Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2025e098-3c8c-4b45-bfb0-c381bbb4450f.cer
File:                     2025e098-3c8c-4b45-bfb0-c381bbb4450f.cer (raw, json)
Hash identifier:          /CmXJsOyjMZJaRqB3lchVJFrXQ68cWsTgEfJVF7obi0=
Subject key identifier:   B3:ED:38:C7:4E:37:50:A6:A4:0A:DE:90:3E:83:D9:C8:15:BF:4F:13
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858402902DD1702BEC63A52479D40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2025e098-3c8c-4b45-bfb0-c381bbb4450f/2025e098-3c8c-4b45-bfb0-c381bbb4450f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2025e098-3c8c-4b45-bfb0-c381bbb4450f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 07 Dec 2022 22:25:18 +0000
Certificate not after:    Tue 11 Mar 2025 21:25:18 +0000
Subordinate resources:    IP: 134.172.0.0/16
                          IP: 146.202.0.0/16
                          IP: 149.65.0.0/16

Validation:               Failed, certificate revoked on Wed 18 Jan 2023 16:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:29:02:dd:17:02:be:c6:3a:52:47:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Dec  7 22:25:18 2022 GMT
            Not After : Mar 11 21:25:18 2025 GMT
        Subject: CN=2025e098-3c8c-4b45-bfb0-c381bbb4450f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:69:ab:c3:63:9d:9e:d1:12:b4:2e:43:75:
                    cd:f5:a9:fe:a3:5a:83:e1:58:98:70:40:71:80:46:
                    52:21:08:bb:6e:8e:c5:e2:db:20:14:f0:62:ec:6f:
                    91:03:30:a8:32:12:27:3f:2b:34:b0:c4:66:06:70:
                    d5:63:13:c3:fe:3e:53:52:d4:5d:c3:0b:2a:5c:d3:
                    4f:4f:c1:9e:9a:61:52:86:ab:d9:27:a6:d9:3c:ef:
                    7b:57:ea:89:95:b7:12:c9:42:0e:b2:e5:84:96:b4:
                    97:46:84:fa:45:5c:2c:34:1f:37:a4:17:63:ee:f1:
                    32:ea:62:75:62:80:6d:29:45:b8:2c:ac:8b:0e:9a:
                    83:67:49:cf:6e:5c:b0:ca:71:a7:d3:ac:5c:6e:ec:
                    37:35:60:b1:f7:8f:81:15:91:d8:99:a3:a7:db:35:
                    61:00:7a:73:e8:c1:89:00:bd:a2:6c:ab:37:ba:67:
                    b8:f1:60:75:5f:a0:50:00:31:d0:1e:35:aa:80:bb:
                    ca:ae:7c:96:06:b4:75:8b:0c:56:be:4e:5c:78:80:
                    f0:a2:64:98:64:f1:50:64:a3:b7:b9:11:49:24:8a:
                    ec:46:4b:22:9b:9f:42:de:fc:c9:cf:2e:d4:59:67:
                    85:23:69:22:45:55:d7:05:b8:3c:bc:4f:9d:b5:f6:
                    d1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:ED:38:C7:4E:37:50:A6:A4:0A:DE:90:3E:83:D9:C8:15:BF:4F:13
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2025e098-3c8c-4b45-bfb0-c381bbb4450f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2025e098-3c8c-4b45-bfb0-c381bbb4450f/2025e098-3c8c-4b45-bfb0-c381bbb4450f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.172.0.0/16
                  146.202.0.0/16
                  149.65.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:52:26:e8:d9:72:d4:7b:da:35:bd:a2:f9:40:4b:7b:1a:bf:
         12:a1:d3:84:21:d3:8c:42:96:b9:60:84:c6:dc:ad:21:46:71:
         8d:d5:8e:e7:a7:92:8b:b7:8e:a0:a6:88:56:d7:ce:9e:9d:99:
         ce:33:bf:4d:49:42:ec:1e:fa:5e:d9:1a:c5:50:f8:9c:d6:b1:
         82:24:06:ab:41:61:ed:3e:d1:82:4e:ef:2f:9a:82:15:a9:1d:
         27:a6:bd:7a:c1:5e:f4:19:3a:5b:10:4f:46:c9:5a:05:3a:e7:
         de:f3:c2:6f:c9:8c:97:42:b1:a6:1d:7f:07:80:34:1c:96:85:
         47:08:a3:b8:ca:86:92:41:ab:a3:10:4a:f6:e2:a7:b6:aa:fb:
         c6:29:76:9b:3b:0f:87:dc:82:8c:4c:ba:4b:90:0a:de:ee:d0:
         04:bf:31:e9:88:e0:82:9d:4e:cb:f7:21:8e:8c:af:54:ec:e0:
         80:e5:65:14:79:b5:4d:6d:54:cb:70:c1:63:ed:90:d7:04:15:
         6e:b3:2d:4b:9b:2b:af:9a:e1:5d:00:da:cc:a1:72:89:e1:8a:
         0b:e3:98:4a:78:7c:31:91:4f:41:f1:43:84:f8:a6:9e:a0:3b:
         50:c0:39:6e:0c:d1:eb:d4:73:2e:95:ac:45:6f:7c:d9:64:28:
         60:69:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:45 2024 by rpki-client on console-ams.rpki-client.org