Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a.cer
File:                     6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a.cer (raw, json)
Hash identifier:          nSD7e78tjvk0Pt2rJN1ivlvIpAs9GdfVZELrorZtnjs=
Subject key identifier:   5D:2F:D9:9D:BA:B0:94:3F:2C:82:D1:0B:21:D9:94:E8:70:90:AF:12
Authority key identifier: EC:69:D0:59:BE:FA:2E:FC:09:C7:8C:FF:6B:28:F3:19:44:A1:70:60
Certificate issuer:       /CN=3098fc14-29c9-4916-b03a-ae4a2af101cd
Certificate serial:       010D0C9F432858404F68D070AC2F47CCC4DEBF10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/5D2FD99DBAB0943F2C82D10B21D994E87090AF12.mft
caRepository:             rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Wed 21 Dec 2022 16:31:26 +0000
Certificate not after:    Tue 25 Mar 2025 15:31:26 +0000
Subordinate resources:    IP: 23.142.24.0/22

Validation:               Failed, certificate revoked on Fri 23 Dec 2022 00:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4f:68:d0:70:ac:2f:47:cc:c4:de:bf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3098fc14-29c9-4916-b03a-ae4a2af101cd
        Validity
            Not Before: Dec 21 16:31:26 2022 GMT
            Not After : Mar 25 15:31:26 2025 GMT
        Subject: CN=6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:bf:da:42:ee:7b:18:06:07:2f:40:19:cf:
                    79:e6:55:47:ea:0d:98:61:15:7d:34:51:c9:2e:e9:
                    2c:96:c5:62:dd:9a:7d:b0:7b:b4:00:d0:fd:80:39:
                    7e:14:c5:73:64:34:d5:8a:49:af:d2:ba:2f:48:5b:
                    83:32:9e:f2:4f:48:68:e3:d8:ad:c9:55:6c:98:ab:
                    a8:5f:33:65:f6:fa:de:f2:bb:a1:63:59:77:3e:20:
                    16:34:bd:3e:8b:ca:28:90:b3:7e:84:e8:38:e2:70:
                    a7:98:49:63:36:65:d4:fb:97:3c:3d:0a:74:23:57:
                    4d:38:ef:d3:6b:d4:bf:ab:d2:cf:e4:35:1a:03:e5:
                    a2:7f:3d:08:07:6e:e3:dd:e1:9d:37:5c:a1:06:90:
                    21:1d:3e:03:fb:5d:b3:5c:6f:1c:80:76:24:c1:b9:
                    cb:24:13:61:c3:a1:6a:4c:3a:a9:22:56:5e:9e:f0:
                    d6:54:04:2e:1b:b9:b0:e4:3c:43:40:df:f9:e3:07:
                    45:b8:a7:34:0d:43:d9:d9:3b:00:6b:61:a1:b3:28:
                    df:b7:be:f8:2a:5e:cd:c6:86:9c:1c:04:cb:58:b6:
                    68:7f:99:d6:ef:80:2c:5a:82:39:6d:e9:9b:f6:3e:
                    5b:9e:14:cc:33:c3:ca:9c:b9:11:87:c2:e5:65:94:
                    d2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2F:D9:9D:BA:B0:94:3F:2C:82:D1:0B:21:D9:94:E8:70:90:AF:12
            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/5D2FD99DBAB0943F2C82D10B21D994E87090AF12.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:69:D0:59:BE:FA:2E:FC:09:C7:8C:FF:6B:28:F3:19:44:A1:70:60

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:cf:71:4e:0c:b1:a2:0a:b4:68:3e:b7:3b:d3:47:7e:6e:37:
         a9:38:7a:cc:f7:5a:a7:10:55:b0:76:42:50:6d:b2:93:d6:d1:
         d6:39:66:1f:c3:0e:26:cb:07:51:cc:31:3e:9e:42:3d:c4:fd:
         50:f1:91:57:8c:ed:61:9e:8a:c0:9a:d3:bf:e3:51:99:7d:a5:
         49:14:b7:f4:c5:32:d9:82:20:ba:c9:eb:b0:c7:b9:9a:d0:9e:
         87:ee:ed:00:02:94:7f:d5:91:46:73:af:be:d8:2d:20:7e:eb:
         0d:4d:a6:0a:13:a2:47:25:fd:fc:35:37:86:9f:ef:a6:39:46:
         39:19:3a:63:12:c0:f0:fd:56:eb:69:4d:a8:95:d4:6e:e6:70:
         ed:7c:81:40:be:e0:39:51:3e:e2:6c:e7:3b:c1:16:04:bb:b3:
         46:02:05:98:74:98:5c:77:d4:44:9e:d4:2b:84:94:e3:cf:0f:
         af:6f:1e:c7:0b:1a:e3:9f:9b:78:99:83:01:6c:ac:08:98:61:
         9c:ed:c2:b4:9c:66:7c:c8:01:84:3f:8d:41:96:e7:d4:4a:82:
         46:be:8b:20:8b:ef:ca:58:70:90:1a:1e:68:00:92:c2:9e:0d:
         07:05:f0:0c:38:80:65:db:68:a6:cd:dc:cf:89:d7:13:f9:9b:
         d6:42:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org