Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf358b835573195019f8321db1c81c6ebf389967614b.cer
File:                     7e6381cf358b835573195019f8321db1c81c6ebf389967614b.cer (raw, json)
Hash identifier:          GJoQ5VtUUtynlJ3DF/5Vum17SvZeNrEfBjL++32f6cc=
Subject key identifier:   6C:8D:AE:92:3F:63:DC:0D:CD:49:82:0D:AE:F7:20:ED:76:43:43:8B
Authority key identifier: 18:64:5E:A1:CC:F0:FC:90:E0:4F:6C:43:38:A8:1F:78:6A:6B:FB:51
Certificate issuer:       /CN=d2104327-08ab-4cfc-81ef-76caf90ecd70
Certificate serial:       010D0C9F432858417B6482726A307721F7C41500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
Manifest:                 rsync://rpki.co/repo/HYSP/10/6C8DAE923F63DC0DCD49820DAEF720ED7643438B.mft
caRepository:             rsync://rpki.co/repo/HYSP/10
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 03:25:16 +0000
Certificate not after:    Fri 11 Jul 2025 03:25:16 +0000
Subordinate resources:    AS: 1012
                          IP: 23.138.232.0/24
                          IP: 23.139.40.0/23
                          IP: 2602:fb44::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7b:64:82:72:6a:30:77:21:f7:c4:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2104327-08ab-4cfc-81ef-76caf90ecd70
        Validity
            Not Before: Apr  8 03:25:16 2023 GMT
            Not After : Jul 11 03:25:16 2025 GMT
        Subject: CN=7e6381cf358b835573195019f8321db1c81c6ebf389967614b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:9b:3f:bf:cb:5d:3c:a6:21:e4:42:84:60:
                    ee:95:0c:09:40:1c:6c:11:88:3d:b6:41:e9:63:d7:
                    95:e8:f6:26:1b:34:e2:22:85:e6:f5:38:f6:4c:aa:
                    f9:a1:3e:b4:d7:4e:08:95:06:df:53:27:90:35:e5:
                    50:19:02:20:e5:79:62:48:78:48:bd:3b:70:dc:81:
                    36:84:80:83:52:a6:cf:0a:b5:4f:76:87:02:86:8a:
                    ed:65:39:3d:8a:11:b1:a8:54:57:7c:01:90:24:ec:
                    0f:18:d6:9e:7f:28:ff:40:50:0d:f1:a6:2b:13:4a:
                    3a:e6:e1:c5:95:3e:24:e2:de:71:38:51:66:5c:6a:
                    6f:94:23:e0:48:37:d7:c8:3c:2b:37:3d:4a:43:f3:
                    8d:73:57:3a:6c:14:59:c7:12:e9:42:56:0b:ee:0e:
                    f8:b7:6d:64:83:0c:21:da:e1:04:25:29:ae:1c:cf:
                    44:b0:1e:36:52:5a:e8:a3:26:4e:2c:4e:95:9d:c5:
                    9b:46:07:6c:13:04:b4:1c:98:26:f7:5c:4f:9c:13:
                    45:94:d8:0a:3c:79:97:f2:64:49:65:26:a1:5a:9b:
                    3f:c7:c9:15:c0:a7:1c:6c:13:8b:4a:44:e5:77:5b:
                    52:14:fe:af:4d:71:cf:64:e4:c3:39:45:3f:f8:ac:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8D:AE:92:3F:63:DC:0D:CD:49:82:0D:AE:F7:20:ED:76:43:43:8B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/10
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/10/6C8DAE923F63DC0DCD49820DAEF720ED7643438B.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl

            X509v3 Authority Key Identifier:
                keyid:18:64:5E:A1:CC:F0:FC:90:E0:4F:6C:43:38:A8:1F:78:6A:6B:FB:51

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24
                  23.139.40.0/23
                IPv6:
                  2602:fb44::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1012

