Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f.cer
File:                     13b05528-d516-4df9-90c8-05d780d1036f.cer (raw, json)
Hash identifier:          K39OQ06tfb61eYoutEvPuYGtMX7rMX55CJZ5ThvV/oE=
Subject key identifier:   17:9D:E0:20:0A:6F:07:76:B7:6A:FE:4F:3C:EE:75:A2:E9:9E:97:C8
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D8A39B29C83246C00387D6100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/13b05528-d516-4df9-90c8-05d780d1036f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 Dec 2021 16:17:18 +0000
Certificate not after:    Sat 13 Dec 2031 16:17:18 +0000
Subordinate resources:    AS: 62853
                          IP: 23.133.8.0/24
                          IP: 216.146.28.0/22
                          IP: 2602:fbf6::/36

Validation:               Failed, certificate revoked on Tue 21 Jun 2022 16:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8a:39:b2:9c:83:24:6c:00:38:7d:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec 13 16:17:18 2021 GMT
            Not After : Dec 13 16:17:18 2031 GMT
        Subject: CN=13b05528-d516-4df9-90c8-05d780d1036f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:17:51:35:14:d0:77:2b:e0:15:bf:6f:ea:
                    12:6a:6a:14:c4:e8:8e:a1:26:5f:4c:0c:fd:79:36:
                    af:d8:f2:1c:db:f9:05:05:11:b1:bd:5e:bd:77:8c:
                    e6:e4:31:59:7f:04:31:2a:dd:3b:0c:07:c4:a4:a7:
                    75:6f:57:a2:fa:10:cb:db:fc:cd:4a:d9:0c:ba:15:
                    9a:89:a3:18:06:e7:22:4e:06:95:bc:4a:c6:09:26:
                    ee:cb:31:3a:f7:45:78:fb:d0:37:4f:47:25:43:59:
                    68:cf:3c:a5:b1:48:d1:9f:24:4f:c6:ec:ea:63:ea:
                    79:76:fe:0d:f0:6f:e8:91:92:85:43:c8:f1:20:9a:
                    74:9a:c2:a8:c4:a2:62:84:57:1d:f1:8e:e6:16:64:
                    27:3c:8d:1b:ae:b5:fb:84:cf:d3:ad:bc:49:49:08:
                    7e:da:de:24:b1:4b:37:af:a1:ef:c9:9b:0d:2b:d4:
                    b2:cf:a9:2a:8c:b6:b1:b6:75:9b:70:2d:85:eb:57:
                    26:46:ec:bd:51:b3:6c:b9:0d:8f:d7:68:6e:68:d1:
                    41:e9:4c:f4:fc:75:a8:be:18:13:e0:c0:c9:7f:ea:
                    50:52:3d:06:0f:6c:af:85:ca:39:02:c1:b7:36:a2:
                    38:d0:75:52:c0:16:bf:d4:b0:f7:02:37:5e:04:31:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9D:E0:20:0A:6F:07:76:B7:6A:FE:4F:3C:EE:75:A2:E9:9E:97:C8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/13b05528-d516-4df9-90c8-05d780d1036f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.8.0/24
                  216.146.28.0/22
                IPv6:
                  2602:fbf6::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62853

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:0a:bb:6e:f5:95:0a:27:0d:ee:d9:8d:92:c8:93:38:3c:d3:
         f4:c3:98:2f:80:f0:0c:3d:af:fb:6b:0e:45:9a:1f:db:9c:19:
         5e:eb:30:b1:17:4e:6d:2c:b7:33:12:e4:80:f1:b1:15:f1:bb:
         6a:fe:8d:c6:28:d2:f5:6a:f9:82:b1:8e:38:c6:82:29:d1:55:
         ec:23:c8:ea:ce:3b:7c:86:c7:85:35:f3:e0:f8:82:ea:6f:19:
         3f:24:62:3a:83:46:88:03:d4:98:e9:d1:54:9e:cb:7d:7c:64:
         22:4f:ee:70:90:8b:99:4e:b5:ef:fb:81:ce:81:21:52:c3:f5:
         21:4a:06:b9:85:af:83:cc:f6:59:16:38:e8:63:ec:62:92:bc:
         e8:7c:c8:e6:29:01:d0:13:04:82:88:45:1d:ab:51:1e:0d:70:
         c3:e2:89:89:7d:f6:4b:e1:19:fe:28:68:7e:7c:73:99:f9:23:
         5b:85:89:8a:1b:4c:f8:f5:c9:79:c9:54:d1:ea:ae:da:7d:ee:
         49:ba:47:67:8d:68:bf:39:54:32:5a:c2:8d:59:e9:d0:5b:a4:
         ff:62:aa:5b:04:37:b8:fb:00:f2:0d:e8:ec:c6:12:a4:30:85:
         d4:37:72:c3:23:08:67:b7:87:4a:4c:79:b7:5c:63:d7:28:36:
         d1:cc:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:13 2024 by rpki-client on console-fra.rpki-client.org