Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c20d4da1d33e186e8219beb09e4ec0a3c7c2df7fc.cer
File:                     446cfa381c20d4da1d33e186e8219beb09e4ec0a3c7c2df7fc.cer (raw, json)
Hash identifier:          7bAzM3mg6HxdYbQ5JcJnUUyRuZ/+J8MRQv9z0kUMuvA=
Subject key identifier:   9B:70:CB:46:A8:DB:22:49:A2:69:B7:AA:F3:0E:42:9B:DC:9C:8B:42
Authority key identifier: 30:27:85:3A:1E:C9:86:50:0A:E6:6D:A5:9D:71:01:33:85:57:A4:68
Certificate issuer:       /CN=8a177cd6-d91e-4c15-992e-7337b8e894a8
Certificate serial:       010D0C9F43285844179C5E5B8832D18A8D123EE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer
Manifest:                 rsync://rsync.rp.ki/repo/aci/1/9B70CB46A8DB2249A269B7AAF30E429BDC9C8B42.mft
caRepository:             rsync://rsync.rp.ki/repo/aci/1/
Notify URL:               https://rrdp.rp.ki/notification.xml
Certificate not before:   Sun 03 Dec 2023 11:57:48 +0000
Certificate not after:    Sat 07 Mar 2026 11:57:48 +0000
Subordinate resources:    AS: 1001
                          AS: 1040
                          IP: 23.138.56.0/24
                          IP: 2602:fb55::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:17:9c:5e:5b:88:32:d1:8a:8d:12:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a177cd6-d91e-4c15-992e-7337b8e894a8
        Validity
            Not Before: Dec  3 11:57:48 2023 GMT
            Not After : Mar  7 11:57:48 2026 GMT
        Subject: CN=446cfa381c20d4da1d33e186e8219beb09e4ec0a3c7c2df7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:5f:fc:a3:15:36:23:05:ef:67:67:31:b3:
                    2c:48:5c:5c:ad:24:1c:ad:02:ce:64:23:98:2a:e1:
                    7c:bb:8a:7c:20:41:56:20:0b:1e:47:da:53:7d:ea:
                    ba:33:fe:7a:59:55:57:27:ab:79:54:48:6e:f3:25:
                    b8:8c:15:e2:ad:04:04:46:73:f2:21:a8:20:28:a7:
                    4c:aa:6e:1c:84:8d:5d:7e:16:8c:0c:bf:58:39:60:
                    4c:66:c4:23:42:f4:0f:1a:b8:b9:15:90:63:35:a0:
                    38:a7:9d:8c:c0:be:d8:64:4e:4a:72:a4:dc:0d:4b:
                    de:11:64:10:0a:0e:fc:71:62:22:3a:0c:02:c8:06:
                    62:c1:d1:05:12:b7:0f:8b:b0:3f:01:11:2e:bc:2b:
                    85:d6:11:38:3c:00:f2:72:53:6b:66:e6:86:71:15:
                    d1:17:b5:96:d9:69:9b:03:c7:ce:f1:ac:93:35:9d:
                    21:dc:ff:d6:dc:70:be:dd:23:43:1b:e0:97:2e:45:
                    db:c6:9a:35:1c:4e:6c:0b:d4:d0:40:68:5e:b0:04:
                    aa:23:6e:56:81:19:0e:b3:1f:45:00:b7:90:56:9e:
                    15:71:c5:21:db:70:94:86:ce:27:b8:ce:17:fe:30:
                    f2:6a:5e:9c:48:6f:98:9f:f5:b2:bb:0e:fd:da:84:
                    32:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:70:CB:46:A8:DB:22:49:A2:69:B7:AA:F3:0E:42:9B:DC:9C:8B:42
            Subject Information Access:
                CA Repository - URI:rsync://rsync.rp.ki/repo/aci/1/
                RPKI Manifest - URI:rsync://rsync.rp.ki/repo/aci/1/9B70CB46A8DB2249A269B7AAF30E429BDC9C8B42.mft
                RPKI Notify - URI:https://rrdp.rp.ki/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl

            X509v3 Authority Key Identifier:
                keyid:30:27:85:3A:1E:C9:86:50:0A:E6:6D:A5:9D:71:01:33:85:57:A4:68

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.56.0/24
                IPv6:
                  2602:fb55::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1001
                  1040