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:cb:0c:47:bc:48:d3:14:71:e5:4c:a4:fa:5d:28:a7:99:84:
         5a:02:70:12:cc:19:52:de:62:8c:f5:92:b7:71:0a:35:f4:12:
         4a:b8:c4:fe:72:9e:e7:38:9b:01:56:b7:e1:ea:46:ac:b7:13:
         74:5e:9d:e4:ea:df:a0:38:0a:6d:e2:46:3d:6a:0e:e8:74:e8:
         92:38:71:a9:b3:ea:69:b4:2f:3a:45:14:80:be:e2:5c:e2:7c:
         71:c9:a5:35:4e:32:a8:16:80:17:96:e1:16:22:d9:aa:69:6f:
         4b:9c:45:a4:3e:b1:3e:2f:49:7e:0c:d6:2a:5e:a1:56:f6:12:
         b3:a9:ac:e8:30:ef:e6:cf:28:27:1b:5e:bd:c2:39:de:61:e2:
         a2:56:ad:d2:23:42:65:80:3d:5a:ec:11:4f:27:2f:ce:00:14:
         39:b7:34:53:a3:3e:e8:16:ff:05:10:22:e1:c1:73:19:05:48:
         3a:cd:66:1d:23:c5:ef:8f:ff:ec:01:94:d5:db:77:84:00:d0:
         d6:f3:4d:bb:da:e7:c9:27:af:7f:cc:e8:41:b8:76:13:ba:75:
         68:cb:f2:97:ab:54:71:9c:47:84:c8:4a:04:02:74:e5:48:87:
         a5:52:8f:3d:06:2c:0f:3b:3e:95:6b:09:f3:17:55:c1:b5:83:
         2e:a3:05:87
-----BEGIN CERTIFICATE-----
MIIGcjCCBVqgAwIBAgIUAQ0Mn0MoWEF7ZIJyajB3IffEFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIxMDQzMjctMDhhYi00Y2ZjLTgxZWYtNzZjYWY5MGVj
ZDcwMB4XDTIzMDQwODAzMjUxNloXDTI1MDcxMTAzMjUxNlowPTE7MDkGA1UEAxMy
N2U2MzgxY2YzNThiODM1NTczMTk1MDE5ZjgzMjFkYjFjODFjNmViZjM4OTk2NzYx
NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgZs/v8tdPKYh5EKE
YO6VDAlAHGwRiD22Qelj15Xo9iYbNOIiheb1OPZMqvmhPrTXTgiVBt9TJ5A15VAZ
AiDleWJIeEi9O3DcgTaEgINSps8KtU92hwKGiu1lOT2KEbGoVFd8AZAk7A8Y1p5/
KP9AUA3xpisTSjrm4cWVPiTi3nE4UWZcam+UI+BIN9fIPCs3PUpD841zVzpsFFnH
EulCVgvuDvi3bWSDDCHa4QQlKa4cz0SwHjZSWuijJk4sTpWdxZtGB2wTBLQcmCb3
XE+cE0WU2Ao8eZfyZEllJqFamz/HyRXApxxsE4tKROV3W1IU/q9Ncc9k5MM5RT/4
rHTdAgMBAAGjggN2MIIDcjAdBgNVHQ4EFgQUbI2ukj9j3A3NSYINrvcg7XZDQ4sw
gcQGCCsGAQUFBwELBIG3MIG0MCgGCCsGAQUFBzAFhhxyc3luYzovL3Jwa2kuY28v
cmVwby9IWVNQLzEwMFUGCCsGAQUFBzAKhklyc3luYzovL3Jwa2kuY28vcmVwby9I
WVNQLzEwLzZDOERBRTkyM0Y2M0RDMERDRDQ5ODIwREFFRjcyMEVENzY0MzQzOEIu
bWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY28vcnJkcC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5
YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2QyMTA0MzI3LTA4YWItNGNmYy04MWVm
LTc2Y2FmOTBlY2Q3MC9kMjEwNDMyNy0wOGFiLTRjZmMtODFlZi03NmNhZjkwZWNk
NzAuY3JsMB8GA1UdIwQYMBaAFBhkXqHM8PyQ4E9sQzioH3hqa/tRMA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1hNzlhLTQ1YmYt
OTU4Ni05MmRkNDllZjMyMjMvZDIxMDQzMjctMDhhYi00Y2ZjLTgxZWYtNzZjYWY5
MGVjZDcwLmNlcjA1BggrBgEFBQcBBwEB/wQmMCQwEgQCAAEwDAMEABeK6AMEAReL
KDAOBAIAAjAIAwYEJgL7RAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICA/QwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnssMR7xI0xRx5Uyk+l0op5mEWgJwEswZUt5ijPWSt3EKNfQSSrjE/nKe
5zibAVa34epGrLcTdF6d5OrfoDgKbeJGPWoO6HTokjhxqbPqabQvOkUUgL7iXOJ8
ccmlNU4yqBaAF5bhFiLZqmlvS5xFpD6xPi9JfgzWKl6hVvYSs6ms6DDv5s8oJxte
vcI53mHiolat0iNCZYA9WuwRTycvzgAUObc0U6M+6Bb/BRAi4cFzGQVIOs1mHSPF
74//7AGU1dt3hADQ1vNNu9rnySevf8zoQbh2E7p1aMvyl6tUcZxHhMhKBAJ05UiH
pVKPPQYsDzs+lWsJ8xdVwbWDLqMFhw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:26 2023 by rpki-client on console-ams.rpki-client.org