Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer
File:                     cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c.cer (raw, json)
Hash identifier:          uooLunx3zIJynoiaC/p3mGGR9lE/vKd+cxo+7L5IY6A=
Subject key identifier:   AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1
Authority key identifier: C2:74:66:F4:AA:8E:27:6B:41:02:F0:77:50:6C:65:56:40:29:EA:92
Certificate issuer:       /CN=c9ab27a6-7622-48ec-9e33-152bab2b4a2b
Certificate serial:       010D0C9F432858460C66ED6ED90617A72B6A9100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.cer
Manifest:                 rsync://rpki.co/repo/AS945/18/ACAAF041B8BE93E9AC0A06EBF59FDC21EC2340B1.mft
caRepository:             rsync://rpki.co/repo/AS945/18/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 30 May 2024 21:10:06 +0000
Certificate not after:    Wed 02 Sep 2026 21:10:06 +0000
Subordinate resources:    AS: 401111
                          IP: 2601:1d00::/28

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 05:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0c:66:ed:6e:d9:06:17:a7:2b:6a:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9ab27a6-7622-48ec-9e33-152bab2b4a2b
        Validity
            Not Before: May 30 21:10:06 2024 GMT
            Not After : Sep  2 21:10:06 2026 GMT
        Subject: CN=cf2c48300f7da7106ae74d27c73663aa107988a82ec18b221c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:20:a8:be:ee:60:7c:89:bc:3a:33:22:9c:
                    50:15:ad:c9:20:85:25:ad:84:70:10:e8:d1:07:58:
                    00:8e:13:45:60:0f:2b:3d:a6:50:0c:2b:6a:9a:1e:
                    00:8c:c9:45:cf:fe:9e:e5:12:bb:3b:a8:34:4e:a4:
                    3e:42:9c:4c:dd:ec:ea:ca:e4:22:b2:70:82:7c:88:
                    b1:47:f0:aa:3c:d3:91:d9:ee:8e:d9:3e:d8:d1:e7:
                    b5:41:02:b0:0a:0b:a5:80:64:c4:43:7d:d3:74:4f:
                    59:ea:10:6f:87:4b:6f:4e:6c:60:dd:6d:f1:68:82:
                    a2:f5:26:80:5c:5a:e9:32:7b:0b:3d:df:3b:66:42:
                    db:27:c4:5b:4c:6d:3a:69:b9:ad:45:ce:a4:24:de:
                    7c:37:bd:7f:29:a7:c7:cd:ba:51:aa:8e:d4:b2:87:
                    ac:20:8e:ce:2a:55:5d:04:fc:ce:c1:fc:23:8d:26:
                    c5:39:08:2e:5e:e2:47:57:10:3b:c5:bd:32:ab:47:
                    01:6c:cd:73:3a:05:84:1c:84:ee:24:7b:09:ca:12:
                    86:42:a6:d2:5a:fc:e2:9e:43:f7:9e:ea:94:4e:84:
                    bf:a1:93:94:62:46:3c:f2:8d:13:4a:e0:02:57:b1:
                    76:81:94:cb:45:26:71:d9:2a:1d:8c:57:16:12:cc:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AA:F0:41:B8:BE:93:E9:AC:0A:06:EB:F5:9F:DC:21:EC:23:40:B1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/18/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/18/ACAAF041B8BE93E9AC0A06EBF59FDC21EC2340B1.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.crl

            X509v3 Authority Key Identifier:
                keyid:C2:74:66:F4:AA:8E:27:6B:41:02:F0:77:50:6C:65:56:40:29:EA:92

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d00::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401111

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:65:c8:0e:ef:52:30:45:f1:30:b4:76:08:21:09:ef:10:1a:
         b5:b6:cd:1a:b8:35:e1:8e:a6:e8:de:19:ef:21:5a:6d:a4:43:
         e1:24:f9:49:dd:68:c3:cd:43:8b:8a:0e:5c:2d:ee:dc:04:c4:
         46:a7:c1:45:45:9c:a0:b3:bc:35:58:1b:93:7d:e2:f9:63:6e:
         ad:da:98:bb:c2:88:f7:80:fd:56:7b:40:72:d5:f6:b8:ae:56:
         5b:35:9e:7c:85:ed:dc:70:53:9e:ff:af:cd:39:7e:c4:87:7e:
         7f:dc:3b:05:ad:d9:00:61:3e:b7:11:fb:83:56:b1:c1:89:95:
         9c:33:45:43:2a:27:88:1a:11:f2:9a:51:59:7a:7c:96:9c:08:
         6c:08:d0:72:6e:99:2d:64:7a:80:91:9b:9a:2a:24:6f:26:aa:
         bb:83:5a:24:2f:13:29:00:8c:6c:ec:a0:43:81:ca:a2:0c:50:
         a9:96:24:40:d3:62:06:d8:19:84:33:1b:a9:2c:04:ac:a2:ae:
         c5:b6:94:5b:eb:f0:9f:c9:17:60:89:85:48:a9:fe:de:ac:11:
         1b:ca:67:f8:51:2b:7b:15:8a:e3:06:fc:59:c5:6e:d7:cf:4f:
         93:d1:5d:3f:01:9b:ce:ce:22:35:92:23:75:15:96:4f:0c:57:
         e6:27:b7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 06:05:19 2024 by rpki-client on console-fra.rpki-client.org