Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a.cer
File:                     63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a.cer (raw, json)
Hash identifier:          XYRQRvoXwBthRpAY5ILHktObpMwwt6dzxv9kURNwcDk=
Subject key identifier:   E5:2C:37:7F:6C:65:01:F9:CA:9E:EB:01:8F:66:22:B1:DC:E9:86:00
Authority key identifier: 38:30:39:91:69:F1:77:78:F8:70:56:79:18:39:02:C2:21:86:48:99
Certificate issuer:       /CN=d7e20303-2390-47a7-b89c-842367be4584
Certificate serial:       010D0C9F43285847BC634C30C9A4D34D2C197440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/E52C377F6C6501F9CA9EEB018F6622B1DCE98600.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 01 Nov 2024 14:52:00 +0000
Certificate not after:    Thu 04 Feb 2027 15:52:00 +0000
Subordinate resources:    AS: 54476
                          IP: 23.175.192.0/24
                          IP: 2604:a340::/32

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 16:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:63:4c:30:c9:a4:d3:4d:2c:19:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e20303-2390-47a7-b89c-842367be4584
        Validity
            Not Before: Nov  1 14:52:00 2024 GMT
            Not After : Feb  4 15:52:00 2027 GMT
        Subject: CN=63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:35:c2:e6:2e:3e:d1:54:03:2a:f3:a9:3a:
                    02:7b:41:8c:e8:a1:64:d1:82:28:3a:4e:7e:37:e1:
                    4a:20:05:14:b2:a6:9f:38:22:d2:66:72:0a:e4:94:
                    08:10:e5:44:ea:b7:73:a1:f1:be:0d:77:e1:7f:55:
                    e3:44:a2:02:a2:71:ac:ef:a2:f0:f3:9c:6a:5a:c4:
                    2b:81:01:05:0c:8d:be:06:6f:31:a0:83:ad:56:77:
                    38:c6:71:59:2a:b5:f3:a1:d5:d1:66:2d:3f:4e:89:
                    bc:1f:b4:f3:fc:bf:b0:ba:07:e1:4f:94:a6:ed:f9:
                    71:f1:7d:d9:9d:3c:97:c4:41:12:b6:62:b6:29:cb:
                    34:0a:ba:25:7c:bd:a1:5b:6f:b8:09:dc:e5:2b:1d:
                    d7:f0:a0:85:f7:67:5c:65:99:ae:24:7b:0f:db:c5:
                    72:f0:de:e6:fc:55:eb:5c:cf:8f:69:cc:22:c2:c0:
                    29:29:3f:ba:cf:ee:21:b5:29:e1:d0:a6:39:56:13:
                    b6:95:c8:86:29:9c:eb:d3:3a:bc:a6:b2:12:19:a9:
                    69:ea:1d:f3:30:f7:47:c9:51:cb:f9:89:88:cf:6b:
                    c0:65:c8:a7:10:14:fb:b2:35:7b:c0:fa:5a:d3:b3:
                    26:db:ad:b9:e2:d7:7b:54:65:b4:f7:c0:03:31:16:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2C:37:7F:6C:65:01:F9:CA:9E:EB:01:8F:66:22:B1:DC:E9:86:00
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/E52C377F6C6501F9CA9EEB018F6622B1DCE98600.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.crl

            X509v3 Authority Key Identifier:
                keyid:38:30:39:91:69:F1:77:78:F8:70:56:79:18:39:02:C2:21:86:48:99

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.192.0/24
                IPv6:
                  2604:a340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54476

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d7:56:a9:e6:c3:38:ce:45:30:45:b3:41:af:bf:ec:3e:53:
         87:0c:77:34:1c:86:ae:0b:5a:ce:61:d9:e3:00:de:ce:d7:5c:
         a8:ce:63:2c:ff:2c:d9:a0:c4:d6:d9:a2:56:d8:54:23:a9:52:
         87:af:25:6c:cf:ac:c1:2f:1a:68:3c:3f:fb:7a:a4:0e:eb:88:
         72:1b:f0:a7:46:55:04:38:a6:8a:ca:86:b9:b6:e1:4b:58:e4:
         24:cd:70:56:17:fe:9e:af:0f:eb:e2:9b:01:41:7f:cf:28:b8:
         c8:50:c4:ed:4e:b5:aa:16:10:99:1c:cf:70:73:17:35:95:4b:
         dd:00:7d:0e:82:3d:43:f1:74:5a:ed:b1:1e:51:fc:1a:ec:45:
         85:43:f1:74:a7:e4:97:d1:68:db:12:de:37:10:dc:1c:cc:e6:
         9c:54:b1:b4:a4:8e:f4:9c:c2:b9:de:99:38:03:a7:e1:06:06:
         ac:4f:31:39:9c:11:8a:4a:e5:c3:63:66:d0:9d:5f:e1:b0:a3:
         81:94:c0:33:60:12:0b:dd:91:c6:9d:09:ef:09:0a:47:b0:9e:
         80:5d:5b:99:75:88:b2:ab:b8:62:71:91:99:d4:d3:08:ce:ca:
         14:7f:64:50:4e:24:02:45:fb:97:86:ca:18:23:d0:93:7b:a8:
         f2:ef:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 17:59:44 2024 by rpki-client on console-fra.rpki-client.org