Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer
File:                     ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer (raw, json)
Hash identifier:          VTaCRNiNiqVLu1CrBWA9pMJV5hOriC77auLN9cAuDTQ=
Subject key identifier:   47:9F:29:66:0F:9E:05:B3:E7:2E:0C:85:B1:58:C5:87:0A:E0:E9:5B
Authority key identifier: D1:3B:DD:19:EF:FE:69:85:8D:23:DD:EE:60:C5:3B:01:81:31:81:9F
Certificate issuer:       /CN=2cd85896-beca-4cc9-8e09-9367b0ea9ea4
Certificate serial:       010D0C9F43285846E3801CB4D29553ADAF22B4F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/479F29660F9E05B3E72E0C85B158C5870AE0E95B.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 15 Aug 2024 22:19:38 +0000
Certificate not after:    Wed 18 Nov 2026 23:19:38 +0000
Subordinate resources:    AS: 11358
                          IP: 23.186.184.0/24
                          IP: 2602:f97e::/36

Validation:               Failed, certificate revoked on Sun 17 Nov 2024 00:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:80:1c:b4:d2:95:53:ad:af:22:b4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd85896-beca-4cc9-8e09-9367b0ea9ea4
        Validity
            Not Before: Aug 15 22:19:38 2024 GMT
            Not After : Nov 18 23:19:38 2026 GMT
        Subject: CN=ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:55:af:41:91:ac:28:68:c9:84:39:3d:00:
                    35:3b:ce:54:76:38:c3:16:0c:3b:94:c6:54:1c:cb:
                    c9:3a:36:e0:d7:52:f8:05:71:f4:35:c0:f0:a2:91:
                    7e:ad:41:33:4e:aa:fd:91:48:0c:bb:a3:0b:e2:ac:
                    a1:c1:d8:68:55:a1:92:5d:75:7d:bb:36:a2:78:25:
                    5b:13:3e:4d:9d:63:02:df:76:c8:6c:0b:05:f3:f5:
                    b2:3d:91:d2:aa:f3:da:4b:12:da:ea:45:33:50:83:
                    57:1f:01:44:42:d0:bd:b2:7a:93:0a:1b:f1:99:fb:
                    65:49:32:df:d4:ce:41:e7:7c:df:02:64:d6:f6:ca:
                    5a:80:4e:00:c5:96:d1:90:05:2c:48:22:7f:ad:fb:
                    44:bd:d8:7c:75:cd:99:87:66:a7:f2:94:c2:08:ea:
                    72:34:9c:7c:2d:2e:2b:96:f9:b6:75:f4:cc:1e:2e:
                    02:a2:40:0a:ec:9a:d8:a0:f1:2c:aa:20:1a:3b:3e:
                    0b:fd:84:ca:10:89:44:b1:85:2f:c1:c5:86:8e:f6:
                    38:5b:44:bf:7a:da:ca:25:ab:d6:2f:42:b1:12:5f:
                    98:78:70:81:b6:ca:49:a0:9f:40:8c:06:a5:31:f0:
                    f6:13:fb:22:9a:26:f6:30:c8:5a:bb:35:e5:84:21:
                    05:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9F:29:66:0F:9E:05:B3:E7:2E:0C:85:B1:58:C5:87:0A:E0:E9:5B
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/479F29660F9E05B3E72E0C85B158C5870AE0E95B.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3B:DD:19:EF:FE:69:85:8D:23:DD:EE:60:C5:3B:01:81:31:81:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.184.0/24
                IPv6:
                  2602:f97e::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11358

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3f:92:0a:24:3f:fb:ad:c5:ea:07:55:f0:b3:71:ad:20:a9:
         0b:cc:e8:08:9e:9c:fc:56:ec:42:68:bc:8f:13:54:a1:b0:83:
         16:7b:0e:2c:e3:3f:ec:29:9d:2e:17:fa:ab:b7:7f:e3:03:84:
         93:ac:28:ab:4f:37:81:cd:f8:1d:17:2d:00:fb:90:44:f9:67:
         a2:df:00:0b:2b:02:1b:02:2e:fe:3f:37:ee:35:11:40:a4:ed:
         3c:97:6e:68:71:6f:b2:93:f8:66:fd:b4:3f:43:53:69:8b:12:
         b3:08:0f:7b:3a:c2:63:8e:0c:81:50:70:bf:63:09:19:e8:1a:
         1c:4a:03:54:bc:40:14:6c:91:68:78:fe:76:95:61:f3:98:b3:
         6b:46:9d:a1:68:f3:f5:5b:2d:f8:fa:5a:0b:8a:94:a0:6d:19:
         90:af:63:d9:32:51:16:2a:37:22:29:a5:9e:39:a4:10:5e:c9:
         d6:b3:99:c4:57:6c:17:cc:ce:d2:40:93:b6:42:94:44:43:94:
         ba:3a:16:97:63:8b:bc:a8:56:dc:46:c8:7b:c8:1c:e7:aa:42:
         74:0f:16:42:5d:5a:7b:f0:51:a5:82:9e:b4:18:1b:26:1f:47:
         90:af:b5:db:6a:96:97:d4:02:b7:e0:7a:02:0e:eb:da:50:78:
         1f:e1:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 02:25:01 2024 by rpki-client on console-fra.rpki-client.org