Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f.cer
File:                     6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f.cer (raw, json)
Hash identifier:          0m3sErNu3irTBi/Vf/4V69U/VxbNdtROYTbrGH/Aros=
Subject key identifier:   67:6E:E1:F9:D8:FD:ED:22:40:A2:60:E7:25:7B:A2:A8:CD:20:D7:87
Authority key identifier: EC:69:D0:59:BE:FA:2E:FC:09:C7:8C:FF:6B:28:F3:19:44:A1:70:60
Certificate issuer:       /CN=3098fc14-29c9-4916-b03a-ae4a2af101cd
Certificate serial:       010D0C9F432858405315DB323AA05A6A4A0B0380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/676EE1F9D8FDED2240A260E7257BA2A8CD20D787.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 23 Dec 2022 00:07:31 +0000
Certificate not after:    Wed 26 Mar 2025 23:07:31 +0000
Subordinate resources:    IP: 23.142.24.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:53:15:db:32:3a:a0:5a:6a:4a:0b:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3098fc14-29c9-4916-b03a-ae4a2af101cd
        Validity
            Not Before: Dec 23 00:07:31 2022 GMT
            Not After : Mar 26 23:07:31 2025 GMT
        Subject: CN=6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:dc:9e:d2:e4:d7:29:3e:27:90:9e:1a:27:
                    e9:c5:01:eb:ba:ce:1d:59:ee:bd:30:52:da:70:4d:
                    f3:37:7c:c3:6e:5d:99:94:a2:26:97:a9:ba:42:cd:
                    17:52:72:90:c5:bb:80:e3:2f:51:59:d8:1f:71:72:
                    97:3f:85:bf:5c:a4:6d:2c:b5:b9:67:70:3b:d9:57:
                    3c:e0:e7:e7:04:28:f6:b7:73:ad:e1:12:7e:c3:35:
                    1a:02:df:97:9f:b2:43:ed:74:f7:96:1c:9d:c0:4d:
                    e6:8e:ff:eb:10:99:e5:4e:5a:89:fe:fc:6d:de:c6:
                    2e:ce:38:81:a9:9f:dc:8e:30:3d:1c:93:f6:1f:67:
                    51:44:1d:55:63:e3:c4:ee:d5:b5:ec:bf:d2:7f:13:
                    21:ce:78:d9:01:56:81:48:88:1c:86:15:df:7c:40:
                    2b:fe:eb:e3:e6:49:56:15:b1:62:de:46:0c:db:f9:
                    89:ba:32:d4:0a:58:f4:3e:80:e9:2a:fb:99:b1:bc:
                    d7:72:03:33:92:0d:8a:b1:d2:b7:51:8d:ef:f1:0d:
                    6a:98:fc:e6:92:04:08:b8:52:54:c6:2d:55:72:ce:
                    df:fd:db:1a:dc:a9:af:03:0b:86:b5:ac:b3:c4:40:
                    f0:5e:5a:06:97:ed:51:9f:bd:eb:ad:21:73:3f:83:
                    e6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6E:E1:F9:D8:FD:ED:22:40:A2:60:E7:25:7B:A2:A8:CD:20:D7:87
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/676EE1F9D8FDED2240A260E7257BA2A8CD20D787.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:69:D0:59:BE:FA:2E:FC:09:C7:8C:FF:6B:28:F3:19:44:A1:70:60

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:43:da:8c:57:e8:71:09:3a:d8:50:76:04:d4:3c:15:87:
         50:ef:91:16:1c:26:4a:f6:03:de:e6:b7:02:b0:2c:70:b8:48:
         61:9e:45:e3:e3:05:95:6b:96:00:67:7f:03:bc:3d:0f:c5:96:
         51:50:81:ba:e6:fc:a2:b5:d9:e3:38:de:66:03:01:ec:9a:65:
         10:e8:fa:ff:33:5d:15:b7:62:07:34:52:38:16:2e:31:62:4c:
         a4:34:1b:3f:2d:75:84:4f:63:db:1c:ca:eb:ec:ea:5f:e9:a2:
         72:e5:1d:4f:b8:80:c3:10:8c:e5:4a:28:68:1b:9c:41:bd:e8:
         14:bf:45:b2:6a:84:99:fd:4b:dd:65:05:f5:86:e0:9e:52:ef:
         41:41:a4:02:78:08:1e:2d:b8:a4:0f:a5:ee:ac:ca:4a:47:c8:
         9f:d3:fc:e0:9c:86:e6:85:09:1e:e5:67:4b:77:46:6a:dc:d5:
         d3:5c:12:53:82:6a:6d:b9:25:36:6d:ca:51:e0:55:90:19:8b:
         aa:fa:9e:24:02:69:76:e3:c0:6e:7a:ca:85:3f:63:7d:a8:be:
         64:51:cb:70:fc:43:b0:51:83:a5:b1:c9:1c:89:46:2a:82:34:
         e5:15:21:2f:91:6e:ca:4c:47:b4:96:40:6d:89:7c:a2:47:b2:
         65:c3:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org