Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f435493d-d8df-418c-9e07-204cc8be4cb4.cer
File:                     f435493d-d8df-418c-9e07-204cc8be4cb4.cer (raw, json)
Hash identifier:          ZzhlNSAWd9wysCrUhOiSPMmFgzlQpD5GNUnOObQGPsk=
Subject key identifier:   BE:3C:56:F4:E1:BC:2B:0A:57:A9:DA:46:A6:EA:BC:B5:AF:5C:19:60
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285842229624EF2389745A6E9A6C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f435493d-d8df-418c-9e07-204cc8be4cb4/f435493d-d8df-418c-9e07-204cc8be4cb4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f435493d-d8df-418c-9e07-204cc8be4cb4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 07 Jun 2023 00:45:16 +0000
Certificate not after:    Tue 09 Sep 2025 00:45:16 +0000
Subordinate resources:    IP: 195.85.88.0/24

Validation:               Failed, certificate revoked on Tue 09 Apr 2024 11:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:22:96:24:ef:23:89:74:5a:6e:9a:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jun  7 00:45:16 2023 GMT
            Not After : Sep  9 00:45:16 2025 GMT
        Subject: CN=f435493d-d8df-418c-9e07-204cc8be4cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cd:3a:44:30:d0:3d:b3:a3:cd:62:6d:75:e9:
                    a9:7c:ef:bf:5a:77:a6:e6:3f:4f:30:47:37:0f:c7:
                    44:8f:00:5d:3e:8b:70:4c:50:af:79:fc:43:d7:35:
                    7f:9e:94:72:ab:a2:e3:9d:bc:3a:c5:0c:5f:2c:d8:
                    88:41:7e:ea:bb:39:0f:6d:9d:68:55:05:d1:f4:1d:
                    35:49:94:15:b7:f4:9f:2a:9b:ac:f3:87:61:3c:c6:
                    66:1a:fb:f0:a5:f2:a1:ab:7d:b8:f4:ee:9f:9a:a3:
                    3d:9c:58:e3:b0:df:61:6b:0e:de:e9:b2:2b:c0:7a:
                    cc:1c:95:fb:1d:36:38:b5:32:c4:ef:e1:23:b3:3a:
                    c1:6a:98:4a:17:38:79:5c:f9:ee:83:30:20:f1:b0:
                    95:76:0a:2d:9c:bb:06:9b:74:57:a7:ac:7e:5d:f4:
                    36:88:bc:de:80:aa:08:a1:57:55:79:a1:22:9f:1b:
                    27:fe:a6:16:fd:e3:e4:d7:f1:5f:45:eb:9f:7b:7e:
                    d2:cc:cf:a1:f7:eb:5e:5c:70:44:c6:3d:b1:86:e9:
                    8c:44:b6:fe:d5:c8:9b:48:1e:a2:4d:a8:09:55:5e:
                    5f:7d:6b:ef:f4:38:60:93:7b:4b:2e:9b:c3:11:83:
                    7d:49:ab:2f:ff:41:3f:64:45:72:a3:92:c7:79:10:
                    f8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3C:56:F4:E1:BC:2B:0A:57:A9:DA:46:A6:EA:BC:B5:AF:5C:19:60
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f435493d-d8df-418c-9e07-204cc8be4cb4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f435493d-d8df-418c-9e07-204cc8be4cb4/f435493d-d8df-418c-9e07-204cc8be4cb4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:31:45:83:cf:f9:cb:c9:52:7d:31:bd:34:46:e9:46:a9:f8:
         46:4b:cb:18:4d:0f:f7:6a:e9:7e:39:f0:c6:3e:b9:17:74:85:
         14:42:e4:f8:bf:0f:d3:c7:7d:b2:45:d1:2d:e6:92:15:52:05:
         0b:03:a8:aa:0c:ab:18:62:87:d1:01:bf:86:f2:11:fa:a0:d5:
         57:30:79:e6:7c:42:ba:ba:62:51:ca:9f:ec:49:a0:46:90:df:
         11:bd:2a:93:bd:c8:90:58:82:4a:f6:a0:4a:17:37:e6:f2:fb:
         f2:91:48:16:03:ff:49:0a:3e:ff:f1:4a:71:08:ba:f0:f6:f5:
         0a:b1:9d:56:6e:74:ad:c6:b3:0c:55:6b:bd:06:f0:40:7a:5f:
         f2:5c:b9:7c:37:22:e6:22:71:e3:f0:e6:6b:d1:0e:1c:66:b2:
         5d:64:b4:5a:5c:36:c4:08:8e:1f:ba:e6:2c:ba:cd:55:d4:30:
         c1:80:72:ee:35:d0:84:69:05:5a:b1:c9:ac:18:3a:b0:47:fb:
         2e:b7:95:05:08:5e:ff:a1:97:3b:7c:04:cb:f2:3c:a4:4d:7a:
         b2:1a:26:26:0b:d3:38:f4:d0:77:36:0e:9c:ce:1c:68:1f:1f:
         74:30:4b:37:a5:3a:d1:3a:97:b7:12:ba:49:fc:f0:94:f3:65:
         41:d2:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 15:26:09 2024 by rpki-client on console-ams.rpki-client.org