Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674b7f70-9fb4-4c0a-ae81-5b02c18c379e.cer
File:                     674b7f70-9fb4-4c0a-ae81-5b02c18c379e.cer (raw, json)
Hash identifier:          Y+ES2hwOWbNHFXaA1vVOkFH83+fwqOtNDv1fvdKzxQU=
Subject key identifier:   76:45:80:B7:82:2B:45:18:E5:A2:7E:9C:28:02:73:69:31:4E:11:D4
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328583E50BB220F892E24985E23DE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674b7f70-9fb4-4c0a-ae81-5b02c18c379e/674b7f70-9fb4-4c0a-ae81-5b02c18c379e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674b7f70-9fb4-4c0a-ae81-5b02c18c379e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Jun 2022 18:19:14 +0000
Certificate not after:    Mon 23 Sep 2024 18:19:14 +0000
Subordinate resources:    AS: 22324
                          IP: 104.37.208.0/22
                          IP: 192.207.252.0/24
                          IP: 199.180.148.0/22
                          IP: 204.10.60.0/22
                          IP: 207.167.104.0/22

Validation:               Failed, certificate revoked on Wed 22 Jun 2022 14:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:50:bb:22:0f:89:2e:24:98:5e:23:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jun 21 18:19:14 2022 GMT
            Not After : Sep 23 18:19:14 2024 GMT
        Subject: CN=674b7f70-9fb4-4c0a-ae81-5b02c18c379e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2c:ef:5e:55:56:b7:e6:01:70:4a:df:09:ca:
                    b8:04:66:94:41:ff:48:3b:b5:d5:18:90:c3:8b:9d:
                    b8:f9:71:07:bf:6f:33:ce:dd:54:52:5f:26:48:64:
                    dc:4c:50:75:dd:0c:5d:a5:e0:eb:0e:5e:67:69:40:
                    d3:ed:8a:a8:87:95:ab:4f:b9:b3:91:8e:13:99:4e:
                    a2:9b:be:f3:69:9b:09:3e:9d:f5:26:65:a3:6a:dd:
                    ec:71:e7:7a:05:28:c8:ab:0b:bc:50:78:65:05:8c:
                    d2:54:ab:ec:7e:ed:ac:2d:24:f9:fe:6b:d8:94:bb:
                    37:d0:22:c1:5f:4a:a5:08:2f:da:86:66:89:af:87:
                    e6:09:50:a3:d1:79:e0:89:19:a7:ae:28:17:a0:17:
                    08:5b:71:14:4f:46:46:41:3c:42:7e:85:23:c1:cf:
                    c0:2a:3c:9b:db:a1:05:90:fd:79:bf:06:d1:65:ae:
                    9f:09:a6:0f:bd:9f:ed:2b:2b:bd:8a:6a:ec:97:cd:
                    2f:b0:48:03:81:33:cd:36:03:b2:74:04:ff:51:ec:
                    5d:b4:21:d8:01:bc:3c:39:19:12:f5:2f:50:52:17:
                    61:49:b4:dc:57:7c:6b:47:a2:71:52:27:33:98:0c:
                    96:15:48:84:a0:1f:96:b5:df:78:7e:0b:a9:d4:32:
                    7d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:45:80:B7:82:2B:45:18:E5:A2:7E:9C:28:02:73:69:31:4E:11:D4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674b7f70-9fb4-4c0a-ae81-5b02c18c379e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674b7f70-9fb4-4c0a-ae81-5b02c18c379e/674b7f70-9fb4-4c0a-ae81-5b02c18c379e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.208.0/22
                  192.207.252.0/24
                  199.180.148.0/22
                  204.10.60.0/22
                  207.167.104.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22324

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:27:52:96:6f:6a:9a:5b:10:09:60:54:9b:dc:a2:a9:da:5f:
         55:f9:f3:fd:39:7e:c6:7d:7d:fa:0b:ae:66:62:2a:bd:2b:ff:
         d5:c6:0f:eb:4c:ee:d5:26:c5:7d:28:ca:0a:f5:4d:c9:c0:d7:
         3f:39:2a:9b:7b:4b:24:e4:91:15:1d:a2:43:9e:d7:d8:e7:9f:
         30:77:af:d5:19:e6:8f:cb:a2:50:2a:cd:8e:0e:df:da:ed:d2:
         de:e6:f9:79:ca:52:d7:52:ba:1a:1a:5c:98:4d:67:ed:67:50:
         5a:ee:a7:62:e6:7c:5b:88:f9:cf:c8:7f:5d:46:38:82:be:17:
         46:47:8b:53:df:64:32:ff:9b:54:a6:7e:b0:b3:a3:24:b1:e1:
         7a:52:77:89:9e:30:54:2c:e6:30:7e:e8:94:05:14:10:df:1c:
         be:61:11:1a:fb:23:ce:b8:58:c8:65:df:60:af:ab:80:68:8a:
         f0:2d:b2:14:c3:a8:ae:e1:74:74:06:8d:75:ea:86:f5:3b:e5:
         b3:fd:20:7f:3f:7c:f0:2f:26:eb:3a:30:4d:ad:e7:9b:b1:a3:
         23:eb:a2:4f:a1:f0:2f:bd:c5:a1:a9:a6:34:45:9a:4a:b9:0a:
         72:25:17:a3:01:29:0e:28:aa:51:51:78:c3:c4:97:fe:38:09:
         9f:7e:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org