Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c.cer
File:                     0ef8f014-b9f1-4fd0-90e9-86951c39e46c.cer (raw, json)
Hash identifier:          LBs384md0UEeSNESfcRHRKPk/jlFiGn1veUYFY9Mmeo=
Subject key identifier:   12:F0:C5:3F:85:B4:D0:F2:09:75:61:81:1C:7A:26:AE:44:75:62:25
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285845685CCFB4BD5382886A162680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c/0ef8f014-b9f1-4fd0-90e9-86951c39e46c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Apr 2024 02:57:09 +0000
Certificate not after:    Mon 06 Jul 2026 02:57:09 +0000
Subordinate resources:    AS: 54454
                          IP: 192.253.208.0/22
                          IP: 192.253.216.0/21

Validation:               Failed, certificate revoked on Mon 20 May 2024 19:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:5c:cf:b4:bd:53:82:88:6a:16:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr  2 02:57:09 2024 GMT
            Not After : Jul  6 02:57:09 2026 GMT
        Subject: CN=0ef8f014-b9f1-4fd0-90e9-86951c39e46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:89:d7:7e:57:e7:c6:91:67:18:0e:75:98:88:
                    dc:cb:c9:83:86:4d:0d:fb:85:8e:29:83:45:18:d2:
                    77:00:08:dc:18:b9:ea:27:a0:33:98:e7:fd:00:6a:
                    0c:6e:81:78:44:0e:e0:8e:dc:9f:20:51:f0:39:69:
                    f7:a9:da:a0:cc:4f:9c:e2:3f:37:21:49:bc:47:f4:
                    86:1c:1e:b7:74:95:8a:61:e0:21:70:a6:3a:0e:8f:
                    ea:78:bd:26:43:d3:42:1b:1d:ae:48:e2:74:bf:6e:
                    59:4d:57:ea:f0:71:b4:50:fd:fd:59:6f:10:cd:ab:
                    47:6c:ec:86:fe:88:19:bd:4e:bf:77:61:36:5d:52:
                    ae:ff:49:80:12:a7:08:e1:d4:49:a9:4b:cb:db:71:
                    ee:ab:cb:68:8f:ca:d5:2e:bc:01:89:c7:2a:8c:bb:
                    14:77:fb:56:e3:8d:35:8b:0d:ce:6c:f9:19:5d:74:
                    0a:3d:ad:5d:a1:51:12:ad:bb:fd:d9:c9:79:ca:d5:
                    cc:a4:4d:51:8f:d5:78:22:6c:3a:2a:e6:39:d7:13:
                    2a:b4:50:3a:71:8b:f2:d4:92:5a:82:f2:2a:54:0b:
                    67:6b:07:70:3d:3c:d5:32:cd:60:2c:ce:c6:24:c8:
                    f2:33:e8:81:43:7d:ca:e0:c2:b1:48:30:ec:6c:77:
                    b7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F0:C5:3F:85:B4:D0:F2:09:75:61:81:1C:7A:26:AE:44:75:62:25
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c/0ef8f014-b9f1-4fd0-90e9-86951c39e46c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.253.208.0/22
                  192.253.216.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54454

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:23:48:2b:23:f9:d5:31:9b:94:e3:ef:5c:a5:a2:d7:09:12:
         32:76:c7:5f:7e:46:a2:17:9b:6c:d6:75:f6:00:b0:4d:78:a2:
         53:b9:e0:76:39:81:b7:46:ac:18:9b:01:39:a4:e7:d2:50:c6:
         cb:a3:79:d4:4d:4e:00:a9:74:0f:ee:43:8d:fc:ea:1e:6c:78:
         df:cb:c8:67:34:6a:d2:db:5a:70:ba:6e:d8:47:58:51:e5:c5:
         d3:c3:d1:68:1f:8e:e0:7f:66:ac:95:ba:09:86:15:24:92:39:
         20:f5:ee:09:b0:31:f5:5d:35:ac:c0:7e:5d:19:e0:9a:0b:04:
         7d:33:88:78:24:00:cf:7b:f8:65:6a:d5:58:81:1b:83:8c:65:
         4d:c7:af:58:a1:07:55:ce:f3:d3:b0:d9:7e:1c:43:5b:94:26:
         3b:31:70:7b:3b:76:7a:c4:97:de:5d:10:8b:dd:01:31:95:ca:
         93:b0:ca:32:94:09:ec:5c:fa:1b:41:e9:8d:c3:00:d3:a2:5f:
         18:5b:f9:c5:16:9c:ec:c5:dc:e9:fd:89:54:d2:9c:7c:3a:3a:
         7d:7b:ea:fb:36:f4:eb:80:ab:60:a4:33:15:1a:0a:e1:38:8b:
         8d:b8:b2:ae:cb:d4:50:de:03:a8:94:a2:3d:a7:86:c0:b8:6f:
         1d:27:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:08 2024 by rpki-client on console-fra.rpki-client.org