Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02.cer
File:                     b93a83dc-e910-416f-88d0-d8d64914eb02.cer (raw, json)
Hash identifier:          0reHD3ZdN+ySHjTThFiYfS+dEHkjDa0FNi5jUodW0Oc=
Subject key identifier:   82:1F:CC:49:43:33:69:AD:E8:33:EC:DB:1F:C8:39:D6:BE:98:14:F7
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E4834EF85ADF56143EA130C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/b93a83dc-e910-416f-88d0-d8d64914eb02.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 29 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 62952
                          IP: 162.251.168.0/22
                          IP: 172.82.36.0/22
                          IP: 2602:fec5::/36

Validation:               Failed, certificate revoked on Wed 21 Feb 2024 16:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4e:f8:5a:df:56:14:3e:a1:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 29 19:06:39 2025 GMT
        Subject: CN=b93a83dc-e910-416f-88d0-d8d64914eb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:a4:47:eb:a0:d6:d3:8a:f3:75:d8:a0:17:
                    30:2c:39:5a:22:93:1c:b5:5d:2e:0c:05:d9:c9:c9:
                    0d:f5:48:4d:53:6c:91:7a:2a:94:1e:f5:3a:ef:8c:
                    3d:e2:cc:bd:e7:cc:f2:28:70:8b:11:79:a6:51:dd:
                    49:84:fb:23:6e:ff:d7:c0:ab:7c:05:4a:70:63:6d:
                    fe:b5:3e:cb:e2:97:93:36:64:31:1a:6c:ec:6c:1a:
                    ce:91:75:37:6a:59:63:92:f8:30:c1:e1:ee:84:b8:
                    be:e9:46:75:f8:64:8f:71:5f:6d:dd:0b:b8:2f:35:
                    2a:32:3f:a1:99:c0:9c:9d:a5:fb:6b:05:58:e1:ab:
                    7e:05:85:f2:22:2c:5b:7e:a7:35:23:ff:7b:fc:d4:
                    31:9f:6c:c2:00:c5:6e:89:2a:11:b0:76:0e:64:a9:
                    a6:20:14:93:ba:f5:e6:90:fc:d4:dd:c3:ce:fd:88:
                    a1:ef:57:93:8a:f6:80:8e:92:af:62:e2:c4:af:9a:
                    93:ec:e7:82:2f:88:4f:7a:40:75:e8:d4:39:3d:be:
                    cc:04:78:bc:40:3f:67:94:00:f0:ca:1c:0c:ce:41:
                    f6:4f:e1:18:58:58:52:d9:17:6d:74:c3:15:9b:5b:
                    8f:c0:a3:67:c3:2e:53:d3:23:d0:d1:30:5d:9b:27:
                    6a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1F:CC:49:43:33:69:AD:E8:33:EC:DB:1F:C8:39:D6:BE:98:14:F7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/b93a83dc-e910-416f-88d0-d8d64914eb02.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.168.0/22
                  172.82.36.0/22
                IPv6:
                  2602:fec5::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62952

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:92:b0:f5:ee:a0:fe:0a:78:4c:b9:ab:59:a4:d6:13:8e:2c:
         da:5c:7c:1a:8e:00:38:5c:19:98:6f:fe:f0:9d:d8:d3:9c:d2:
         97:0b:32:a4:c6:1b:60:17:ea:bc:4e:10:ea:3b:34:14:d6:43:
         fc:6c:56:f4:c4:19:c6:e4:e6:48:84:a3:4d:6b:8b:9f:c4:e8:
         ea:fa:1b:e0:2a:f1:09:d5:f4:18:79:c0:58:f7:03:dd:fa:d5:
         51:b1:a5:8d:8b:d4:82:f5:62:22:71:a8:54:95:d0:40:0e:07:
         d7:62:b3:04:a0:9e:4e:11:69:9a:62:cf:fd:28:9b:c1:3c:a6:
         69:c0:2b:a0:09:29:bd:cc:35:0d:9e:46:be:8b:77:05:44:e7:
         20:95:8f:64:51:7c:20:70:0a:c8:ae:44:9f:41:f1:3f:89:7c:
         9d:00:a9:f4:c5:f5:d2:1a:f6:a1:67:4f:c8:1b:95:f6:62:a2:
         38:d8:4f:a4:8e:b9:46:d1:ae:d7:fe:2d:c7:94:d8:a7:b6:ae:
         2e:c6:38:ff:e2:4b:e1:e0:fc:00:3e:09:04:52:2c:4d:77:a9:
         2a:32:80:85:3f:28:f4:a2:08:34:13:92:d7:e2:da:85:09:52:
         ea:67:8a:b0:9b:95:19:f3:8b:43:db:9d:a3:bd:81:52:2f:b3:
         7d:2a:cc:43
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEHkg074Wt9WFD6hMMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYyOTE5MDYzOVowLzEtMCsGA1UEAxMk
YjkzYTgzZGMtZTkxMC00MTZmLTg4ZDAtZDhkNjQ5MTRlYjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7SkR+ug1tOK83XYoBcwLDlaIpMctV0uDAXZ
yckN9UhNU2yReiqUHvU674w94sy958zyKHCLEXmmUd1JhPsjbv/XwKt8BUpwY23+
tT7L4peTNmQxGmzsbBrOkXU3alljkvgwweHuhLi+6UZ1+GSPcV9t3Qu4LzUqMj+h
mcCcnaX7awVY4at+BYXyIixbfqc1I/97/NQxn2zCAMVuiSoRsHYOZKmmIBSTuvXm
kPzU3cPO/Yih71eTivaAjpKvYuLEr5qT7OeCL4hPekB16NQ5Pb7MBHi8QD9nlADw
yhwMzkH2T+EYWFhS2RdtdMMVm1uPwKNnwy5T0yPQ0TBdmydq/QIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFIIfzElDM2mt6DPs2x/IOda+mBT3MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i
OTNhODNkYy1lOTEwLTQxNmYtODhkMC1kOGQ2NDkxNGViMDIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I5M2E4M2RjLWU5MTAtNDE2Zi04
OGQwLWQ4ZDY0OTE0ZWIwMi9iOTNhODNkYy1lOTEwLTQxNmYtODhkMC1kOGQ2NDkx
NGViMDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAKi+6gDBAKsUiQwDgQCAAIwCAMGBCYC/sUAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD16DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwkrD17qD+CnhMuatZ
pNYTjizaXHwajgA4XBmYb/7wndjTnNKXCzKkxhtgF+q8ThDqOzQU1kP8bFb0xBnG
5OZIhKNNa4ufxOjq+hvgKvEJ1fQYecBY9wPd+tVRsaWNi9SC9WIicahUldBADgfX
YrMEoJ5OEWmaYs/9KJvBPKZpwCugCSm9zDUNnka+i3cFROcglY9kUXwgcArIrkSf
QfE/iXydAKn0xfXSGvahZ0/IG5X2YqI42E+kjrlG0a7X/i3HlNintq4uxjj/4kvh
4PwAPgkEUixNd6kqMoCFPyj0ogg0E5LX4tqFCVLqZ4qwm5UZ84tD252jvYFSL7N9
KsxD
-----END CERTIFICATE-----
Generated at Wed Feb 21 21:59:54 2024 by rpki-client on console-ams.rpki-client.org