Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164d92cd1b23d6dcef2a192032bf01e55347ab8e94.cer
File:                     589b794a164d92cd1b23d6dcef2a192032bf01e55347ab8e94.cer (raw, json)
Hash identifier:          QQq+EEQLFv8rplmnJNY7QxM+WFGoWiSvPhtODWdvAFg=
Subject key identifier:   97:51:76:A6:93:7C:7D:E8:88:B8:1B:5E:32:FC:69:60:AD:4B:4D:34
Authority key identifier: 7B:71:98:F7:D8:1F:60:0F:15:FB:73:F2:17:AD:B9:E9:EE:33:32:76
Certificate issuer:       /CN=33ecaab9-1807-4780-80d0-6a8df954060e
Certificate serial:       010D0C9F43285842DAFAE07DA972287935B28200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/975176A6937C7DE888B81B5E32FC6960AD4B4D34.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sat 12 Aug 2023 01:56:58 +0000
Certificate not after:    Fri 14 Nov 2025 02:56:58 +0000
Subordinate resources:    IP: 23.160.40.0/24
                          IP: 2602:fa4a::/40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:da:fa:e0:7d:a9:72:28:79:35:b2:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ecaab9-1807-4780-80d0-6a8df954060e
        Validity
            Not Before: Aug 12 01:56:58 2023 GMT
            Not After : Nov 14 02:56:58 2025 GMT
        Subject: CN=589b794a164d92cd1b23d6dcef2a192032bf01e55347ab8e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:5a:2f:9b:00:61:47:5a:1d:16:3d:22:53:
                    e0:5b:c2:14:f7:0e:a4:22:ae:32:3b:43:46:c3:d5:
                    ba:b5:25:a4:84:8e:e0:30:59:fa:dc:7d:93:8e:ff:
                    e2:de:fc:30:af:b8:26:a5:3e:64:ee:f1:09:02:17:
                    90:37:fd:6f:11:ca:b1:9b:58:22:37:00:29:f7:0d:
                    5a:9a:cd:c3:ab:78:16:1b:ba:4c:b4:90:1e:78:1c:
                    2e:5f:05:5c:c9:5e:99:1a:df:a2:bc:da:e0:2a:c8:
                    20:e4:d5:82:cd:6f:f5:9f:0c:7a:28:c2:5c:ad:c2:
                    d0:d1:56:2f:ca:18:09:00:d7:39:2b:a3:4b:2f:39:
                    46:35:f8:90:03:2a:34:b6:24:57:0b:e4:92:b0:e9:
                    15:36:e9:04:6e:ae:13:68:88:ff:37:18:bd:9a:1b:
                    64:c2:0c:4f:0a:71:5b:c9:43:d7:18:10:e9:03:ae:
                    c6:2c:96:ca:42:4d:52:88:2c:a6:8b:3a:90:7d:4c:
                    5b:44:04:c0:8e:ad:22:40:d7:a2:83:74:b6:72:26:
                    be:e6:60:d8:9b:40:5a:34:56:9f:28:0e:5b:66:08:
                    ed:a1:db:b8:4c:2a:15:27:09:d2:22:ef:a8:ad:6e:
                    a1:ba:ff:40:c0:8d:9c:f1:a8:02:67:b7:9c:2a:e4:
                    97:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:51:76:A6:93:7C:7D:E8:88:B8:1B:5E:32:FC:69:60:AD:4B:4D:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/975176A6937C7DE888B81B5E32FC6960AD4B4D34.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl

            X509v3 Authority Key Identifier:
                keyid:7B:71:98:F7:D8:1F:60:0F:15:FB:73:F2:17:AD:B9:E9:EE:33:32:76

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.40.0/24
                IPv6:
