Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3476a2e3-fce4-4f8a-9724-640a6311bd86.cer
File:                     3476a2e3-fce4-4f8a-9724-640a6311bd86.cer (raw, json)
Hash identifier:          qKuVx1sS/jOL0D/SVVBa3dFg9MYiTl1uZnTXZ67hsOU=
Subject key identifier:   D0:D0:C2:30:35:3A:67:1C:28:84:E9:08:02:C4:7E:16:71:4A:CB:4F
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328583E1B15D281EBAD8B63BA09D980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3476a2e3-fce4-4f8a-9724-640a6311bd86/3476a2e3-fce4-4f8a-9724-640a6311bd86.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3476a2e3-fce4-4f8a-9724-640a6311bd86/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 02 Jun 2022 13:08:18 +0000
Certificate not after:    Wed 04 Sep 2024 13:08:18 +0000
Subordinate resources:    AS: 16540
                          IP: 104.152.100.0/22
                          IP: 199.36.176.0/21
                          IP: 199.187.148.0/22
                          IP: 2607:6200::/32

Validation:               Failed, certificate revoked on Thu 02 Feb 2023 20:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:15:d2:81:eb:ad:8b:63:ba:09:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jun  2 13:08:18 2022 GMT
            Not After : Sep  4 13:08:18 2024 GMT
        Subject: CN=3476a2e3-fce4-4f8a-9724-640a6311bd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:5b:e6:4e:6e:7e:76:4f:b0:09:20:e3:00:
                    34:69:9b:40:d3:2d:39:a4:89:2e:8e:d9:83:ae:94:
                    c5:06:dc:3e:7d:4e:6b:b1:ae:93:e5:8c:12:2e:c0:
                    f7:39:16:6a:b7:e4:6c:4e:ad:6c:0d:5e:8b:67:72:
                    68:be:5c:7f:fa:d8:04:e9:ed:a7:71:8c:e8:6c:5e:
                    6f:ca:a8:58:f7:98:55:30:61:42:3a:a1:ab:70:53:
                    8d:65:60:04:0c:84:2e:bf:e6:96:4d:35:a6:d5:55:
                    fa:b1:ef:e3:de:7c:02:ab:28:dd:c1:e8:50:12:d0:
                    87:af:ff:66:1e:a2:56:90:dd:56:5d:e2:56:0f:e8:
                    0e:dd:e1:8a:0c:41:6f:ac:1d:09:d5:94:9c:b2:28:
                    2d:b3:42:48:8a:43:62:0b:fd:0d:63:f7:33:78:18:
                    1a:3b:a4:65:45:52:34:a3:8e:23:42:ed:15:21:d9:
                    d7:c5:fe:a7:6b:1a:7f:78:15:65:0a:15:c5:a8:7b:
                    ed:da:45:87:31:fc:23:d8:63:87:a0:52:aa:1d:54:
                    a5:13:dd:df:65:db:d1:19:99:31:61:00:cc:3d:0a:
                    4a:27:32:40:7b:51:7e:24:73:52:1e:a4:78:48:55:
                    e4:83:e6:59:20:f2:38:8d:df:9e:2b:da:7b:fd:1f:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D0:C2:30:35:3A:67:1C:28:84:E9:08:02:C4:7E:16:71:4A:CB:4F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3476a2e3-fce4-4f8a-9724-640a6311bd86/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3476a2e3-fce4-4f8a-9724-640a6311bd86/3476a2e3-fce4-4f8a-9724-640a6311bd86.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.100.0/22
                  199.36.176.0/21
                  199.187.148.0/22
                IPv6:
                  2607:6200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16540

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f0:94:91:9d:3a:6a:75:2c:3b:aa:0f:3f:b7:b7:e8:35:23:
         1c:37:78:bd:e3:47:80:2f:6f:ca:98:74:4b:69:12:09:b7:d1:
         8b:c4:03:7d:ca:74:2f:ae:f8:65:67:13:63:65:af:eb:85:21:
         53:2c:27:04:f3:53:de:9b:64:cc:e2:48:8d:5f:76:9f:b2:8f:
         0a:1f:f9:60:f2:63:10:88:d8:84:67:2c:1d:ce:dd:1c:2a:a2:
         b4:31:c8:71:dd:ee:6b:f2:41:7c:b8:0c:86:5f:fb:ea:5a:3a:
         7a:cc:cb:64:a8:b3:e4:ef:5e:78:35:61:03:ec:2f:ad:71:72:
         f7:58:e3:d1:00:a4:a6:2c:9e:cf:ab:16:c7:22:96:e4:d1:70:
         a9:cb:d1:45:82:7b:42:2b:9a:c4:12:26:fb:8b:ff:54:60:b9:
         2d:c4:9a:23:87:f4:2c:92:2c:ea:10:c8:c3:d6:98:c6:a4:ce:
         5f:2e:00:62:7c:31:2f:49:a3:2b:2c:d2:d9:8f:68:17:91:bb:
         15:a4:63:cb:9d:cc:a9:fc:69:19:4f:54:e1:84:10:64:d4:9d:
         12:98:68:a9:25:69:b0:02:72:c8:b7:15:6e:a7:bb:85:c2:c6:
         e9:dd:d7:02:de:cf:dd:db:5d:21:16:33:8a:e0:06:e9:ad:19:
         4f:91:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:46 2024 by rpki-client on console-ams.rpki-client.org