Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a1663d2a106f39e338ead8fb8c9efb294604cf1c82b.cer
File:                     589b794a1663d2a106f39e338ead8fb8c9efb294604cf1c82b.cer (raw, json)
Hash identifier:          fpQ9ZQs22+gIuHCCg47CEgOCL/1Ork5CE/DL2yLFMZA=
Subject key identifier:   63:D5:95:A4:00:4E:EE:DE:39:59:A9:9A:A1:DD:7D:E8:2D:B2:9C:A7
Authority key identifier: 7B:71:98:F7:D8:1F:60:0F:15:FB:73:F2:17:AD:B9:E9:EE:33:32:76
Certificate issuer:       /CN=33ecaab9-1807-4780-80d0-6a8df954060e
Certificate serial:       010D0C9F432858451D705EE8ADC645EFC704FF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/63D595A4004EEEDE3959A99AA1DD7DE82DB29CA7.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 06 Mar 2024 06:50:56 +0000
Certificate not after:    Tue 09 Jun 2026 05:50:56 +0000
Subordinate resources:    AS: 26195
                          IP: 23.160.40.0/24
                          IP: 2602:fa4a::/40

Validation:               Failed, certificate revoked on Wed 06 Mar 2024 07:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1d:70:5e:e8:ad:c6:45:ef:c7:04:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ecaab9-1807-4780-80d0-6a8df954060e
        Validity
            Not Before: Mar  6 06:50:56 2024 GMT
            Not After : Jun  9 05:50:56 2026 GMT
        Subject: CN=589b794a1663d2a106f39e338ead8fb8c9efb294604cf1c82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:df:28:db:e1:6b:0e:a9:c8:2d:e9:ab:77:
                    14:14:3f:49:81:b6:9d:d3:55:65:18:4e:21:66:99:
                    40:c1:24:3b:79:22:1f:6e:ec:aa:bd:c0:63:68:fb:
                    f5:be:2f:40:dc:f6:29:95:97:05:62:61:ce:4e:af:
                    5d:74:42:c6:5e:b9:29:16:b1:7b:32:dd:49:05:62:
                    da:43:42:f7:1a:20:3f:0a:07:87:81:9a:bf:7f:83:
                    85:69:eb:12:6b:bd:02:18:c5:3d:78:94:52:88:5c:
                    06:83:de:df:72:7e:68:26:a3:b2:10:07:bd:02:97:
                    d6:88:fc:2e:ad:01:dc:58:16:e1:83:66:b5:38:ca:
                    88:89:48:b0:3a:18:0d:ae:e6:12:a8:e2:11:54:a4:
                    df:cb:53:86:ce:2e:73:c8:7e:ae:9e:7b:1e:77:26:
                    02:8f:5b:50:3c:ca:3e:1d:20:ec:88:80:ff:c3:57:
                    be:f1:c8:07:83:d9:e4:05:f6:39:f8:a4:3d:e6:42:
                    a4:3d:cd:7c:ef:62:6c:9e:0a:99:76:4b:84:95:23:
                    79:70:1a:d5:9d:10:da:84:56:66:9c:54:38:8d:02:
                    42:fd:d2:32:8c:75:a0:e5:84:02:1d:58:f5:4a:a8:
                    5f:c3:de:9e:a8:00:06:dc:84:fe:f7:a5:f0:85:fe:
                    cf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D5:95:A4:00:4E:EE:DE:39:59:A9:9A:A1:DD:7D:E8:2D:B2:9C:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/63D595A4004EEEDE3959A99AA1DD7DE82DB29CA7.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl

            X509v3 Authority Key Identifier:
                keyid:7B:71:98:F7:D8:1F:60:0F:15:FB:73:F2:17:AD:B9:E9:EE:33:32:76

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.40.0/24
                IPv6:
                  2602:fa4a::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26195

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c1:46:e5:e9:ce:6f:97:ee:fa:00:76:6c:0d:5f:cb:18:b7:
         ba:8e:f6:18:83:34:5d:58:28:1c:78:b0:08:4e:90:7c:68:cd:
         11:00:87:a9:cb:e2:1a:19:a6:cd:2d:7f:ed:da:0f:15:db:08:
         ed:3f:38:dc:42:0f:a7:16:1c:f5:fd:11:1c:60:1b:cf:6c:73:
         88:0e:c0:ba:88:3f:20:17:b2:31:4f:48:77:d7:57:10:24:e9:
         e9:e8:20:e8:c7:0e:92:0a:df:58:49:08:0c:be:6b:d0:50:b4:
         4e:6e:52:14:f5:fb:38:d3:8c:2e:62:3a:d5:d5:23:ad:ac:15:
         a9:a0:2e:59:18:03:fd:01:39:02:3b:ae:f8:41:0f:72:91:45:
         e8:7c:48:45:a0:53:e9:29:fe:c1:14:38:38:94:c7:0c:4c:de:
         be:c4:c1:3b:0c:d0:5b:1d:ec:36:26:21:eb:36:a7:b9:9d:ad:
         d3:47:13:b7:a1:90:a4:59:7a:f9:1a:12:1a:76:38:97:0f:36:
         e1:92:b2:95:17:d9:84:49:fb:0b:c6:6e:ff:bc:46:0a:04:70:
         56:9e:2f:99:9b:69:22:e6:11:19:81:36:11:11:c5:a3:75:0b:
         12:a4:55:7e:b5:a2:3e:b7:6b:ae:7c:ce:56:dc:60:c2:c7:56:
         92:12:21:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 11:26:28 2024 by rpki-client on console-ams.rpki-client.org