Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db180b64125153f106415e2e3ef7311f0a42df79ea.cer
File:                     99a8a036db180b64125153f106415e2e3ef7311f0a42df79ea.cer (raw, json)
Hash identifier:          Tta2T4o/aI31xON46gGdENtdolanjoZwztAM2T4+bcU=
Subject key identifier:   C7:84:C6:6C:57:6C:24:CC:FC:12:68:B5:37:3A:FC:A0:DC:4D:0E:1C
Authority key identifier: 19:8E:1D:FF:50:DE:07:BA:C9:42:5C:7C:98:B6:1B:34:4B:58:E0:01
Certificate issuer:       /CN=37fe8a4a-3fd3-4ba0-9423-f957bd58bca4
Certificate serial:       010D0C9F43285846434A95EF54175103196587E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A916C75D0000/2/C784C66C576C24CCFC1268B5373AFCA0DC4D0E1C.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A916C75D0000/2/
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Wed 19 Jun 2024 13:02:27 +0000
Certificate not after:    Tue 22 Sep 2026 13:02:27 +0000
Subordinate resources:    AS: 983
                          AS: 400951
                          IP: 23.185.208.0/24
                          IP: 2602:fbf1::/32

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 06:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:43:4a:95:ef:54:17:51:03:19:65:87:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37fe8a4a-3fd3-4ba0-9423-f957bd58bca4
        Validity
            Not Before: Jun 19 13:02:27 2024 GMT
            Not After : Sep 22 13:02:27 2026 GMT
        Subject: CN=99a8a036db180b64125153f106415e2e3ef7311f0a42df79ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b9:3a:de:1f:eb:f7:59:45:7b:32:a4:4f:2e:
                    d3:3f:6c:1c:da:14:a1:b1:f4:35:63:d7:1a:bb:45:
                    70:fa:cf:24:38:f3:de:07:13:7a:f5:94:b3:6b:6c:
                    5b:11:6a:9d:c5:c9:f7:87:f7:f7:91:61:b8:74:2a:
                    1a:e7:9c:7c:cd:5b:c1:99:74:2e:25:cb:6a:76:09:
                    26:2c:b1:2e:7d:a2:61:61:5f:89:27:9e:4d:e5:0b:
                    9f:3b:c4:6f:d2:d0:51:f8:aa:89:6a:9b:37:6d:f1:
                    58:12:ac:c6:fc:c0:b1:43:70:d3:59:21:0a:26:6f:
                    26:15:35:9e:29:cd:a7:01:3b:a7:ec:4c:37:1f:b1:
                    ac:a7:ac:b6:0c:2c:b2:f3:3f:f5:e8:ec:7a:75:ec:
                    09:75:b0:7f:c3:e5:27:97:d1:4f:26:2a:63:77:95:
                    72:02:a2:cc:b5:96:32:00:c3:16:35:07:4f:da:6f:
                    d6:e6:c7:c2:b5:6a:84:6d:7c:b8:a2:d1:0a:d4:5b:
                    07:09:51:41:2a:3f:51:54:38:7c:90:c6:f3:e9:9e:
                    39:88:f6:97:df:ee:8f:92:6a:6a:cb:65:fd:d2:97:
                    6b:24:2a:1c:76:d0:be:80:60:8c:a1:6b:5e:15:f0:
                    b9:d4:b5:fe:61:f7:4e:9b:cc:53:fd:d4:ae:a7:e9:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:84:C6:6C:57:6C:24:CC:FC:12:68:B5:37:3A:FC:A0:DC:4D:0E:1C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/2/
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/2/C784C66C576C24CCFC1268B5373AFCA0DC4D0E1C.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl

            X509v3 Authority Key Identifier:
                keyid:19:8E:1D:FF:50:DE:07:BA:C9:42:5C:7C:98:B6:1B:34:4B:58:E0:01

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.208.0/24
                IPv6:
                  2602:fbf1::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  983
                  400951

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:82:d2:75:df:ac:27:cd:57:44:f9:0f:a8:48:25:bc:28:
         49:47:d9:ca:f6:0b:aa:ef:ae:e0:76:16:93:ed:c5:90:cf:f1:
         74:9a:e7:dd:5c:f5:fd:9a:86:37:de:63:3c:53:b2:a9:2a:57:
         93:ee:ff:98:1e:40:0f:0b:30:fb:ae:ab:67:1b:38:d6:d7:4d:
         95:6f:f2:30:08:06:af:87:36:aa:31:c2:11:82:5b:3d:53:9c:
         b5:f0:77:83:a6:9c:f0:b3:51:f4:67:24:1f:28:c4:d2:94:df:
         9e:33:e2:18:2b:e7:56:6b:86:e3:3f:82:69:77:57:2f:e4:2f:
         d6:d5:93:33:e5:4d:cb:4a:10:20:e7:e8:02:57:2b:4d:57:93:
         12:22:37:d7:c2:56:62:41:4a:43:90:9f:40:c8:21:7b:43:14:
         52:44:26:d4:7a:71:99:41:da:6b:b9:00:32:aa:8d:d6:2b:b8:
         12:be:95:9a:60:af:f7:44:57:99:4c:3f:96:28:a2:e2:21:57:
         00:6a:2a:0c:0f:6f:6d:a2:6f:88:4d:fb:11:af:b5:26:b1:92:
         8e:51:7d:be:8c:0d:17:39:f1:f2:c8:ef:7f:e1:72:99:fd:a4:
         75:ac:17:b1:b3:dd:3b:e1:42:ca:e4:e1:8c:74:4f:48:54:e2:
         68:20:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 09:53:36 2024 by rpki-client on console-ams.rpki-client.org