Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer
File:                     02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer (raw, json)
Hash identifier:          kiWpenoCMvEVtHcehrWzGegxrwVypwZT1d9Vu9XAiXQ=
Subject key identifier:   26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F
Authority key identifier: AA:CA:03:F3:27:60:7B:A6:55:1E:79:C5:DF:45:DD:98:35:B1:4C:A2
Certificate issuer:       /CN=39065acc-beed-4115-bc6c-63de232f2a04
Certificate serial:       010D0C9F4328583F7605D238FF0292288F69EB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 04 Oct 2022 19:41:34 +0000
Certificate not after:    Mon 06 Jan 2025 20:41:34 +0000
Subordinate resources:    AS: 970
                          AS: 21957
                          IP: 104.37.40.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:76:05:d2:38:ff:02:92:28:8f:69:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39065acc-beed-4115-bc6c-63de232f2a04
        Validity
            Not Before: Oct  4 19:41:34 2022 GMT
            Not After : Jan  6 20:41:34 2025 GMT
        Subject: CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:0c:87:90:5d:03:d7:c3:20:ac:99:00:51:
                    05:06:c4:63:00:a2:d4:1b:58:00:72:6b:b7:f7:75:
                    0b:c6:ab:c6:8c:0c:d4:4a:c1:c0:da:27:12:6b:c5:
                    15:bb:7c:ad:14:62:23:66:f6:8d:94:58:09:54:84:
                    6c:00:63:9d:68:61:cd:4d:c1:82:e6:97:91:97:67:
                    34:29:77:09:da:44:7d:e3:df:96:93:14:88:59:50:
                    ec:7e:61:7e:35:fd:3c:72:50:97:13:4c:f7:01:ca:
                    b3:72:ec:37:f7:29:2d:2a:41:61:10:65:17:af:8f:
                    ca:f9:e0:2f:26:05:94:2f:8b:b5:c3:39:33:db:53:
                    e2:91:14:09:e6:36:f3:a8:9f:68:8e:98:bd:3e:74:
                    47:d4:85:61:d3:91:a6:59:7d:a8:8d:2d:5a:c0:9b:
                    c2:6e:9d:b6:66:e1:f5:6a:4c:9a:bf:14:54:c2:07:
                    f8:6e:81:15:b9:fc:02:a5:46:52:7a:c1:d7:d2:f9:
                    6d:cf:b9:60:64:b3:3c:fa:b6:dd:d1:99:6a:23:c2:
                    89:ed:d9:53:d2:53:c5:3c:a6:ea:95:ba:12:c8:a2:
                    f3:fc:e0:7c:d7:08:8a:ae:33:8b:11:db:32:c1:e5:
                    f9:30:03:05:39:f2:a6:2b:1c:57:3d:d5:08:96:0e:
                    4f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl

            X509v3 Authority Key Identifier:
                keyid:AA:CA:03:F3:27:60:7B:A6:55:1E:79:C5:DF:45:DD:98:35:B1:4C:A2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.40.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  970
                  21957

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f2:52:34:b4:b4:66:59:32:b9:08:33:c0:a8:1c:e2:bb:2f:f5:
         f2:3e:20:e0:4e:cb:e8:65:89:7c:5b:26:ef:0a:95:00:b4:be:
         40:77:cd:e8:a7:5d:95:ce:a0:df:1e:f7:47:35:79:0c:62:ec:
         ea:aa:d1:7f:53:c8:66:41:3b:50:b2:d8:88:94:c4:cf:cb:55:
         c0:f0:08:35:c3:bd:f1:52:ac:49:5a:eb:84:da:fe:7f:5e:f1:
         a1:2b:5a:a4:b2:5c:1f:ba:59:9a:52:60:c0:00:a3:2d:35:6b:
         ca:3e:17:70:fd:30:fe:88:e8:ec:60:f0:b2:64:8a:70:24:9f:
         c1:d2:13:e0:88:2f:70:47:77:04:f3:81:85:63:f0:b6:33:ed:
         64:88:3d:ff:8c:a5:7c:00:a9:15:72:d4:43:e5:f8:60:da:97:
         46:9b:4c:64:c0:1a:97:f3:24:fe:fc:cf:b1:8d:3b:93:98:51:
         be:c8:66:1f:35:05:d8:fe:8f:38:a9:11:f8:17:e1:a3:e3:94:
         f6:f0:b8:f0:72:37:c7:07:1b:33:dd:c5:c9:1b:d6:0f:7f:71:
         06:de:70:b5:0f:27:88:e5:4d:95:d4:61:92:a3:de:b3:77:96:
         ce:9d:d1:85:55:40:25:81:3f:4d:57:5a:32:f1:5c:fc:6a:89:
         04:87:f1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org