Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e45e553-c35b-440c-b6f0-30564492a788.cer
File:                     2e45e553-c35b-440c-b6f0-30564492a788.cer (raw, json)
Hash identifier:          sb5vgn5UereC5IhAk0EViCNDlttP93AM8RFc38jGACI=
Subject key identifier:   17:B0:26:FA:49:3E:24:4E:75:50:CA:68:14:68:90:2C:BA:47:67:15
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D209E8E52AB7E6DB997628600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e45e553-c35b-440c-b6f0-30564492a788/2e45e553-c35b-440c-b6f0-30564492a788.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e45e553-c35b-440c-b6f0-30564492a788/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 04 Mar 2022 19:55:55 +0000
Certificate not after:    Thu 04 Mar 2032 19:55:55 +0000
Subordinate resources:    AS: 11588
                          AS: 18607
                          AS: 20446
                          AS: 29798
                          AS: 33438
                          IP: 69.16.128.0 -- 69.16.144.255
                          IP: 69.16.146.0/24
                          IP: 69.16.148.0 -- 69.16.156.255
                          IP: 69.16.158.0 -- 69.16.171.255
                          IP: 69.16.173.0 -- 69.16.191.255
                          IP: 74.209.128.0/20
                          IP: 205.185.194.0 -- 205.185.198.255
                          IP: 205.185.200.0 -- 205.185.208.255
                          IP: 205.185.210.0 -- 205.185.213.255
                          IP: 205.185.215.0 -- 205.185.217.255
                          IP: 205.185.219.0 -- 205.185.220.255
                          IP: 209.197.0.0/19
                          IP: 2001:1938::/32

Validation:               Failed, certificate revoked on Fri 06 May 2022 18:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:20:9e:8e:52:ab:7e:6d:b9:97:62:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar  4 19:55:55 2022 GMT
            Not After : Mar  4 19:55:55 2032 GMT
        Subject: CN=2e45e553-c35b-440c-b6f0-30564492a788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:41:5b:6f:aa:56:04:c2:4e:c2:e2:1a:df:
                    a9:d8:62:dc:ee:e9:44:17:b3:39:d2:01:80:d4:a8:
                    ef:5f:ba:14:87:f1:de:f4:27:89:0f:3b:e3:6d:6e:
                    1d:5a:e9:73:76:31:07:1f:a3:d5:10:59:70:a0:61:
                    46:f8:17:f7:63:30:46:21:02:54:c4:ba:ff:34:05:
                    84:29:2f:4c:b0:a6:a9:aa:16:bb:04:53:1b:fa:e9:
                    39:b6:63:f2:31:cd:a3:fb:5d:af:78:87:0e:db:34:
                    bf:ad:8f:65:79:83:3c:cb:c6:a3:a6:00:08:0f:dc:
                    77:7d:9a:14:31:47:43:db:c3:78:44:60:ae:90:f7:
                    a6:24:18:59:c0:92:48:7b:e2:28:02:68:05:04:80:
                    65:da:1d:12:5b:e5:f3:23:94:cf:a2:f7:fb:dc:e1:
                    70:8c:6d:cc:7d:27:ff:b5:01:54:17:0b:55:25:87:
                    a0:4c:3e:fd:cb:3b:21:30:d7:63:e0:f3:b2:b1:3c:
                    72:39:26:4d:71:8c:38:5c:c4:c1:29:63:64:eb:cc:
                    bc:c5:bb:98:61:3e:6b:59:19:fd:1a:35:ac:7c:37:
                    aa:54:5b:95:44:33:2f:86:31:1a:1c:11:19:3e:31:
                    12:9d:5e:5b:93:91:b2:c0:c0:3f:1e:17:31:d8:00:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B0:26:FA:49:3E:24:4E:75:50:CA:68:14:68:90:2C:BA:47:67:15
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e45e553-c35b-440c-b6f0-30564492a788/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e45e553-c35b-440c-b6f0-30564492a788/2e45e553-c35b-440c-b6f0-30564492a788.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.16.128.0-69.16.144.255
