:f3:9c:a3:23:e3:53:e8:25:f3:26:4b:4e:d3:
                    c2:bc:ec:aa:c0:04:3a:f5:c4:b1:21:92:1c:1a:e1:
                    40:e4:bc:84:bc:cb:a4:c4:6d:9a:2f:e6:cb:43:86:
                    eb:05:12:5a:5e:c9:12:b4:97:c8:d9:75:1c:1c:7d:
                    36:1e:a1:e6:23:57:d0:17:21:04:1b:63:ae:0f:f3:
                    ee:6d:40:7e:c8:58:c5:06:53:f0:4c:47:26:3d:fa:
                    64:6d:de:a5:87:21:67:64:e3:f2:2d:71:de:a6:c1:
                    80:7c:b6:3b:ab:0d:04:00:b8:e6:da:b3:aa:8d:2d:
                    27:93:f4:4b:71:70:47:14:e8:69:03:4c:1e:38:81:
                    62:29:96:59:44:a7:b3:9c:33:7a:a5:8a:65:d4:77:
                    c9:ff:9a:fa:64:6f:2e:ff:33:d1:a1:81:27:9e:6c:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8B:75:E4:46:D4:AA:12:AD:43:47:F6:B1:5B:94:E3:44:C6:75:8C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9f:68:4c:ec:c0:d8:3c:2f:e7:b2:14:5c:28:95:67:2b:43:
         2d:b3:53:2d:74:a7:40:e5:7f:85:e9:8d:4d:fc:2e:ad:66:3d:
         24:7f:77:06:41:09:39:c9:3e:58:8a:c7:a1:f4:95:5d:0d:f5:
         12:da:6b:78:d7:dd:ce:21:7f:5f:75:cf:d7:02:90:7a:0e:66:
         14:00:1c:d7:39:d4:e6:2d:89:02:da:d3:a1:04:84:ad:0e:21:
         8a:b5:e5:95:ff:a2:5a:9a:6d:0c:87:2c:e9:db:09:6f:fb:2d:
         ea:25:7b:7c:b1:81:fe:eb:ad:5d:9e:85:f7:de:82:cd:8e:ba:
         36:c0:1e:2c:e0:4b:6c:42:f5:bd:fc:8b:b1:11:85:ad:48:90:
         54:1b:aa:1b:cc:2b:eb:d6:4d:ac:9a:19:30:5e:a8:ed:a6:09:
         0e:cd:88:41:cd:a0:63:e8:d5:c6:ac:ce:58:13:16:7a:ed:95:
         b4:05:89:29:be:9d:34:43:c5:ee:a2:c0:52:ec:a2:4b:3b:cc:
         95:5b:c5:16:8c:f2:de:fe:4a:e7:85:6e:62:77:ee:06:9d:cc:
         c0:af:3a:12:4f:23:39:55:59:01:9b:3d:c4:67:67:97:ed:a5:
         d3:ea:ad:3e:c4:3f:e3:bd:01:9f:3f:6f:5e:8b:8a:0f:5e:42:
         15:03:08:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org