Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5da316e-c586-452d-80c1-18ff0c4dfd5a.cer
File:                     b5da316e-c586-452d-80c1-18ff0c4dfd5a.cer (raw, json)
Hash identifier:          HJARlx9y12BunjBy1oVGr3eQUQt2fAd09KV1Uqlvu7A=
Subject key identifier:   F0:33:DA:99:15:7D:4A:61:31:43:E6:92:7F:11:FD:79:EC:A3:7E:5C
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E48330916D309B11DF278540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5da316e-c586-452d-80c1-18ff0c4dfd5a/b5da316e-c586-452d-80c1-18ff0c4dfd5a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5da316e-c586-452d-80c1-18ff0c4dfd5a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Thu 05 Dec 2024 20:06:39 +0000
Subordinate resources:    AS: 29777
                          IP: 204.10.18.0/23

Validation:               Failed, certificate revoked on Wed 28 Jun 2023 14:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:30:91:6d:30:9b:11:df:27:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Dec  5 20:06:39 2024 GMT
        Subject: CN=b5da316e-c586-452d-80c1-18ff0c4dfd5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:c9:81:25:7d:b0:11:3e:81:7b:b8:69:19:
                    4c:bf:65:0a:4c:11:a6:8f:b4:c3:5a:ee:c4:bc:69:
                    30:0e:be:57:db:de:54:cb:17:c2:6d:26:46:fb:5b:
                    5b:9c:d8:5d:c7:ba:da:dd:bc:cc:51:e3:5f:36:b5:
                    ec:92:03:56:ad:1f:9d:26:1a:00:6c:34:78:db:c7:
                    7b:9d:5d:db:8a:e2:92:5d:ec:79:25:79:59:88:e4:
                    0b:62:3e:62:77:53:49:fc:5e:60:14:c7:5c:58:1c:
                    43:92:96:66:7f:1c:23:ac:79:f0:50:c8:3c:5a:d1:
                    f3:7b:ac:f2:b2:94:01:93:1a:62:ff:26:01:ea:43:
                    f5:8e:36:27:4c:74:5c:23:f9:3f:15:9c:90:27:04:
                    18:36:18:15:1e:af:dc:66:a1:88:98:e2:99:e4:e4:
                    64:80:7c:e4:3b:b0:27:d2:e0:ff:63:ba:ae:09:a1:
                    7c:d6:da:6f:7c:11:98:d4:9c:e3:42:0f:8c:13:4a:
                    1b:d6:da:e4:9d:af:ee:23:09:65:8c:27:a4:2e:9a:
                    b1:92:3e:e0:8d:c1:a3:43:fb:e5:25:d6:10:00:e5:
                    0a:ed:a3:75:3e:88:41:ce:8a:46:ac:e2:e3:80:3e:
                    64:db:30:78:17:8e:4a:a2:ec:58:2e:30:a8:72:4a:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:33:DA:99:15:7D:4A:61:31:43:E6:92:7F:11:FD:79:EC:A3:7E:5C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5da316e-c586-452d-80c1-18ff0c4dfd5a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5da316e-c586-452d-80c1-18ff0c4dfd5a/b5da316e-c586-452d-80c1-18ff0c4dfd5a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.18.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29777

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:47:59:d9:ec:cc:a1:b3:88:ca:93:57:81:46:f1:5a:9a:64:
         a2:e3:9f:b8:9c:f9:f2:c9:a6:f8:d4:eb:4b:9d:2a:20:31:24:
         63:21:e9:8a:e5:62:fa:6a:87:47:62:1a:63:8c:3c:b3:b9:75:
         ba:55:5c:e9:d2:d6:d1:46:59:73:42:6e:3e:9c:a7:cf:97:6c:
         2a:d6:cd:d1:57:f8:3c:e9:01:e7:50:34:d2:cc:57:43:8f:96:
         40:db:3d:d8:9f:78:00:64:83:45:de:b7:bc:e6:60:97:a1:5c:
         43:26:e6:23:b2:9f:21:69:c8:0c:c1:c4:04:07:f1:88:a6:84:
         69:fb:c9:ab:31:7a:e8:78:b1:f3:38:85:8e:95:59:b2:8e:ca:
         c9:df:91:21:51:a4:b8:22:d4:70:97:7b:2e:d5:04:73:2c:10:
         11:fa:af:13:d9:be:5f:05:08:8c:40:56:f1:8e:d5:5b:e6:41:
         ef:56:d1:aa:10:f8:9e:93:4c:3b:ee:b4:94:25:f2:53:10:9a:
         5f:88:6e:43:33:8a:37:d5:f6:a7:21:a3:35:a8:e1:fc:9a:74:
         b6:25:ca:fc:d8:31:b1:dd:b0:89:98:b6:6e:7c:e1:a4:53:c0:
         c1:36:14:a4:b3:5f:96:b6:74:90:e2:09:01:e6:10:45:9b:a6:
         e9:7a:e5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:04 2024 by rpki-client on console-fra.rpki-client.org