Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d.cer
File:                     d66be2ca-9529-4430-bcfe-12e5b919f33d.cer (raw, json)
Hash identifier:          NkFQ/rAe638Id/M/O84v/w3RwpnLWCQ6hE6FPSlBToE=
Subject key identifier:   50:0B:54:BB:79:B8:1A:54:3F:DE:E9:66:3B:9B:1C:E9:B1:9D:B6:E1
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328583E1B15553DE58B9B9745C0A0A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d/d66be2ca-9529-4430-bcfe-12e5b919f33d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 02 Jun 2022 13:07:19 +0000
Certificate not after:    Wed 04 Sep 2024 13:07:19 +0000
Subordinate resources:    AS: 14589
                          AS: 29962
                          IP: 72.29.160.0/19
                          IP: 74.82.128.0/20
                          IP: 2001:48c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:15:55:3d:e5:8b:9b:97:45:c0:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jun  2 13:07:19 2022 GMT
            Not After : Sep  4 13:07:19 2024 GMT
        Subject: CN=d66be2ca-9529-4430-bcfe-12e5b919f33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:65:98:7e:0b:ee:18:53:7a:42:e8:e4:76:
                    a2:87:96:9b:63:51:e0:9d:9f:f5:41:5b:06:80:d3:
                    b3:18:79:e8:f7:87:97:b7:3d:6b:b6:1e:14:67:c3:
                    a9:3f:be:74:80:4d:55:d4:2a:76:01:50:fe:37:49:
                    dd:c1:42:9a:9b:ac:2b:a3:10:dc:0d:fa:8d:a8:47:
                    32:28:ab:b0:21:b6:6b:6c:0a:e3:ce:54:c8:4a:1e:
                    9d:16:d4:19:b4:06:c1:78:70:05:95:3d:29:ab:84:
                    47:9a:81:3d:55:32:2b:f4:aa:65:7e:fb:9e:a4:f6:
                    7a:f5:ba:7d:74:02:da:12:d6:61:3c:02:43:5a:94:
                    93:3d:55:8f:15:c9:b6:cd:a6:b4:b5:b8:45:36:de:
                    97:70:dd:e1:1b:f9:21:b3:18:24:40:30:a4:c4:f3:
                    67:fa:70:0f:c4:17:cd:f0:be:6a:61:cc:4d:74:81:
                    71:1c:ef:f8:8b:75:38:8d:df:76:f6:a3:24:a6:b3:
                    bc:26:17:d5:f7:66:39:85:22:97:bc:5f:fc:33:c3:
                    ad:fe:fd:03:5b:ac:d6:33:4d:61:37:ef:5d:96:7e:
                    82:dd:33:bb:f3:73:14:0c:57:58:c6:49:b1:7f:2a:
                    5c:a4:4e:de:ce:ab:23:01:51:b3:8c:d8:fa:5e:7b:
                    99:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0B:54:BB:79:B8:1A:54:3F:DE:E9:66:3B:9B:1C:E9:B1:9D:B6:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d/d66be2ca-9529-4430-bcfe-12e5b919f33d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.160.0/19
                  74.82.128.0/20
                IPv6:
                  2001:48c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14589
                  29962

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c7:14:c7:ce:5a:14:f1:78:1a:11:00:11:95:df:6c:9e:d3:
         c2:6c:b5:8e:66:c2:44:36:d5:7b:56:59:71:bc:3d:cf:c9:4e:
         e6:e6:10:75:40:8c:94:0a:38:27:a1:25:02:77:69:43:f2:6c:
         f1:a4:b4:b9:46:ac:68:c9:15:39:78:5b:2b:cd:89:cf:fc:96:
         2a:9b:c4:09:f4:e6:5a:e5:7d:00:52:74:be:3e:fa:05:82:65:
         82:f9:23:c4:9d:4e:56:0a:d1:d5:ee:23:6a:02:1a:96:56:7b:
         b4:e9:1d:6d:46:ea:c4:8b:72:c4:e5:5b:46:ad:6a:9e:f2:13:
         f0:d5:25:d3:22:ef:e1:27:66:92:ac:fa:ba:a4:4a:23:6d:d3:
         bd:81:9e:61:07:4a:77:b8:c6:91:c0:7a:6f:41:1c:6e:97:af:
         fb:a4:81:7e:2d:9a:c2:a1:b6:a2:f1:60:7d:ce:5b:48:80:d9:
         3e:ea:e4:09:5f:d9:a1:c5:b3:8b:70:36:5f:f2:a6:a0:14:17:
         ca:f4:0e:fb:f3:7f:c4:43:22:5b:7a:7e:60:4e:36:17:a5:03:
         97:31:62:01:21:98:19:74:16:ef:b3:ce:94:57:9d:28:d3:92:
         74:17:48:a1:ed:a1:20:f7:f3:f2:84:28:59:d9:f1:42:0c:6d:
         c7:39:72:5e
-----BEGIN CERTIFICATE-----
MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWD4bFVU95Yubl0XAoKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTIyMDYwMjEzMDcxOVoXDTI0MDkwNDEzMDcxOVowLzEtMCsGA1UEAxMk
ZDY2YmUyY2EtOTUyOS00NDMwLWJjZmUtMTJlNWI5MTlmMzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApONlmH4L7hhTekLo5Haih5abY1HgnZ/1QVsG
gNOzGHno94eXtz1rth4UZ8OpP750gE1V1Cp2AVD+N0ndwUKam6wroxDcDfqNqEcy
KKuwIbZrbArjzlTISh6dFtQZtAbBeHAFlT0pq4RHmoE9VTIr9KplfvuepPZ69bp9
dALaEtZhPAJDWpSTPVWPFcm2zaa0tbhFNt6XcN3hG/khsxgkQDCkxPNn+nAPxBfN
8L5qYcxNdIFxHO/4i3U4jd929qMkprO8JhfV92Y5hSKXvF/8M8Ot/v0DW6zWM01h
N+9dln6C3TO783MUDFdYxkmxfypcpE7ezqsjAVGzjNj6XnuZIQIDAQABo4IEMzCC
BC8wHQYDVR0OBBYEFFALVLt5uBpUP97pZjubHOmxnbbhMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k
NjZiZTJjYS05NTI5LTQ0MzAtYmNmZS0xMmU1YjkxOWYzM2QvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2Q2NmJlMmNhLTk1MjktNDQzMC1i
Y2ZlLTEyZTViOTE5ZjMzZC9kNjZiZTJjYS05NTI5LTQ0MzAtYmNmZS0xMmU1Yjkx
OWYzM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAVIHaADBARKUoAwDQQCAAIwBwMFACABSMAwHQYI
KwYBBQUHAQgBAf8EDjAMoAowCAICOP0CAnUKMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF/HFMfOWhTxeBoR
ABGV32ye08JstY5mwkQ21XtWWXG8Pc/JTubmEHVAjJQKOCehJQJ3aUPybPGktLlG
rGjJFTl4WyvNic/8liqbxAn05lrlfQBSdL4++gWCZYL5I8SdTlYK0dXuI2oCGpZW
e7TpHW1G6sSLcsTlW0atap7yE/DVJdMi7+EnZpKs+rqkSiNt072BnmEHSne4xpHA
em9BHG6Xr/ukgX4tmsKhtqLxYH3OW0iA2T7q5Alf2aHFs4twNl/ypqAUF8r0Dvvz
f8RDIlt6fmBONhelA5cxYgEhmBl0Fu+zzpRXnSjTknQXSKHtoSD38/KEKFnZ8UIM
bcc5cl4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:22 2023 by rpki-client on console-fra.rpki-client.org