Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d055811-0879-4499-9bd1-4097f0c90fef.cer
File:                     0d055811-0879-4499-9bd1-4097f0c90fef.cer (raw, json)
Hash identifier:          S9HZB1UR+UNF5zdVJVTfHapQg4TieF+MElr4TG6/puw=
Subject key identifier:   0E:74:1D:B2:F9:10:BE:59:CA:74:14:77:20:F8:F0:A8:B7:CC:17:FF
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E48355C9650665FA31203400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d055811-0879-4499-9bd1-4097f0c90fef/0d055811-0879-4499-9bd1-4097f0c90fef.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d055811-0879-4499-9bd1-4097f0c90fef/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 15 Aug 2025 19:06:39 +0000
Subordinate resources:    AS: 47034
                          IP: 64.190.80.0/24
                          IP: 199.188.156.0/24

Validation:               Failed, certificate revoked on Fri 12 Apr 2024 17:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:55:c9:65:06:65:fa:31:20:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug 15 19:06:39 2025 GMT
        Subject: CN=0d055811-0879-4499-9bd1-4097f0c90fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:09:cb:6d:49:f9:9c:e5:de:e6:0f:f1:f0:
                    af:ae:47:06:4a:35:c0:9c:13:05:68:81:50:5a:c7:
                    6f:90:23:3c:b7:9a:53:f4:48:de:69:c0:98:c8:58:
                    2c:b3:0b:9d:94:0e:06:ba:be:e7:19:73:3b:ba:31:
                    05:a1:a4:bd:7a:e0:6e:be:3a:c0:89:69:12:d2:af:
                    87:3f:c9:65:8f:fc:18:f0:ae:d2:49:43:71:07:74:
                    61:00:ca:0f:9e:0b:0f:4e:23:ec:29:98:0d:bd:bc:
                    74:21:bb:2f:7a:29:16:36:e1:55:48:67:73:92:c9:
                    3b:2d:17:e3:f8:a1:38:a1:f5:ed:1b:1c:d4:1a:d1:
                    aa:11:33:2e:3f:4b:81:82:db:ab:bb:70:30:0c:c9:
                    00:8d:7c:92:10:bf:67:87:46:c4:2f:66:69:d8:9d:
                    f0:e7:d7:52:22:e3:39:1f:39:6f:e6:a4:8a:fa:ef:
                    9a:be:d1:7a:60:ff:ad:c7:88:bc:07:b7:bf:df:1a:
                    99:62:8b:4d:ba:11:05:7e:55:0f:3f:ef:76:26:35:
                    4a:d8:a5:65:d0:99:f9:65:b5:e8:5f:e0:5e:ce:4b:
                    8a:f0:d5:ba:5d:c1:c9:1e:e1:d4:64:a2:21:c1:d7:
                    07:e5:e8:1a:23:a3:2e:4a:83:b4:f6:05:30:a1:dd:
                    a8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:74:1D:B2:F9:10:BE:59:CA:74:14:77:20:F8:F0:A8:B7:CC:17:FF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d055811-0879-4499-9bd1-4097f0c90fef/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d055811-0879-4499-9bd1-4097f0c90fef/0d055811-0879-4499-9bd1-4097f0c90fef.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.80.0/24
                  199.188.156.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47034

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:78:25:2e:3d:ca:38:78:94:ad:dc:3c:7a:d9:5e:1e:25:7c:
         b2:5b:6d:9e:7b:69:5e:bc:f4:db:91:74:71:1f:f7:db:7d:8d:
         8f:41:7a:3f:91:2b:95:1d:d2:15:0d:3f:5c:09:7e:02:70:1f:
         a5:f8:95:4b:43:eb:05:2c:87:08:11:d9:a3:e7:b1:5d:47:9d:
         c6:2f:9f:fd:4e:fa:d6:ae:5c:a4:1e:cb:85:00:b6:ed:d2:cb:
         54:a7:a5:6a:dd:80:e9:06:1a:0d:d1:a8:4b:a4:9b:e9:21:32:
         74:53:01:35:61:8d:1c:06:c1:fb:1d:ef:fb:9b:cc:c7:49:ae:
         18:61:68:e7:02:8f:24:64:5d:1c:b9:50:b0:55:7d:e6:e5:61:
         93:f2:6f:98:e3:24:df:23:bc:1d:ae:ce:7b:fc:6e:da:d0:fe:
         35:00:24:a6:15:72:63:ae:01:ad:51:42:e1:a7:28:cc:ba:1c:
         48:31:52:fd:f0:71:f1:5f:72:2c:a7:bb:21:3f:f1:eb:e8:82:
         9d:8a:36:74:38:64:6a:c0:32:fb:15:ec:6d:df:7d:44:f0:82:
         13:e9:3c:1a:8b:ab:94:08:84:76:49:48:43:75:45:fb:42:81:
         43:c7:e6:e5:06:92:1c:30:88:89:41:84:7c:13:d0:a7:90:04:
         41:85:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:57:49 2024 by rpki-client on console-fra.rpki-client.org