Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf357d23e9cf67e1c5a99c17ad1cbb4f10bea9e60949.cer
File:                     7e6381cf357d23e9cf67e1c5a99c17ad1cbb4f10bea9e60949.cer (raw, json)
Hash identifier:          1KEcztyVMTHjySo/woGFA+pY/qFTxBFI2dm5nksjr+I=
Subject key identifier:   2B:D1:1C:D4:37:C9:12:FF:4A:D3:8E:2A:E5:17:C0:2F:24:64:83:06
Authority key identifier: 18:64:5E:A1:CC:F0:FC:90:E0:4F:6C:43:38:A8:1F:78:6A:6B:FB:51
Certificate issuer:       /CN=d2104327-08ab-4cfc-81ef-76caf90ecd70
Certificate serial:       010D0C9F432858417BDB7B0FF94AF61095D5CD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
Manifest:                 rsync://rpki.co/repo/HYSP/10/2BD11CD437C912FF4AD38E2AE517C02F24648306.mft
caRepository:             rsync://rpki.co/repo/HYSP/10
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 07:24:59 +0000
Certificate not after:    Fri 11 Jul 2025 07:24:59 +0000
Subordinate resources:    AS: 1012
                          IP: 23.138.232.0/24
                          IP: 23.139.40.0/23
                          IP: 2602:fb44::/36

Validation:               Failed, certificate revoked on Sat 08 Apr 2023 09:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7b:db:7b:0f:f9:4a:f6:10:95:d5:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2104327-08ab-4cfc-81ef-76caf90ecd70
        Validity
            Not Before: Apr  8 07:24:59 2023 GMT
            Not After : Jul 11 07:24:59 2025 GMT
        Subject: CN=7e6381cf357d23e9cf67e1c5a99c17ad1cbb4f10bea9e60949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:4d:69:02:5c:3b:11:b9:85:47:c4:23:e9:
                    d8:7e:4a:cd:f6:81:fd:d6:21:b9:44:90:ef:29:13:
                    5d:c4:a4:3c:e0:22:a5:59:56:07:7b:64:f7:e5:b9:
                    ef:20:32:c0:30:22:97:cb:95:7a:de:cd:c8:6c:d4:
                    f5:74:0b:f0:a3:90:8e:e3:6c:f0:d0:f0:51:87:82:
                    b7:c0:ea:10:d6:42:a9:13:a7:95:03:7d:66:b9:36:
                    9d:22:3b:f8:f1:10:68:3c:a8:f8:34:7e:53:a8:81:
                    80:2f:05:5a:b2:9e:ba:5c:5b:32:01:8d:f8:f6:82:
                    32:98:57:23:61:3c:9f:e6:c0:37:1d:0d:ad:f0:de:
                    04:21:bf:35:48:d6:be:32:5e:3a:b1:96:ff:33:94:
                    61:55:56:ea:1b:0a:e7:ee:ee:92:47:a7:48:8a:57:
                    fc:6a:40:7a:45:dc:ee:70:fe:18:4f:7f:dd:44:58:
                    59:5e:a5:e4:91:e0:a2:47:18:68:13:58:95:cf:7d:
                    94:80:51:0d:b2:28:25:3b:59:f1:98:30:93:b7:d7:
                    65:8c:24:39:cd:04:0f:9a:e6:1c:7a:a3:5e:7f:f3:
                    d7:bd:ae:83:17:58:35:37:78:d9:21:a6:73:2e:24:
                    cd:35:12:fb:a0:ad:4b:5e:c6:70:a0:d0:c3:ef:77:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D1:1C:D4:37:C9:12:FF:4A:D3:8E:2A:E5:17:C0:2F:24:64:83:06
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/10
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/10/2BD11CD437C912FF4AD38E2AE517C02F24648306.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl

            X509v3 Authority Key Identifier:
                keyid:18:64:5E:A1:CC:F0:FC:90:E0:4F:6C:43:38:A8:1F:78:6A:6B:FB:51

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24
                  23.139.40.0/23
                IPv6:
                  2602:fb44::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1012

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:7f:04:82:98:4f:dd:0f:61:cf:54:6e:7c:c3:d2:15:cd:
         1c:12:95:a2:08:35:5c:42:c2:ab:70:90:a0:ad:86:dc:fd:67:
         6a:74:e6:cf:f2:d7:45:49:5f:0d:63:10:41:4e:6c:c3:2e:6c:
         d4:23:27:44:ac:c6:14:a1:2d:95:68:ab:69:f8:39:ae:f7:29:
         c2:b4:fc:5e:61:c8:29:41:fb:90:ac:6c:24:de:c7:91:ba:55:
         15:99:c6:7f:7c:14:6d:7b:99:09:c0:86:1d:8e:b9:ce:7c:d7:
         f8:3a:26:b9:fa:da:ec:1f:33:19:2e:7a:ed:4d:14:ca:92:3e:
         89:46:ff:8e:82:9a:a8:78:17:67:e4:cc:0e:d1:81:13:76:b5:
         de:17:a3:3d:a5:70:94:76:2a:e8:e5:8a:14:1b:1e:d5:ea:de:
         67:59:2b:4a:c7:59:f7:9c:a6:c9:58:55:f8:fe:0d:f8:c4:7a:
         f4:f4:ae:f7:69:f9:72:e5:56:fb:a9:04:24:3b:e0:17:12:0c:
         fd:d7:83:63:53:b3:10:52:f8:80:d2:e1:c3:c1:22:0a:82:ca:
         9b:03:64:b6:ad:a7:77:3a:47:4c:cf:02:29:4e:4a:21:87:a8:
         c3:c9:3b:8d:97:aa:6e:3a:b4:f1:45:69:69:1c:f9:c2:aa:ea:
         0c:57:8a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:05 2024 by rpki-client on console-fra.rpki-client.org