Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6e3824eae8989fde4defe4d2e9e4fe118a329a11a.cer
File:                     dc24fd57e6e3824eae8989fde4defe4d2e9e4fe118a329a11a.cer (raw, json)
Hash identifier:          5+uAbA4qYHWCLazMwT+luZu8hRKdiQvmb2U//ItVRsM=
Subject key identifier:   D8:AA:5B:7B:22:1D:B7:7C:16:EB:EE:4D:C2:C7:D8:83:89:4A:96:6B
Authority key identifier: 99:03:6F:13:D4:8D:28:E3:D7:EA:C6:18:05:FB:6F:FC:7B:D3:D3:77
Certificate issuer:       /CN=cc1d4521-b619-4ca7-b66a-41b5dba13caa
Certificate serial:       010D0C9F432858417C0E682EBF26874E9920EEC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa.cer
Manifest:                 rsync://rpki.co/repo/HYSP/12/D8AA5B7B221DB77C16EBEE4DC2C7D883894A966B.mft
caRepository:             rsync://rpki.co/repo/HYSP/12
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:07:35 +0000
Certificate not after:    Fri 11 Jul 2025 09:07:35 +0000
Subordinate resources:    AS: 13586

Validation:               Failed, certificate revoked on Sat 08 Apr 2023 11:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7c:0e:68:2e:bf:26:87:4e:99:20:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1d4521-b619-4ca7-b66a-41b5dba13caa
        Validity
            Not Before: Apr  8 09:07:35 2023 GMT
            Not After : Jul 11 09:07:35 2025 GMT
        Subject: CN=dc24fd57e6e3824eae8989fde4defe4d2e9e4fe118a329a11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:f4:d8:a1:29:3d:20:3a:87:38:b3:98:b3:
                    14:50:f3:58:ab:a9:ae:22:c1:45:47:0b:7d:a8:89:
                    07:d8:0b:13:8d:1c:d8:83:53:d3:dd:5c:64:ad:de:
                    8a:62:42:6b:99:33:ea:69:b5:ea:3c:52:2b:42:0c:
                    a5:e9:76:6e:fb:f9:d0:d0:1c:c6:5f:b6:0b:93:91:
                    b3:41:47:c5:f8:7f:ea:15:a1:c7:ee:38:62:9d:b2:
                    c9:7a:28:1d:7d:c9:78:47:d4:ca:75:f4:8e:1c:ba:
                    ad:4f:d7:c9:6e:a7:7d:3f:a3:79:be:27:bb:b9:91:
                    36:1d:21:3d:03:da:76:61:34:19:f8:c8:77:b7:7a:
                    a5:a0:08:38:12:d8:78:29:0e:d3:e2:82:ad:76:07:
                    24:aa:9c:68:6b:ed:73:7b:43:a8:22:5e:1d:1b:e1:
                    fd:a7:d3:62:c8:63:d5:13:b4:0f:65:e1:84:54:a6:
                    19:c3:e1:9c:8c:13:37:e8:8b:f7:88:06:b7:c1:1b:
                    7e:9d:05:c7:9a:ad:1f:1c:96:ae:06:03:ed:fb:4a:
                    20:16:7d:4a:cc:5a:53:52:d8:3b:eb:93:f7:5c:ce:
                    dc:08:d6:61:8d:97:6d:ea:bc:9f:7e:a4:21:c0:07:
                    af:f9:29:74:4a:f7:88:17:b2:fc:51:16:cf:6c:fe:
                    be:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AA:5B:7B:22:1D:B7:7C:16:EB:EE:4D:C2:C7:D8:83:89:4A:96:6B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/12
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/12/D8AA5B7B221DB77C16EBEE4DC2C7D883894A966B.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/cc1d4521-b619-4ca7-b66a-41b5dba13caa.crl

            X509v3 Authority Key Identifier:
                keyid:99:03:6F:13:D4:8D:28:E3:D7:EA:C6:18:05:FB:6F:FC:7B:D3:D3:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13586

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:20:ec:82:59:04:e9:36:88:6f:71:8f:65:d3:b7:2e:fb:e8:
         d4:03:58:4e:5e:55:39:63:1a:3e:31:89:11:d5:37:8a:7b:ae:
         19:85:92:92:88:f8:ce:ec:8a:05:be:89:34:fc:66:43:9d:5a:
         d1:1d:43:8a:21:10:e1:9c:53:d7:7e:aa:00:45:dc:39:b7:a6:
         c7:9c:55:a3:3c:36:6d:58:39:fe:a1:91:9f:c6:1b:1d:02:86:
         14:5f:2a:a5:ca:49:de:a0:f8:f1:f4:ea:dc:92:ba:9b:26:49:
         b7:18:a9:71:58:25:26:39:de:83:71:ab:9c:bf:15:fb:a3:20:
         87:df:ac:3c:c9:3d:1d:9a:14:0f:89:b8:a2:72:10:9a:d1:9f:
         cf:ad:88:e5:1f:79:1a:49:ac:04:ca:67:5f:f0:80:ff:1c:3c:
         52:f6:4d:63:f2:2c:95:92:52:5b:5d:7a:40:3c:8e:92:63:9a:
         23:72:0f:61:a1:88:2e:c5:43:fe:bf:fb:97:21:82:d2:ea:9b:
         ad:73:0e:86:a9:51:c0:0a:dd:e8:b9:64:cb:b3:15:cb:07:f7:
         dc:5c:b5:dd:51:68:95:d8:4e:46:92:0a:64:6a:f9:fe:4a:ba:
         38:b3:97:64:e5:ca:bb:7d:70:5a:21:f7:1b:ae:6f:fe:e6:fa:
         83:d5:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:51 2024 by rpki-client on console-ams.rpki-client.org