                  69.16.146.0/24
                  69.16.148.0-69.16.156.255
                  69.16.158.0-69.16.171.255
                  69.16.173.0-69.16.191.255
                  74.209.128.0/20
                  205.185.194.0-205.185.198.255
                  205.185.200.0-205.185.208.255
                  205.185.210.0-205.185.213.255
                  205.185.215.0-205.185.217.255
                  205.185.219.0-205.185.220.255
                  209.197.0.0/19
                IPv6:
                  2001:1938::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11588
                  18607
                  20446
                  29798
                  33438

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1a:ff:b2:69:fe:ec:ec:b5:f3:c8:3d:71:54:e9:b9:78:42:
         8c:46:c6:bb:55:66:e9:87:49:dc:08:61:be:c8:91:cf:bf:79:
         2d:37:e4:84:fd:b2:43:9c:aa:11:89:0f:0e:3d:09:be:87:e4:
         03:04:27:f3:c5:68:be:77:e0:ec:8c:1b:c7:ac:70:5e:84:bb:
         6d:80:a7:31:fd:92:40:45:91:7c:c8:9d:ff:6b:bc:01:72:2e:
         c4:e7:01:26:d3:44:93:4c:ea:40:f2:14:b0:f0:26:f5:39:23:
         df:6e:b8:88:e8:57:d7:c7:33:ca:e1:2b:7d:5b:2e:19:17:5a:
         55:b0:3e:01:85:c9:52:0e:e1:4e:4f:5d:cc:96:9c:81:a1:ce:
         d6:1f:15:a2:ac:30:57:dc:e8:67:ce:d1:3d:eb:cb:a8:64:9e:
         d6:c7:f2:37:f7:c5:5d:aa:b9:3a:4d:ad:05:6e:77:a9:3f:99:
         ea:2f:47:ef:43:28:b7:fc:2e:44:92:85:a4:6d:3f:a2:82:53:
         46:e1:1a:98:aa:a4:b1:29:21:f7:71:23:1d:65:3f:24:a4:1d:
         e5:c8:9b:ba:5c:37:0f:4a:7f:17:08:6a:57:cb:f4:da:59:b5:
         4c:3a:a7:a6:54:60:4e:48:5d:f8:40:4c:41:b9:c7:6a:d4:b4:
         28:bb:d7:1c
-----BEGIN CERTIFICATE-----
MIIHtzCCBp+gAwIBAgIUAQ0Mn0MoWD0gno5Sq35tuZdihgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIyMDMwNDE5NTU1NVoXDTMyMDMwNDE5NTU1NVowLzEtMCsGA1UEAxMk
MmU0NWU1NTMtYzM1Yi00NDBjLWI2ZjAtMzA1NjQ0OTJhNzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWFBW2+qVgTCTsLiGt+p2GLc7ulEF7M50gGA
1KjvX7oUh/He9CeJDzvjbW4dWulzdjEHH6PVEFlwoGFG+Bf3YzBGIQJUxLr/NAWE
KS9MsKapqha7BFMb+uk5tmPyMc2j+12veIcO2zS/rY9leYM8y8ajpgAID9x3fZoU
MUdD28N4RGCukPemJBhZwJJIe+IoAmgFBIBl2h0SW+XzI5TPovf73OFwjG3MfSf/
tQFUFwtVJYegTD79yzshMNdj4POysTxyOSZNcYw4XMTBKWNk68y8xbuYYT5rWRn9
GjWsfDeqVFuVRDMvhjEaHBEZPjESnV5bk5GywMA/Hhcx2ABVTwIDAQABo4IEyTCC
BMUwHQYDVR0OBBYEFBewJvpJPiROdVDKaBRokCy6R2cVMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y
ZTQ1ZTU1My1jMzViLTQ0MGMtYjZmMC0zMDU2NDQ5MmE3ODgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJlNDVlNTUzLWMzNWItNDQwYy1i
NmYwLTMwNTY0NDkyYTc4OC8yZTQ1ZTU1My1jMzViLTQ0MGMtYjZmMC0zMDU2NDQ5
MmE3ODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgbwGCCsGAQUF
BwEHAQH/BIGsMIGpMIGXBAIAATCBkDAMAwQHRRCAAwQARRCQAwQARRCSMAwDBAJF
EJQDBABFEJwwDAMEAUUQngMEAkUQqDAMAwQARRCtAwQGRRCAAwQEStGAMAwDBAHN
ucIDBADNucYwDAMEA825yAMEAM250DAMAwQBzbnSAwQBzbnUMAwDBADNudcDBAHN
udgwDAMEAM252wMEAM253AMEBdHFADANBAIAAjAHAwUAIAEZODAqBggrBgEFBQcB
CAEB/wQbMBmgFzAVAgItRAICSK8CAk/eAgJ0ZgIDAIKeMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJAa/7Jp
/uzstfPIPXFU6bl4QoxGxrtVZumHSdwIYb7Ikc+/eS035IT9skOcqhGJDw49Cb6H
5AMEJ/PFaL534OyMG8escF6Eu22ApzH9kkBFkXzInf9rvAFyLsTnASbTRJNM6kDy
FLDwJvU5I99uuIjoV9fHM8rhK31bLhkXWlWwPgGFyVIO4U5PXcyWnIGhztYfFaKs
MFfc6GfO0T3ry6hkntbH8jf3xV2quTpNrQVud6k/meovR+9DKLf8LkSShaRtP6KC
U0bhGpiqpLEpIfdxIx1lPySkHeXIm7pcNw9KfxcIalfL9NpZtUw6p6ZUYE5IXfhA
TEG5x2rUtCi71xw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:09 2024 by rpki-client on console-ams.rpki-client.org