Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/38ea7f62-6c1b-4aed-a47b-563784293050.cer
File:                     38ea7f62-6c1b-4aed-a47b-563784293050.cer (raw, json)
Hash identifier:          gVs/bVKLNuH2CubSwMyJiKBr9DfneJ7WrsAQCTlwZfY=
Subject key identifier:   78:74:37:24:2D:79:49:A3:A4:9A:CF:04:08:73:31:CF:5A:7F:68:7B
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E4833EE6E637AA4042439760
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/38ea7f62-6c1b-4aed-a47b-563784293050/38ea7f62-6c1b-4aed-a47b-563784293050.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/38ea7f62-6c1b-4aed-a47b-563784293050/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 10 Mar 2025 19:06:39 +0000
Subordinate resources:    AS: 53503
                          IP: 96.8.64.0/20

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 19:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:3e:e6:e6:37:aa:40:42:43:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Mar 10 19:06:39 2025 GMT
        Subject: CN=38ea7f62-6c1b-4aed-a47b-563784293050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:e8:ca:ef:95:9e:7c:18:f8:d8:8d:9b:c8:
                    3e:16:10:f0:e9:11:24:77:b2:10:fd:4b:f6:7b:ca:
                    2b:56:0c:d1:02:2d:11:e9:a5:d8:18:ea:04:84:83:
                    90:d8:95:aa:fa:bf:6c:d0:a7:11:54:cc:0d:9a:6e:
                    e0:2b:ea:60:c6:e9:8f:c9:aa:61:51:ef:33:bf:08:
                    e9:57:be:9d:5d:51:dc:54:ba:4e:15:05:3f:86:4b:
                    a0:8f:f0:c5:52:98:b6:f7:a0:dc:38:a8:f5:d1:fa:
                    c9:e2:fb:04:00:a3:78:18:2c:db:ba:59:66:85:72:
                    f3:d9:db:10:b3:7e:37:d8:78:70:be:f7:be:e7:c9:
                    08:44:3e:6a:d7:47:d5:5f:46:69:39:b1:64:85:96:
                    ff:cb:1a:e0:14:6d:9b:b8:da:ce:1d:d0:63:27:f9:
                    4e:ed:f9:21:37:30:eb:b4:0e:4f:41:64:d8:8b:54:
                    01:2c:27:1b:e2:80:94:c9:25:f2:a0:8e:64:29:2f:
                    bf:74:f1:0f:b4:f9:a2:a3:23:df:b7:66:c5:fb:6f:
                    ea:3b:68:83:8d:71:ec:04:84:8a:e8:c1:ac:b5:3a:
                    ce:4e:78:f0:dd:0c:ef:7e:f9:37:02:7a:56:a2:56:
                    13:00:81:b9:eb:2f:36:e0:6a:d4:ce:22:cf:75:0b:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:74:37:24:2D:79:49:A3:A4:9A:CF:04:08:73:31:CF:5A:7F:68:7B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/38ea7f62-6c1b-4aed-a47b-563784293050/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/38ea7f62-6c1b-4aed-a47b-563784293050/38ea7f62-6c1b-4aed-a47b-563784293050.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.8.64.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53503

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:6b:b7:af:42:a5:ee:06:ee:de:ea:77:61:a1:66:55:92:de:
         9c:8c:e6:c5:ac:e9:94:0f:b6:5c:18:e0:68:7f:90:8c:52:ed:
         56:40:b4:51:5c:b1:da:d8:06:34:dd:94:1b:c9:32:45:d3:9d:
         c0:c0:51:7c:2e:bc:5f:ac:5c:8f:34:3e:dc:2b:ac:fc:00:02:
         58:cc:dd:e1:b2:42:80:3a:cd:00:25:d1:48:28:f5:c6:c9:0d:
         a1:aa:7a:69:bf:28:87:9c:32:ed:48:f3:ad:0b:ac:73:50:29:
         25:b8:0f:59:61:92:96:99:f7:a6:a2:0c:aa:61:61:fc:29:5d:
         e6:d7:c3:af:8f:61:bd:72:09:71:50:ec:bc:52:14:df:94:be:
         b7:9c:59:f9:2c:21:71:09:86:89:c9:95:87:ab:e3:2b:9e:45:
         94:ed:b4:bb:03:9b:35:fc:bc:a3:8d:48:44:f9:de:1f:27:00:
         2e:84:04:6d:31:4d:01:64:f9:b5:8c:a3:ee:54:0c:74:e2:b1:
         67:15:23:1f:ad:50:c8:33:0d:14:41:dc:d9:ac:14:fd:1a:cd:
         6f:0e:2a:12:d5:75:49:3d:12:32:53:32:48:9c:ab:80:1d:fb:
         23:69:8a:1c:fe:45:a1:2f:6c:fd:e4:5e:dc:34:b4:80:42:91:
         03:12:ba:89
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEHkgz7m5jeqQEJDl2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDMxMDE5MDYzOVowLzEtMCsGA1UEAxMk
MzhlYTdmNjItNmMxYi00YWVkLWE0N2ItNTYzNzg0MjkzMDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MDoyu+VnnwY+NiNm8g+FhDw6REkd7IQ/Uv2
e8orVgzRAi0R6aXYGOoEhIOQ2JWq+r9s0KcRVMwNmm7gK+pgxumPyaphUe8zvwjp
V76dXVHcVLpOFQU/hkugj/DFUpi296DcOKj10frJ4vsEAKN4GCzbullmhXLz2dsQ
s3432Hhwvve+58kIRD5q10fVX0ZpObFkhZb/yxrgFG2buNrOHdBjJ/lO7fkhNzDr
tA5PQWTYi1QBLCcb4oCUySXyoI5kKS+/dPEPtPmioyPft2bF+2/qO2iDjXHsBISK
6MGstTrOTnjw3Qzvfvk3AnpWolYTAIG56y824GrUziLPdQsuowIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFHh0NyQteUmjpJrPBAhzMc9af2h7MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z
OGVhN2Y2Mi02YzFiLTRhZWQtYTQ3Yi01NjM3ODQyOTMwNTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzM4ZWE3ZjYyLTZjMWItNGFlZC1h
NDdiLTU2Mzc4NDI5MzA1MC8zOGVhN2Y2Mi02YzFiLTRhZWQtYTQ3Yi01NjM3ODQy
OTMwNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBARgCEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
AND/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFlrt69Cpe4G7t7qd2GhZlWS3pyM5sWs6ZQPtlwY4Gh/kIxS
7VZAtFFcsdrYBjTdlBvJMkXTncDAUXwuvF+sXI80PtwrrPwAAljM3eGyQoA6zQAl
0Ugo9cbJDaGqemm/KIecMu1I860LrHNQKSW4D1lhkpaZ96aiDKphYfwpXebXw6+P
Yb1yCXFQ7LxSFN+UvrecWfksIXEJhonJlYer4yueRZTttLsDmzX8vKONSET53h8n
AC6EBG0xTQFk+bWMo+5UDHTisWcVIx+tUMgzDRRB3NmsFP0azW8OKhLVdUk9EjJT
Mkicq4Ad+yNpihz+RaEvbP3kXtw0tIBCkQMSuok=
-----END CERTIFICATE-----
Generated at Fri Feb 2 23:29:48 2024 by rpki-client on console-ams.rpki-client.org