Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab.cer
File:                     ef0b1b44-6f91-4e5d-a42c-54259da394ab.cer (raw, json)
Hash identifier:          IGskdXd24A1l0AACH9KCn1aecdBjGMbr2NOPqaklJq8=
Subject key identifier:   1B:98:1D:18:FD:64:C4:44:8D:CF:25:CA:BB:A5:70:87:31:12:91:AF
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285847484918E23B9421D274C94800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/ef0b1b44-6f91-4e5d-a42c-54259da394ab.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 21 Sep 2024 00:45:26 +0000
Certificate not after:    Fri 25 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 393990
                          IP: 192.33.167.0/24
                          IP: 192.160.255.0/24
                          IP: 2620:120:8000::/44

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 11:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:49:18:e2:3b:94:21:d2:74:c9:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep 21 00:45:26 2024 GMT
            Not After : Dec 25 01:45:26 2026 GMT
        Subject: CN=ef0b1b44-6f91-4e5d-a42c-54259da394ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:45:69:de:b4:81:74:e6:84:c1:d8:27:ed:
                    57:02:45:6a:81:d0:27:16:6b:ae:93:30:37:76:08:
                    46:60:30:a5:04:ec:cc:5b:17:4e:45:90:fc:39:76:
                    72:08:b5:b6:ed:bd:7f:6c:0f:2b:c8:39:3b:c5:06:
                    a3:b3:18:1d:d2:4e:ec:24:83:2e:35:9a:f8:48:26:
                    be:dc:c9:f2:ac:e6:4a:5d:d3:44:37:5d:63:43:c7:
                    6c:88:61:15:1b:56:41:f6:bc:bf:69:ae:9e:ca:05:
                    d5:9c:86:54:22:76:a7:57:70:d9:8e:4e:f0:d3:d0:
                    cd:6d:b2:37:95:95:50:f3:2a:d6:d1:22:ff:c7:5f:
                    5d:0c:65:4a:d8:7b:47:21:38:7b:ce:65:43:08:a9:
                    7f:d3:02:95:db:a1:5f:59:51:90:80:fc:d9:ef:f9:
                    c1:27:11:8f:47:0d:bc:b4:09:f8:9e:23:65:2b:91:
                    d1:bf:f0:56:a7:58:1c:29:5e:a4:56:b8:e7:7f:50:
                    0e:fb:fe:d5:7c:b2:b8:1d:f3:95:8b:e5:3c:a7:d4:
                    07:21:47:22:88:1b:3e:97:62:b8:60:62:95:e7:57:
                    80:71:ed:fd:c9:fc:62:84:0f:b0:d9:63:f8:91:ca:
                    fe:e7:59:be:19:41:00:6c:a6:c2:ed:32:76:38:66:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:98:1D:18:FD:64:C4:44:8D:CF:25:CA:BB:A5:70:87:31:12:91:AF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/ef0b1b44-6f91-4e5d-a42c-54259da394ab.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.167.0/24
                  192.160.255.0/24
                IPv6:
                  2620:120:8000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393990

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f0:26:be:d8:c0:73:4f:2a:e9:8b:e1:78:07:a9:f7:7a:aa:
         f9:bd:12:12:a1:7a:37:f5:5a:53:1c:80:d9:ce:de:b6:76:67:
         83:9a:81:b5:08:fc:61:2e:63:fa:bb:d4:b8:93:99:31:20:93:
         01:83:d9:d5:83:b7:0c:94:c8:6b:cc:e3:46:51:ac:17:67:c6:
         08:50:63:d0:a7:30:3c:ea:a3:14:8e:14:43:c1:5a:37:c8:98:
         0d:b2:36:b5:26:28:14:a6:fa:d2:06:36:64:57:6f:4f:a0:82:
         3b:a6:aa:a3:8d:52:df:76:33:8e:24:a7:3d:17:ff:fd:be:25:
         58:7f:51:34:3f:2c:f7:47:aa:7c:c7:d3:ab:96:90:40:da:b1:
         1f:9c:c4:12:60:84:cb:0b:bc:49:af:30:ee:16:90:8f:0f:2e:
         86:d1:52:74:f2:1d:86:13:7f:6e:b3:8c:90:c3:5b:43:81:de:
         d6:f1:9e:e1:d4:b3:86:ef:7e:10:6e:da:ab:c4:95:53:e8:07:
         b3:e1:42:5f:06:1a:52:cc:4a:f9:1f:67:c6:10:c8:48:5e:52:
         19:77:a1:be:c8:bc:86:4e:4c:03:8d:38:92:f1:27:09:bb:50:
         60:8c:6a:b1:eb:15:b0:d7:13:34:13:72:bc:9c:f9:60:eb:d0:
         01:66:11:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 16:00:44 2024 by rpki-client on console-ams.rpki-client.org