Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51.cer
File:                     2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51.cer (raw, json)
Hash identifier:          Py5cTmQ3yvOOsS4y1G3IUcLnc/ySbjGPP/sqAzcIG9w=
Subject key identifier:   A9:E6:44:E6:E2:C8:B2:4F:DE:A7:74:1E:75:40:08:6D:94:14:11:B8
Authority key identifier: 00:D5:D8:DA:5E:21:5C:F4:FF:40:42:B5:19:B4:50:5C:22:4B:D1:57
Certificate issuer:       /CN=04b24da1-11ab-48ad-a03f-6b7832a569c8
Certificate serial:       010D0C9F43285845ACE522761339F8593E5D75E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/A9E644E6E2C8B24FDEA7741E7540086D941411B8.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 26 Apr 2024 16:06:47 +0000
Certificate not after:    Thu 30 Jul 2026 16:06:47 +0000
Subordinate resources:    AS: 36680
                          IP: 23.176.184.0/24
                          IP: 2602:f915::/40

Validation:               Failed, certificate revoked on Wed 29 May 2024 13:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:e5:22:76:13:39:f8:59:3e:5d:75:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b24da1-11ab-48ad-a03f-6b7832a569c8
        Validity
            Not Before: Apr 26 16:06:47 2024 GMT
            Not After : Jul 30 16:06:47 2026 GMT
        Subject: CN=2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:8e:cb:fe:67:e5:34:3a:0a:e6:0b:0f:7a:
                    1d:6a:cd:45:3e:9c:07:3a:3e:a7:a6:2f:3a:85:91:
                    4d:7d:10:d8:de:a1:6d:4c:34:20:7c:f5:87:b6:aa:
                    f8:e6:25:8a:11:1c:05:13:76:cf:27:25:28:60:53:
                    9b:86:33:b2:88:10:73:f9:5d:00:ac:0f:09:29:20:
                    bd:83:96:94:76:80:7c:f4:6e:ea:a8:76:17:82:75:
                    5b:d9:05:e3:c9:df:fb:73:94:1d:c9:2d:cc:c2:9f:
                    75:1c:70:ef:37:1b:8d:16:d9:58:d6:23:fd:6d:fb:
                    60:cd:c8:29:40:bb:1f:8a:18:ac:7e:4d:46:ab:d8:
                    2f:0d:3d:f2:9a:6a:db:3b:67:a4:0f:d8:68:6f:b0:
                    07:fe:80:ad:a3:80:e8:c2:03:d5:0f:c7:f9:5b:dc:
                    20:b8:15:33:4f:35:1d:72:e3:f7:c6:a9:c6:3f:91:
                    86:ac:76:49:ed:83:42:b2:c8:11:99:02:48:00:5c:
                    36:c7:75:cd:0c:d8:b9:1c:f5:89:13:be:7a:b7:ea:
                    b2:63:83:2b:69:2a:9f:10:c6:85:bb:7f:a9:da:21:
                    23:cb:99:dc:b8:76:62:8f:0b:66:d6:b5:08:a7:31:
                    14:3a:63:24:fd:d8:46:58:44:85:ec:19:b8:c4:5e:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E6:44:E6:E2:C8:B2:4F:DE:A7:74:1E:75:40:08:6D:94:14:11:B8
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/A9E644E6E2C8B24FDEA7741E7540086D941411B8.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.crl

            X509v3 Authority Key Identifier:
                keyid:00:D5:D8:DA:5E:21:5C:F4:FF:40:42:B5:19:B4:50:5C:22:4B:D1:57

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.184.0/24
                IPv6:
                  2602:f915::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36680

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:20:98:d0:c8:ed:a1:15:41:09:56:2f:9c:a3:cb:d5:31:f9:
         9b:ee:62:20:ea:f0:e0:b6:a7:35:1d:62:d2:27:8a:e3:1d:9e:
         a7:11:2b:b5:e3:e5:69:9f:43:0d:4d:c5:ef:fc:4a:5d:10:66:
         c3:a1:ad:54:1a:38:77:aa:fc:1a:86:ec:75:db:55:b9:81:8c:
         39:f7:c8:37:ce:c8:bb:c6:d1:37:29:92:8e:17:2d:c1:9a:d7:
         dc:9d:7b:d9:0c:9d:fb:ab:bd:c5:86:e0:f9:28:74:7b:15:ad:
         26:0f:95:da:a6:14:37:ea:4a:39:19:8c:c3:08:c3:a0:ee:43:
         c1:48:bf:88:d2:1c:53:b5:80:5c:f3:14:69:36:32:5b:46:e6:
         01:dc:28:88:ee:af:fb:dc:35:84:bb:8b:0f:f5:39:10:b9:e1:
         96:bf:ed:74:00:23:86:85:86:be:79:32:fb:11:d6:2c:ef:d4:
         19:65:4c:1a:14:f1:88:33:3c:fa:85:74:db:9b:ee:f8:4b:d4:
         62:a7:c6:e1:78:76:b3:8c:7c:b7:31:20:ca:82:4c:f4:1d:be:
         97:aa:55:9d:57:17:0e:30:a5:a2:fc:ee:d7:9e:26:e6:f5:3e:
         26:52:fd:dc:86:3c:47:f7:12:d7:7d:a4:62:e9:c1:71:4b:42:
         f6:a8:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:04 2024 by rpki-client on console-ams.rpki-client.org