                  2602:fa4a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:12:44:2b:52:cf:4c:87:0a:4b:09:1c:d1:41:01:47:20:e1:
         3e:41:e9:f7:1f:8f:89:49:a3:5a:c5:86:c8:cc:83:4a:66:08:
         ae:5c:89:6b:65:7f:6a:44:da:d0:d4:4b:d2:28:0a:fc:1b:54:
         a4:a0:13:c5:28:69:68:04:4c:c4:5c:c7:1f:8f:8e:67:f9:a5:
         35:03:4d:52:87:24:3f:5e:4b:0d:22:98:82:50:5a:d3:58:2b:
         81:bb:8c:58:b7:d2:c0:df:5e:43:32:42:9f:e0:67:5e:ca:38:
         8f:f7:6b:0a:d9:10:02:f3:a8:11:6c:cb:fa:c1:4d:e2:4c:4c:
         f5:4e:49:5a:21:69:3a:3d:3d:af:93:dd:36:41:06:cc:46:a2:
         38:39:24:b4:50:a1:16:bf:e7:be:51:67:f4:27:02:f0:64:19:
         57:2a:c4:d4:97:d4:9e:3b:72:99:02:99:d7:6c:18:ea:f6:13:
         c2:b8:da:6b:13:6c:62:bf:a8:da:5c:eb:4c:4f:da:0f:36:d2:
         28:d3:ac:d8:33:1a:51:cb:78:ed:d9:8b:df:79:32:4d:7c:07:
         a0:ff:59:bf:b2:d6:da:a6:3c:be:77:8c:2d:65:fc:04:c7:f3:
         75:3b:ea:1a:1e:91:b0:61:f2:51:fd:32:a9:4e:84:f2:2f:a1:
         df:c3:d5:3e
-----BEGIN CERTIFICATE-----
MIIGsTCCBZmgAwIBAgIUAQ0Mn0MoWELa+uB9qXIoeTWyggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzNlY2FhYjktMTgwNy00NzgwLTgwZDAtNmE4ZGY5NTQw
NjBlMB4XDTIzMDgxMjAxNTY1OFoXDTI1MTExNDAyNTY1OFowPTE7MDkGA1UEAxMy
NTg5Yjc5NGExNjRkOTJjZDFiMjNkNmRjZWYyYTE5MjAzMmJmMDFlNTUzNDdhYjhl
OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPUlovmwBhR1odFj0i
U+BbwhT3DqQirjI7Q0bD1bq1JaSEjuAwWfrcfZOO/+Le/DCvuCalPmTu8QkCF5A3
/W8RyrGbWCI3ACn3DVqazcOreBYbuky0kB54HC5fBVzJXpka36K82uAqyCDk1YLN
b/WfDHoowlytwtDRVi/KGAkA1zkro0svOUY1+JADKjS2JFcL5JKw6RU26QRurhNo
iP83GL2aG2TCDE8KcVvJQ9cYEOkDrsYslspCTVKILKaLOpB9TFtEBMCOrSJA16KD
dLZyJr7mYNibQFo0Vp8oDltmCO2h27hMKhUnCdIi76itbqG6/0DAjZzxqAJnt5wq
5Jf9AgMBAAGjggO1MIIDsTAdBgNVHQ4EFgQUl1F2ppN8feiIuBteMvxpYK1LTTQw
ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OWQwOTVhZTAxODlkMzA4
N2ZkZDAzMjYvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OWQwOTVhZTAxODlkMzA4N2ZkZDAzMjYv
MC85NzUxNzZBNjkzN0M3REU4ODhCODFCNUUzMkZDNjk2MEFENEI0RDM0Lm1mdDA2
BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzMzZWNhYWI5LTE4MDctNDc4MC04MGQw
LTZhOGRmOTU0MDYwZS8zM2VjYWFiOS0xODA3LTQ3ODAtODBkMC02YThkZjk1NDA2
MGUuY3JsMB8GA1UdIwQYMBaAFHtxmPfYH2APFftz8hetuenuMzJ2MA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMzNlY2FhYjktMTgwNy00NzgwLTgwZDAtNmE4ZGY5
NTQwNjBlLmNlcjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEABegKDAOBAIA
AjAIAwYAJgL6SgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAXhJEK1LPTIcKSwkc0UEBRyDhPkHp9x+PiUmj
WsWGyMyDSmYIrlyJa2V/akTa0NRL0igK/BtUpKATxShpaARMxFzHH4+OZ/mlNQNN
UockP15LDSKYglBa01grgbuMWLfSwN9eQzJCn+BnXso4j/drCtkQAvOoEWzL+sFN
4kxM9U5JWiFpOj09r5PdNkEGzEaiODkktFChFr/nvlFn9CcC8GQZVyrE1JfUnjty
mQKZ12wY6vYTwrjaaxNsYr+o2lzrTE/aDzbSKNOs2DMaUct47dmL33kyTXwHoP9Z
v7LW2qY8vneMLWX8BMfzdTvqGh6RsGHyUf0yqU6E8i+h38PVPg==
-----END CERTIFICATE-----
Generated at Sun Dec 3 00:44:53 2023 by rpki-client on console-ams.rpki-client.org