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:13:70:4e:ab:05:f5:f1:9c:d8:81:23:9e:47:40:43:f6:a9:
         a5:cc:a6:08:80:df:6d:37:1f:a2:2f:94:89:de:f9:28:f4:ec:
         6b:4b:bd:61:d9:36:a1:07:2b:a9:7b:2c:d9:4f:4d:27:72:b2:
         b8:14:e5:b5:01:2b:7a:48:fa:f0:9c:30:cd:12:b3:c9:6f:bc:
         76:52:d1:ed:13:84:b4:ea:d5:ca:9b:5c:c7:0c:95:ab:b2:72:
         51:ea:80:b6:a8:3d:fb:2b:32:52:a1:99:78:11:4b:96:d4:28:
         11:70:3f:09:84:5b:91:e6:e3:68:e7:47:a3:13:f5:ec:e5:bd:
         b1:92:a6:7a:11:c9:47:1f:af:72:3d:66:68:c8:ca:ed:7e:d3:
         9c:b6:d8:89:f1:cd:38:66:18:72:18:34:f4:7f:aa:e0:e7:67:
         fc:a7:60:5f:6e:a2:85:8a:e6:9d:da:5b:ee:d1:dd:92:8c:9a:
         99:bd:10:23:ff:8b:fe:5e:3f:32:5f:c5:64:79:9e:b1:1f:7c:
         d6:52:a0:ce:30:78:35:1d:1c:66:6a:b2:d0:ca:a5:48:c9:49:
         b0:a7:c1:5d:be:a6:4f:c7:ee:b3:b7:82:51:8e:23:ab:38:fe:
         c2:a9:2a:e1:6d:1e:2a:30:a2:93:95:6e:f6:38:8e:f2:3f:ef:
         57:6a:7a:10
-----BEGIN CERTIFICATE-----
MIIGczCCBVugAwIBAgIUAQ0Mn0MoWEQXnF5biDLRio0SPuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGExNzdjZDYtZDkxZS00YzE1LTk5MmUtNzMzN2I4ZTg5
NGE4MB4XDTIzMTIwMzExNTc0OFoXDTI2MDMwNzExNTc0OFowPTE7MDkGA1UEAxMy
NDQ2Y2ZhMzgxYzIwZDRkYTFkMzNlMTg2ZTgyMTliZWIwOWU0ZWMwYTNjN2MyZGY3
ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAR1/8oxU2IwXvZ2cx
syxIXFytJBytAs5kI5gq4Xy7inwgQVYgCx5H2lN96roz/npZVVcnq3lUSG7zJbiM
FeKtBARGc/IhqCAop0yqbhyEjV1+FowMv1g5YExmxCNC9A8auLkVkGM1oDinnYzA
vthkTkpypNwNS94RZBAKDvxxYiI6DALIBmLB0QUStw+LsD8BES68K4XWETg8APJy
U2tm5oZxFdEXtZbZaZsDx87xrJM1nSHc/9bccL7dI0Mb4JcuRdvGmjUcTmwL1NBA
aF6wBKojblaBGQ6zH0UAt5BWnhVxxSHbcJSGzie4zhf+MPJqXpxIb5if9bK7Dv3a
hDIdAgMBAAGjggN3MIIDczAdBgNVHQ4EFgQUm3DLRqjbIkmiabeq8w5Cm9yci0Iw
gccGCCsGAQUFBwELBIG6MIG3MCsGCCsGAQUFBzAFhh9yc3luYzovL3JzeW5jLnJw
LmtpL3JlcG8vYWNpLzEvMFcGCCsGAQUFBzAKhktyc3luYzovL3JzeW5jLnJwLmtp
L3JlcG8vYWNpLzEvOUI3MENCNDZBOERCMjI0OUEyNjlCN0FBRjMwRTQyOUJEQzlD
OEI0Mi5tZnQwLwYIKwYBBQUHMA2GI2h0dHBzOi8vcnJkcC5ycC5raS9ub3RpZmlj
YXRpb24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CB
yIaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05
OTJlLTczMzdiOGU4OTRhOC84YTE3N2NkNi1kOTFlLTRjMTUtOTkyZS03MzM3Yjhl
ODk0YTguY3JsMB8GA1UdIwQYMBaAFDAnhToeyYZQCuZtpZ1xATOFV6RoMA4GA1Ud
DwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5
bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEy
M2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMvOGExNzdjZDYtZDkxZS00YzE1LTk5MmUtNzMz
N2I4ZTg5NGE4LmNlcjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEABeKODAO
BAIAAjAIAwYEJgL7VQAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICA+kCAgQQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKUTcE6rBfXxnNiBI55HQEP2qaXMpgiA3203H6IvlIne+Sj07GtLvWHZ
NqEHK6l7LNlPTSdysrgU5bUBK3pI+vCcMM0Ss8lvvHZS0e0ThLTq1cqbXMcMlauy
clHqgLaoPfsrMlKhmXgRS5bUKBFwPwmEW5Hm42jnR6MT9ezlvbGSpnoRyUcfr3I9
ZmjIyu1+05y22InxzThmGHIYNPR/quDnZ/ynYF9uooWK5p3aW+7R3ZKMmpm9ECP/
i/5ePzJfxWR5nrEffNZSoM4weDUdHGZqstDKpUjJSbCnwV2+pk/H7rO3glGOI6s4
/sKpKuFtHiowopOVbvY4jvI/71dqehA=
-----END CERTIFICATE-----
Generated at Sun Dec 3 22:10:40 2023 by rpki-client on console-ams.rpki-client.org