Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca.cer
File:                     1265cc41-1464-4ca3-818d-917a36c8afca.cer (raw, json)
Hash identifier:          pKpkOUsy7RMT5eoiM+6ue49rrfwL+wMrLWMy6GssqjY=
Subject key identifier:   33:F2:2A:43:E3:17:30:45:4E:10:FE:49:6A:9A:EC:86:29:34:ED:C3
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285847EC2F0DA929413C33EF92DA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/1265cc41-1464-4ca3-818d-917a36c8afca.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Nov 2024 17:45:32 +0000
Certificate not after:    Sun 26 Apr 2026 00:45:20 +0000
Subordinate resources:    IP: 23.135.32.0/24
                          IP: 158.51.80.0/22
                          IP: 170.39.168.0/22

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 20:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ec:2f:0d:a9:29:41:3c:33:ef:92:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 18 17:45:32 2024 GMT
            Not After : Apr 26 00:45:20 2026 GMT
        Subject: CN=1265cc41-1464-4ca3-818d-917a36c8afca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:52:a9:ec:0e:3d:5c:6d:d6:5e:7b:d0:c1:5a:
                    eb:1b:50:cd:35:2e:9f:84:90:7a:a0:22:b4:8d:36:
                    e2:0b:da:00:d5:42:35:67:ba:65:2b:8f:16:57:09:
                    df:8b:22:5d:f5:6c:13:a6:07:6a:5d:30:be:96:63:
                    ea:da:04:4e:f5:9e:f0:90:cf:88:e8:6d:ce:6a:30:
                    66:cf:bd:0e:e1:d5:8e:dd:60:7e:2b:44:39:b0:91:
                    7c:5a:c3:d2:c3:69:61:19:0b:72:08:36:f5:e6:83:
                    2a:09:96:87:81:43:d4:e7:72:bb:54:30:6a:bc:5a:
                    14:5c:cf:bf:2f:83:04:94:8f:74:b2:07:cb:09:18:
                    dd:1d:7e:ab:6d:a3:c1:e9:9e:e8:e2:0b:d6:f6:c5:
                    6d:8c:2d:f1:e5:d0:ee:0a:63:18:05:4c:0f:01:6c:
                    f7:20:5a:ae:44:e9:b0:44:3a:af:42:58:8d:95:3f:
                    c1:fe:62:4a:ed:21:5a:45:2a:e3:51:72:77:08:f1:
                    23:79:33:87:0e:f1:2d:26:ed:1b:93:f3:fd:4d:6e:
                    a4:e0:c6:24:8d:89:3b:e4:de:2c:53:f4:34:0c:85:
                    ed:4c:92:ba:66:bd:9e:95:58:41:62:67:1a:57:07:
                    59:fe:02:e3:b1:96:77:fd:94:32:0c:5a:ed:75:46:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:2A:43:E3:17:30:45:4E:10:FE:49:6A:9A:EC:86:29:34:ED:C3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/1265cc41-1464-4ca3-818d-917a36c8afca.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.32.0/24
                  158.51.80.0/22
                  170.39.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:1d:43:3e:b7:e3:af:4b:27:c7:a4:8a:8e:f0:f4:b5:56:53:
         ae:1d:a8:7d:99:4f:c6:83:b9:9a:3a:16:90:e0:83:fe:68:c5:
         ca:50:42:15:90:34:4a:02:c6:db:f4:c4:27:b4:ea:cd:59:c4:
         82:b2:cd:79:b4:b3:11:81:5a:4e:3b:bf:e8:0d:88:f1:e5:99:
         0a:f4:4a:eb:53:b7:9c:c6:38:f3:47:d3:ab:c2:24:01:e1:b1:
         71:01:da:df:67:b3:96:8c:d4:72:16:28:05:5e:af:4a:e1:6e:
         fa:12:79:28:9c:fa:65:d3:09:56:2e:3d:09:06:85:1a:60:de:
         be:2d:15:e8:bc:60:3e:1b:63:98:42:02:9a:20:34:10:9c:7a:
         0d:6b:30:12:0f:40:8e:88:37:d3:7e:44:c7:dc:7e:fd:72:bd:
         78:cf:49:41:1d:dd:05:52:79:e7:63:66:f2:4c:1c:53:58:74:
         b0:82:bc:07:f2:2c:9e:51:54:81:72:47:a9:01:94:fd:51:e7:
         26:b3:27:b5:73:40:26:7e:37:2e:f1:e4:fb:01:96:84:8a:cc:
         ef:18:91:76:56:34:ad:ef:6d:b9:93:07:37:78:1b:9c:a0:4b:
         42:53:86:8d:82:03:da:16:21:5c:c7:ae:39:a8:85:5f:d0:3b:
         a7:05:18:1b
-----BEGIN CERTIFICATE-----
MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEfsLw2pKUE8M++S2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MTExODE3NDUzMloXDTI2MDQyNjAwNDUyMFowLzEtMCsGA1UEAxMk
MTI2NWNjNDEtMTQ2NC00Y2EzLTgxOGQtOTE3YTM2YzhhZmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21Kp7A49XG3WXnvQwVrrG1DNNS6fhJB6oCK0
jTbiC9oA1UI1Z7plK48WVwnfiyJd9WwTpgdqXTC+lmPq2gRO9Z7wkM+I6G3OajBm
z70O4dWO3WB+K0Q5sJF8WsPSw2lhGQtyCDb15oMqCZaHgUPU53K7VDBqvFoUXM+/
L4MElI90sgfLCRjdHX6rbaPB6Z7o4gvW9sVtjC3x5dDuCmMYBUwPAWz3IFquROmw
RDqvQliNlT/B/mJK7SFaRSrjUXJ3CPEjeTOHDvEtJu0bk/P9TW6k4MYkjYk75N4s
U/Q0DIXtTJK6Zr2elVhBYmcaVwdZ/gLjsZZ3/ZQyDFrtdUZ5BQIDAQABo4IECzCC
BAcwHQYDVR0OBBYEFDPyKkPjFzBFThD+SWqa7IYpNO3DMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x
MjY1Y2M0MS0xNDY0LTRjYTMtODE4ZC05MTdhMzZjOGFmY2EvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzEyNjVjYzQxLTE0NjQtNGNhMy04
MThkLTkxN2EzNmM4YWZjYS8xMjY1Y2M0MS0xNDY0LTRjYTMtODE4ZC05MTdhMzZj
OGFmY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwKwYIKwYBBQUH
AQcBAf8EHDAaMBgEAgABMBIDBAAXhyADBAKeM1ADBAKqJ6gwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcR1D
Prfjr0snx6SKjvD0tVZTrh2ofZlPxoO5mjoWkOCD/mjFylBCFZA0SgLG2/TEJ7Tq
zVnEgrLNebSzEYFaTju/6A2I8eWZCvRK61O3nMY480fTq8IkAeGxcQHa32ezlozU
chYoBV6vSuFu+hJ5KJz6ZdMJVi49CQaFGmDevi0V6LxgPhtjmEICmiA0EJx6DWsw
Eg9Ajog3035Ex9x+/XK9eM9JQR3dBVJ552Nm8kwcU1h0sIK8B/IsnlFUgXJHqQGU
/VHnJrMntXNAJn43LvHk+wGWhIrM7xiRdlY0re9tuZMHN3gbnKBLQlOGjYID2hYh
XMeuOaiFX9A7pwUYGw==
-----END CERTIFICATE-----
Generated at Tue Nov 19 00:19:23 2024 by rpki-client on console-ams.rpki-client.org