Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1eb877d0ac594da69ca8e1e153cff03693050a905.cer
File:                     772ca8b9b1eb877d0ac594da69ca8e1e153cff03693050a905.cer (raw, json)
Hash identifier:          9t9OnYmNv+RSK1cCJU20O+rF6e9QapjZKXjLIdpKzNY=
Subject key identifier:   B2:91:EA:5B:A4:8E:B9:4F:0C:75:30:4D:32:79:88:93:18:9C:0B:4B
Authority key identifier: 8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38
Certificate issuer:       /CN=da044fca-c418-4088-8a66-0c6896769f77
Certificate serial:       010D0C9F4328584875511C1D57049DBDCC69CB00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/B291EA5BA48EB94F0C75304D32798893189C0B4B.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 06 Jan 2025 20:39:53 +0000
Certificate not after:    Sun 11 Apr 2027 19:39:53 +0000
Subordinate resources:    AS: 53343
                          IP: 23.131.12.0/24
                          IP: 2602:f765::/36
Validation:               Failed, certificate revoked on Mon 06 Jan 2025 22:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:75:51:1c:1d:57:04:9d:bd:cc:69:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da044fca-c418-4088-8a66-0c6896769f77
        Validity
            Not Before: Jan  6 20:39:53 2025 GMT
            Not After : Apr 11 19:39:53 2027 GMT
        Subject: CN=772ca8b9b1eb877d0ac594da69ca8e1e153cff03693050a905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:64:b1:e0:04:bc:3e:00:0a:37:d1:b0:a2:
                    1e:56:4f:a6:90:c8:b2:58:74:65:08:b4:11:78:19:
                    35:97:a1:99:71:9e:65:04:1c:ba:2c:11:15:5d:d2:
                    5d:34:2d:9b:34:8f:77:69:7a:6b:91:58:60:40:c6:
                    b9:75:2b:86:10:3c:7a:42:3b:3b:4a:0c:af:e4:ee:
                    9d:8a:a4:b5:87:fb:5b:b8:1d:ff:61:6a:c7:29:1f:
                    13:21:61:b3:ed:f5:96:81:ea:81:b0:cf:02:69:26:
                    83:9c:61:e7:6c:a6:f7:52:65:98:5d:fd:5f:ef:d3:
                    16:35:66:bd:d5:ff:4f:e2:58:f3:9d:c3:48:27:c7:
                    fe:96:c9:5c:bd:10:ad:15:77:f8:96:49:86:e2:b4:
                    be:f2:34:d9:d8:0d:20:81:f4:64:da:16:95:4b:cf:
                    25:6b:47:e1:5e:0b:03:13:c2:d6:78:6f:0e:3f:e8:
                    ef:d1:8f:75:6b:86:90:4f:12:3e:31:1e:70:98:a3:
                    1d:32:1b:c0:45:63:18:4c:1d:49:78:59:e9:d1:46:
                    61:ce:69:25:1e:43:46:99:58:8d:2a:a0:c4:90:0f:
                    4c:ab:72:39:ec:ec:6e:b2:58:4e:8f:99:60:c9:57:
                    57:4c:42:b2:49:de:34:c6:e3:c0:a6:87:30:be:fb:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:91:EA:5B:A4:8E:B9:4F:0C:75:30:4D:32:79:88:93:18:9C:0B:4B
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/B291EA5BA48EB94F0C75304D32798893189C0B4B.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl

            X509v3 Authority Key Identifier:
                keyid:8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.12.0/24
                IPv6:
                  2602:f765::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53343

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ef:52:48:1a:8c:16:4e:66:cd:b0:9e:3b:88:b5:72:f2:50:
         a4:19:ab:7e:7b:86:bf:42:07:21:b2:d2:25:57:18:ae:d5:3c:
         d9:08:ff:fc:a7:1d:00:d9:d0:97:81:92:13:8e:43:55:ab:67:
         5c:18:a7:63:df:80:9c:5a:39:30:bf:b2:c7:11:55:3d:5a:29:
         83:73:63:f7:fb:63:a2:46:d0:74:6a:62:49:76:3e:e0:85:58:
         44:7e:18:4e:16:a7:81:6f:12:06:09:ce:1e:1d:67:18:33:e1:
         d3:b2:e1:27:c8:22:c9:7d:58:b6:ec:1e:5d:24:33:27:14:bd:
         d9:76:81:c7:dc:56:56:03:5c:9f:3e:73:ae:cf:d1:ef:50:a6:
         64:b5:94:f3:14:29:99:40:c2:92:c7:b6:73:22:a9:de:4a:80:
         ef:c6:f4:5b:c0:da:a6:bf:57:52:00:85:3d:36:5c:9c:0d:35:
         72:96:f6:01:4e:7b:df:c2:0c:5f:bd:c4:7d:26:ee:73:89:24:
         c2:be:a5:a6:05:9a:6f:2d:1e:c0:d1:59:4a:f9:b2:a7:3b:bf:
         ed:e8:b1:5f:fd:8b:d2:e9:f0:25:cc:bc:e7:bf:be:fd:80:ce:
         1c:05:01:9d:dc:35:83:8a:83:45:4f:e4:5c:37:93:96:3e:f9:
         5b:dd:2d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:45:29 2025 by rpki-client