Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af166cab6479566c2adf3d04c3895fca4f6a41ebb917.cer
File:                     62f3d0af166cab6479566c2adf3d04c3895fca4f6a41ebb917.cer (raw, json)
Hash identifier:          PmRW1E0X5NQu6fXu0cqWm1Nm3/659RW6bja6i7gFrwE=
Subject key identifier:   FC:37:B9:E9:E0:E4:2F:7B:F0:14:3D:7F:F5:A7:6A:78:81:B1:4F:83
Authority key identifier: F2:DE:B8:9E:39:0F:18:FF:F6:E9:CB:D1:1E:E3:F1:88:C9:AF:44:1D
Certificate issuer:       /CN=7a054d1e-8326-42a7-b1ad-02b30287b483
Certificate serial:       010D0C9F432858417BDBB45DC2EE001F2A41BF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483.cer
Manifest:                 rsync://rpki.co/repo/HYSP/13/FC37B9E9E0E42F7BF0143D7FF5A76A7881B14F83.mft
caRepository:             rsync://rpki.co/repo/HYSP/13
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 07:25:26 +0000
Certificate not after:    Fri 11 Jul 2025 07:25:26 +0000
Subordinate resources:    IP: 23.149.152.0/24
                          IP: 2606:b0c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7b:db:b4:5d:c2:ee:00:1f:2a:41:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a054d1e-8326-42a7-b1ad-02b30287b483
        Validity
            Not Before: Apr  8 07:25:26 2023 GMT
            Not After : Jul 11 07:25:26 2025 GMT
        Subject: CN=62f3d0af166cab6479566c2adf3d04c3895fca4f6a41ebb917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:63:43:f9:b8:d3:60:fd:23:1e:b3:cb:dc:86:
                    ac:2f:74:76:8e:3f:b8:4e:ce:75:a6:69:22:56:a9:
                    c6:d3:36:3f:dc:06:17:c0:75:05:cb:af:b1:c3:0c:
                    66:5d:df:bd:e7:74:2d:be:26:b1:2e:60:36:9b:b0:
                    53:d3:7c:13:16:dc:85:ab:b5:0d:e8:f4:6a:35:81:
                    15:db:02:27:36:ba:e2:cb:0d:d7:ac:67:20:f5:73:
                    d9:0d:1d:db:19:15:96:ee:bc:45:5b:9c:b8:e2:db:
                    23:1a:d1:f2:65:86:bf:d8:69:e0:64:e3:7f:d6:2b:
                    e6:af:f2:c6:f5:cd:9e:e9:25:7e:bc:44:28:b4:f6:
                    40:ac:bf:85:14:23:3b:bb:8f:3c:ad:d7:24:e4:d9:
                    80:80:78:d9:ce:94:0d:00:04:07:8c:17:2e:06:a8:
                    c3:b8:4d:5f:22:8a:eb:94:24:9d:91:e2:db:70:5b:
                    97:ac:de:ea:de:69:80:23:a9:45:cf:51:9f:13:96:
                    6f:e4:56:6d:ef:5e:86:25:a0:af:11:e6:c7:35:40:
                    be:8b:3a:d7:92:e4:1e:ab:2d:7c:c6:57:e4:ed:1b:
                    a3:3f:e3:16:51:92:ec:e0:ba:b4:c5:b6:c1:d3:12:
                    bf:38:8f:f4:15:3a:6f:7c:b0:30:9b:6a:74:98:7f:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:37:B9:E9:E0:E4:2F:7B:F0:14:3D:7F:F5:A7:6A:78:81:B1:4F:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/13
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/13/FC37B9E9E0E42F7BF0143D7FF5A76A7881B14F83.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/7a054d1e-8326-42a7-b1ad-02b30287b483.crl

            X509v3 Authority Key Identifier:
                keyid:F2:DE:B8:9E:39:0F:18:FF:F6:E9:CB:D1:1E:E3:F1:88:C9:AF:44:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.152.0/24
                IPv6:
                  2606:b0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f0:b3:a7:38:3e:84:1f:f7:95:3d:15:63:a8:1a:1c:bb:bc:
         37:13:09:6b:73:82:91:f8:a2:ae:cc:9f:1a:5c:2a:f0:ea:65:
         6f:e0:8a:13:d3:a2:1f:a7:d2:b5:2f:36:e5:4c:d9:7e:92:28:
         8a:b4:a0:35:7c:4f:e5:ca:2a:a2:8b:6b:4b:d5:2b:6f:2e:11:
         95:61:29:7c:d1:9d:06:31:5f:10:a2:f2:7b:29:55:bb:43:c3:
         58:16:5f:23:e9:6d:d8:24:91:39:0a:84:5d:ee:f8:79:dc:02:
         50:c8:3f:97:f2:a6:91:67:64:ed:e1:89:e8:8c:6e:9b:0b:b4:
         7c:27:6b:dc:af:46:fb:08:3c:1a:56:04:b2:fd:61:52:cf:c2:
         fe:e7:15:0b:d1:fd:fc:91:64:25:3e:21:0d:97:cf:01:ec:eb:
         c8:9e:c0:a0:b7:b1:3f:b6:61:4a:2c:2c:be:6d:5f:ad:1e:fe:
         05:c9:16:c8:a0:2c:6c:7e:e6:39:58:c1:ad:55:06:22:66:c9:
         90:67:01:20:fc:39:59:08:57:19:02:92:a6:d1:fb:11:63:99:
         f3:ec:20:fc:16:e0:94:46:47:7b:84:3f:0e:d8:80:07:fd:64:
         57:fa:b4:71:27:84:24:f6:e0:42:85:ec:62:de:87:a7:04:6f:
         b2:8a:33:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----