Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad978b29-bdbc-4a32-9366-4c3e77ceb900.cer
File:                     ad978b29-bdbc-4a32-9366-4c3e77ceb900.cer (raw, json)
Hash identifier:          gUMnoynp0sa4v6p5A22cKJAOOvJogoVqqxbbJpu44Oc=
Subject key identifier:   6F:3E:52:F3:94:A4:72:BE:5A:9A:0F:FE:51:EE:30:08:F1:18:61:67
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328576D51CC73C042CFC173D9B2AD48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad978b29-bdbc-4a32-9366-4c3e77ceb900/ad978b29-bdbc-4a32-9366-4c3e77ceb900.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad978b29-bdbc-4a32-9366-4c3e77ceb900/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Aug 2020 18:47:12 +0000
Certificate not after:    Sat 10 Aug 2030 18:47:12 +0000
Subordinate resources:    IP: 66.129.176.0/20
                          IP: 67.226.192.0/20

Validation:               Failed, certificate revoked on Fri 14 Oct 2022 14:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:d9:b2:ad:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug 10 18:47:12 2020 GMT
            Not After : Aug 10 18:47:12 2030 GMT
        Subject: CN=ad978b29-bdbc-4a32-9366-4c3e77ceb900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:2d:30:d7:c4:97:f0:1a:c9:48:6d:82:40:
                    05:f2:ef:14:e2:7c:30:0c:e8:04:17:86:74:82:31:
                    31:6b:9f:74:f0:a4:cc:83:87:e2:e8:91:44:59:0a:
                    c7:97:c1:58:ba:96:14:37:68:09:3a:b5:31:7b:6b:
                    5c:33:05:9f:b8:a9:31:a7:31:89:16:44:17:8e:f0:
                    d1:a7:1b:ed:fd:3a:03:0a:f7:1e:ca:5a:13:88:70:
                    b1:45:47:87:d5:ac:c8:bc:fb:b7:94:be:58:88:17:
                    ee:61:f2:e8:e3:5d:6f:ba:45:ac:e5:ab:e9:0d:0e:
                    fb:b2:8b:63:a4:30:91:a2:9b:86:c4:6d:46:48:22:
                    47:81:85:4a:35:30:02:55:36:10:52:20:20:b9:e1:
                    77:49:b4:dd:eb:9f:c7:91:df:82:5d:fb:5e:d0:47:
                    ee:95:8f:09:3d:89:12:f7:df:87:98:64:12:c5:7b:
                    8b:37:4a:76:a8:f9:4e:a4:b3:67:38:20:07:dd:35:
                    e2:aa:61:89:e5:db:62:f2:9e:a0:e4:81:9c:9c:9c:
                    be:9e:3a:b5:88:1e:88:f1:d1:38:ab:22:d8:50:4f:
                    66:af:ba:99:1d:af:c8:2d:32:01:1c:68:08:01:45:
                    1c:73:22:c9:b6:7a:48:17:5f:a1:02:ee:d9:db:a2:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3E:52:F3:94:A4:72:BE:5A:9A:0F:FE:51:EE:30:08:F1:18:61:67
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad978b29-bdbc-4a32-9366-4c3e77ceb900/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad978b29-bdbc-4a32-9366-4c3e77ceb900/ad978b29-bdbc-4a32-9366-4c3e77ceb900.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.176.0/20
                  67.226.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:28:47:4f:13:4b:2f:90:1a:5f:a9:8d:a0:f3:52:a6:aa:b2:
         b3:8d:b2:25:4a:d6:66:4a:fe:ab:7f:a3:e9:3c:a9:2f:56:b9:
         48:ea:3e:1b:fd:8c:fb:ce:e8:0b:c4:a3:8a:54:60:c7:1b:93:
         cb:b6:68:39:9d:c4:f5:3c:35:f5:9c:71:27:ba:fc:35:2e:6f:
         86:74:37:a7:57:f4:1a:c5:89:b1:a4:a9:08:b1:e2:76:dd:ef:
         a7:7b:30:aa:13:b0:72:f8:2a:b5:91:44:19:84:88:29:97:20:
         50:04:af:35:c4:41:bf:fc:60:fc:70:fd:85:a5:36:31:8d:e9:
         4c:ea:b9:b6:28:96:45:46:c1:6d:ec:cf:a8:8d:04:f2:89:d2:
         b0:38:61:2d:5a:e4:f6:0b:fa:55:c5:e6:30:62:34:d3:d3:f4:
         d1:7c:b6:69:0e:55:f2:4c:32:45:0b:5c:0d:ff:f3:99:09:98:
         0b:e7:af:57:ff:49:53:3f:0c:9b:4b:97:d9:ca:8c:a6:62:86:
         68:99:90:4d:33:71:91:1b:9f:c1:89:7f:cc:ad:98:65:b0:9f:
         d0:72:98:b7:f0:a7:b1:9f:5d:ca:c6:2e:e8:ac:b7:67:bf:72:
         94:44:d4:37:a6:b6:f9:60:2b:a1:0b:e9:72:85:cd:1f:76:bf:
         dc:cd:3e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:40:22 2024 by rpki-client on console-ams.rpki-client.org