Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20.cer
File:                     6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20.cer (raw, json)
Hash identifier:          bhi6kQc66JyOa2EMj71qPVMDH8tijbYyqKRfHwLM7d0=
Subject key identifier:   21:E2:18:AD:0B:56:30:60:C5:E7:A0:FB:F4:0D:09:5A:50:D0:27:86
Authority key identifier: 02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50
Certificate issuer:       /CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37
Certificate serial:       010D0C9F432858417C5638D114F6109906139500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
Manifest:                 rsync://rpki.co/repo/HYSP/0/21E218AD0B563060C5E7A0FBF40D095A50D02786.mft
caRepository:             rsync://rpki.co/repo/HYSP/0
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:32:17 +0000
Certificate not after:    Fri 11 Jul 2025 11:32:17 +0000
Subordinate resources:    AS: 54625
                          IP: 23.149.232.0/24
                          IP: 149.112.26.0/24
                          IP: 165.140.142.0/24
                          IP: 2602:fc23::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7c:56:38:d1:14:f6:10:99:06:13:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37
        Validity
            Not Before: Apr  8 11:32:17 2023 GMT
            Not After : Jul 11 11:32:17 2025 GMT
        Subject: CN=6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:a9:33:ae:95:22:33:66:f0:1a:6e:c7:a8:
                    9c:52:b5:92:02:3b:4e:83:cc:96:bc:ca:fa:b1:34:
                    9b:f4:2a:7c:ed:0c:15:47:2d:50:3a:ce:6d:46:e1:
                    01:4b:99:ba:ef:b5:36:e7:4c:4a:96:9f:df:f1:34:
                    57:de:f8:6a:fd:29:58:01:21:88:55:3a:d2:59:ce:
                    14:f1:6b:9f:91:8f:c3:4e:86:2d:63:62:1c:99:d9:
                    a2:0b:14:a7:f4:91:b4:b3:84:d8:38:f7:30:1a:d7:
                    03:cf:5b:4b:9f:38:93:08:d6:f3:51:00:b4:dd:51:
                    b5:c0:00:f5:42:63:ea:b2:f8:78:da:89:e0:5f:f1:
                    96:b0:c9:b2:7d:c7:e5:6c:1a:47:78:85:f3:7a:45:
                    98:1f:cc:3e:b8:ed:ee:b1:43:5b:64:70:2f:24:79:
                    23:0c:74:7e:22:9b:31:1e:61:01:27:c3:92:09:6a:
                    8e:17:96:4f:fc:10:09:3d:74:6f:2a:21:9f:0d:d3:
                    11:22:10:c3:ed:01:56:47:e4:6f:ef:d1:a8:5b:d9:
                    33:5d:e4:18:21:62:88:3c:a3:69:90:84:da:9d:e0:
                    50:18:42:4b:9f:19:2a:31:9e:14:50:17:aa:ec:07:
                    3f:e0:60:f3:ad:28:0f:c7:7d:7b:62:02:aa:36:61:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E2:18:AD:0B:56:30:60:C5:E7:A0:FB:F4:0D:09:5A:50:D0:27:86
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/0
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/0/21E218AD0B563060C5E7A0FBF40D095A50D02786.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl

            X509v3 Authority Key Identifier:
                keyid:02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.232.0/24
                  149.112.26.0/24
                  165.140.142.0/24
                IPv6:
                  2602:fc23::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54625

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:2f:2d:b6:4d:08:67:2b:89:50:54:4d:40:98:3a:8b:00:d2:
         41:5d:34:3e:08:49:36:2f:56:87:50:dc:b4:f0:e6:a9:3a:c1:
         42:bf:b2:2f:2b:b7:e5:89:61:d8:11:4e:5e:00:54:d2:b9:50:
         bd:98:7b:13:aa:02:25:24:0d:38:a3:f1:51:7f:e0:e1:f3:c7:
         a6:1f:64:b5:f7:44:e1:ba:e8:7b:00:3e:c9:3f:b6:25:4e:e9:
         2c:06:e3:8b:1c:8b:3e:d0:90:bc:c8:f1:bb:e6:3b:3e:cd:86:
         58:c2:d3:83:e1:ae:3c:cf:41:e7:13:15:dd:37:f4:8f:8f:ac:
         5f:b4:77:f5:ab:cb:d6:66:50:ce:5e:da:e5:f5:24:f4:57:3f:
         8a:cf:3a:e8:8b:9a:c2:38:8b:d5:2f:27:df:8a:8e:11:2e:ba:
         f7:41:b9:f9:ea:ce:16:ea:65:c9:72:5d:a3:bf:4b:9e:69:bc:
         7d:8a:87:d4:61:c2:7e:c3:7d:a9:9b:1c:7e:54:72:27:65:68:
         d9:87:a5:00:ad:5d:31:3f:03:2d:b2:a7:d1:16:45:41:dc:97:
         0a:03:a0:ec:d8:90:eb:7b:b1:06:78:76:bc:97:df:09:cc:73:
         de:d9:5e:c8:2a:b0:8a:02:04:f8:ee:4f:49:56:5e:43:f7:26:
         79:0c:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:41 2023 by rpki-client on console-ams.rpki-client.org