Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
File:                     71d0ad91-658e-4240-8d73-8592460b61a7.cer (raw, json)
Hash identifier:          JdBGxvMsoKTEUjFhOOOjJDO6bzAAoX9D1TNNxk+RYTU=
Subject key identifier:   2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328583FB8D72877FE773A5021714080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Oct 2022 18:06:42 +0000
Certificate not after:    Thu 30 Jan 2025 19:06:42 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked on Wed 23 Nov 2022 14:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b8:d7:28:77:fe:77:3a:50:21:71:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Oct 28 18:06:42 2022 GMT
            Not After : Jan 30 19:06:42 2025 GMT
        Subject: CN=71d0ad91-658e-4240-8d73-8592460b61a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e4:2c:04:cf:90:fe:fc:d5:b0:e3:2b:ce:da:
                    47:19:c3:8b:23:b2:82:3d:74:b3:eb:25:b0:33:f5:
                    5f:8d:e1:ff:ce:69:0b:d4:fc:d4:7e:87:6a:b2:52:
                    20:12:75:cf:b4:34:ce:03:e8:e3:36:ad:af:d7:3b:
                    6d:7d:8a:37:15:25:5e:b2:7e:27:88:21:66:5f:40:
                    6d:ab:41:6b:4e:48:d1:2b:b0:e1:33:aa:7b:ee:f2:
                    58:23:b7:22:35:e6:0a:b7:92:da:6c:65:63:3d:7b:
                    4c:04:ba:a3:be:d7:2b:88:3e:26:00:fc:2e:88:71:
                    37:f2:29:06:65:ac:d6:a2:0c:34:64:59:f3:bd:d2:
                    db:cf:7c:64:ec:f7:3c:1f:52:21:26:4c:f5:d8:9a:
                    34:e3:9f:a7:91:31:f2:f6:ef:ad:ee:47:a7:f0:3e:
                    83:d6:16:74:26:b5:42:b8:98:1b:3a:8c:bd:0a:28:
                    83:8d:2a:9c:15:6f:6b:aa:30:85:11:b7:2a:3e:40:
                    05:ae:59:d8:b3:51:e5:d8:69:e5:89:23:e2:24:8a:
                    7b:c9:88:69:9f:98:41:14:ea:5b:bf:c6:b2:cc:85:
                    bf:ff:2d:04:4e:8b:33:4c:4b:09:9b:e5:d2:e3:ad:
                    15:8c:27:b9:45:05:d5:47:36:50:ef:1d:81:13:2f:
                    7c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:1c:6e:86:f5:9a:85:b4:61:4b:c5:af:32:b3:96:aa:1a:71:
         08:59:5c:60:dd:b6:6f:53:18:78:01:fb:bb:5c:ec:b2:59:90:
         5f:69:42:c4:61:f1:13:6a:4b:c3:eb:12:67:e7:2d:cb:2b:34:
         0e:d5:ff:56:e0:3c:d2:ca:ad:69:4e:bf:dd:a7:49:68:ee:96:
         c7:de:b1:ab:3e:07:c8:76:55:17:89:af:78:ea:e1:77:45:77:
         6e:fb:62:d8:f5:44:4c:f9:fb:7e:0a:9d:16:43:c4:4c:32:ff:
         34:db:aa:9f:3d:4f:df:fa:b9:d2:f5:53:d2:c2:a0:a3:96:b3:
         7c:39:75:ea:3c:5a:cc:f5:ba:62:47:83:a6:e0:6e:b2:6e:60:
         6c:fd:79:0c:e8:52:2c:5b:26:66:b2:34:4b:91:f1:fd:65:61:
         9d:83:a7:26:3f:e2:14:64:2e:9d:86:dc:1d:99:52:2a:7a:4b:
         13:cb:f1:e2:63:9b:87:27:8a:d0:33:68:67:d2:92:9b:ff:82:
         9b:07:0a:2a:bc:a9:4d:38:c5:19:ae:d0:22:29:49:81:f7:ae:
         6f:3f:cd:65:3d:cc:2c:e7:b7:fe:b5:73:79:1e:4a:d7:8e:08:
         4e:a9:01:93:cc:70:0d:eb:51:bd:36:69:07:7d:de:13:90:35:
         03:c7:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:47 2024 by rpki-client on console-ams.rpki-client.org