Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35f36ecf0030c3338cba8ad2c7ffc3dab56a68b669.cer
File:                     7e6381cf35f36ecf0030c3338cba8ad2c7ffc3dab56a68b669.cer (raw, json)
Hash identifier:          RRqgSIWYEPwovRGzKDcf1HfL1aR7tZxJ93IZ+Qcv3+w=
Subject key identifier:   14:42:6C:E5:45:0F:5B:2B:98:7B:F8:17:89:6E:6F:98:89:2B:D6:05
Authority key identifier: 18:64:5E:A1:CC:F0:FC:90:E0:4F:6C:43:38:A8:1F:78:6A:6B:FB:51
Certificate issuer:       /CN=d2104327-08ab-4cfc-81ef-76caf90ecd70
Certificate serial:       010D0C9F432858417C0E63B80335E8006D4EF500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
Manifest:                 rsync://rpki.co/repo/HYSP/10/14426CE5450F5B2B987BF817896E6F98892BD605.mft
caRepository:             rsync://rpki.co/repo/HYSP/10
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:07:33 +0000
Certificate not after:    Fri 11 Jul 2025 09:07:33 +0000
Subordinate resources:    AS: 1012
                          IP: 23.138.232.0/24
                          IP: 23.139.40.0/23
                          IP: 2602:fb44::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7c:0e:63:b8:03:35:e8:00:6d:4e:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2104327-08ab-4cfc-81ef-76caf90ecd70
        Validity
            Not Before: Apr  8 09:07:33 2023 GMT
            Not After : Jul 11 09:07:33 2025 GMT
        Subject: CN=7e6381cf35f36ecf0030c3338cba8ad2c7ffc3dab56a68b669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7c:f4:98:2a:b9:83:d8:b3:cc:c9:bc:96:16:
                    47:c8:93:04:90:b4:ae:10:30:23:e2:fa:5c:3e:39:
                    07:70:09:8f:70:0a:bc:40:0b:97:1b:22:1f:e3:34:
                    29:96:f6:e0:91:75:b9:cb:e3:a6:cd:46:af:d3:b9:
                    25:22:c3:14:b9:fc:12:8a:f6:3a:19:e5:27:b9:7b:
                    11:2f:75:79:7d:04:b9:d7:a2:c1:27:23:85:85:57:
                    7f:7e:4b:5d:06:b3:5a:2f:ad:a6:06:1f:48:b7:e6:
                    ba:8f:80:c0:39:e9:87:d3:36:fe:93:5e:b6:e1:18:
                    07:9f:16:0d:06:4e:82:9f:90:fc:f9:a7:d7:19:75:
                    99:cd:94:7f:38:2a:78:4a:1a:0f:5e:6c:a9:d0:18:
                    28:76:38:54:0d:60:20:b8:20:d2:c8:72:0f:b1:a2:
                    81:8c:a7:67:3e:bd:cc:70:98:e9:1b:f1:ba:5a:f6:
                    ee:16:9e:f1:f5:72:9d:c9:61:8e:5d:75:7a:08:94:
                    43:c9:82:79:c8:15:ed:2d:c1:55:de:88:e0:e9:1a:
                    3d:d4:15:c2:28:e5:f8:88:90:45:31:f9:4e:91:03:
                    6b:89:04:68:8d:5a:75:9c:c7:a9:c6:b1:47:04:54:
                    ec:af:c1:35:f5:04:fd:32:7c:00:9f:7d:52:09:0d:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:42:6C:E5:45:0F:5B:2B:98:7B:F8:17:89:6E:6F:98:89:2B:D6:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/10
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/10/14426CE5450F5B2B987BF817896E6F98892BD605.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl

            X509v3 Authority Key Identifier:
                keyid:18:64:5E:A1:CC:F0:FC:90:E0:4F:6C:43:38:A8:1F:78:6A:6B:FB:51

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24
                  23.139.40.0/23
                IPv6:
                  2602:fb44::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1012

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ca:1a:59:f6:13:31:56:c3:7d:07:fd:c6:07:a2:c2:75:82:
         84:88:ec:b6:2d:82:03:e6:85:d9:b4:00:4a:b2:42:56:9e:4c:
         8b:cf:79:d4:df:3d:6a:fc:a9:1b:f2:39:0b:04:7a:e2:73:2d:
         e6:07:60:ca:cb:3d:30:01:31:60:1d:52:0e:fb:4c:f2:84:d0:
         60:46:f8:38:09:ea:b5:17:09:81:8d:9c:2e:e6:37:14:05:1f:
         22:84:cb:5c:0e:9c:5f:e7:63:46:a5:b0:af:c2:74:a8:8f:8c:
         6b:49:01:e5:06:05:50:1c:b7:6e:6f:4e:25:d9:57:aa:48:95:
         7e:c0:19:cf:c8:71:51:07:d6:4f:1c:c0:47:be:62:17:75:58:
         be:c2:81:8b:8e:f8:bc:fe:e1:e2:26:a8:f2:e8:14:ee:c8:f0:
         2a:92:62:7a:d7:d5:07:18:c2:75:fd:67:d1:c5:ad:1e:86:16:
         d6:9e:7b:86:0a:c6:07:dc:67:ad:89:2a:24:55:b3:ff:24:54:
         96:d8:c7:1c:53:90:7e:91:c4:62:0a:81:cc:ce:89:1b:d2:29:
         20:e1:7d:4f:4b:2d:9a:a9:61:44:81:85:26:b3:30:93:aa:0f:
         82:fa:af:a0:f1:27:9b:ed:45:eb:cd:47:62:8e:d8:cf:d7:49:
         d8:4d:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:22 2023 by rpki-client on console-fra.rpki-client.org