Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384.cer
File:                     18fa4b62-a658-4ac5-98e4-08b2ce78b384.cer (raw, json)
Hash identifier:          vvrFNIMixiXL1dJZXAXQ4rTdDnmRrK/+mnD2tFoFy3s=
Subject key identifier:   E5:60:35:D8:F4:B7:3E:95:AE:CD:91:FF:39:F4:5A:6B:45:56:A4:39
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842E7A4F308F5818F501B1A94C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384/18fa4b62-a658-4ac5-98e4-08b2ce78b384.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 16 Aug 2023 14:49:21 +0000
Certificate not after:    Tue 18 Nov 2025 15:49:21 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e7:a4:f3:08:f5:81:8f:50:1b:1a:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 16 14:49:21 2023 GMT
            Not After : Nov 18 15:49:21 2025 GMT
        Subject: CN=18fa4b62-a658-4ac5-98e4-08b2ce78b384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:85:e9:4f:7e:87:9c:bf:4d:37:95:24:46:
                    63:fd:ce:d0:ba:c0:28:e3:e6:fb:20:76:2e:17:0d:
                    c3:d1:e0:02:75:7e:e9:8a:35:71:d4:95:6a:3a:69:
                    e9:fa:f8:0a:33:72:0a:46:8c:63:2c:7a:83:74:39:
                    2c:77:f6:77:18:93:64:99:41:b0:6f:be:aa:bf:b8:
                    26:70:c8:7f:51:cb:a6:b3:5c:af:6a:cf:94:22:77:
                    18:4c:04:40:96:b6:cf:0e:bf:c2:70:da:28:a7:36:
                    14:26:64:ad:75:e9:92:b7:b3:88:ae:9b:eb:c4:94:
                    59:7c:66:da:f4:e6:4c:f9:45:c1:51:ea:4e:27:9f:
                    82:28:97:ac:ae:09:47:47:82:9a:4e:40:e1:da:68:
                    8a:9b:cd:75:c0:7a:27:a4:92:83:0d:1a:f0:11:30:
                    36:ed:66:fa:2c:74:0d:5e:17:5a:ac:08:c3:92:aa:
                    f0:85:f4:a5:09:4a:df:fd:47:6d:12:d0:28:e7:91:
                    8f:54:e2:ab:76:86:e5:24:cb:1d:24:d3:8d:b1:73:
                    a9:c7:8a:52:4a:96:bc:0e:25:33:b6:79:d6:a4:84:
                    1b:5e:84:af:52:d2:36:8e:15:dc:c3:bf:c3:d6:a3:
                    ee:00:db:3d:98:ce:79:28:92:86:00:ed:87:96:ad:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:60:35:D8:F4:B7:3E:95:AE:CD:91:FF:39:F4:5A:6B:45:56:A4:39
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384/18fa4b62-a658-4ac5-98e4-08b2ce78b384.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:40:96:34:75:6c:d6:99:1b:5c:51:64:9d:55:f3:1d:c6:77:
         21:7f:ef:cd:98:0a:cb:09:62:b9:e6:3b:e1:a2:99:b0:50:75:
         56:66:9c:7b:37:d2:b2:ff:9d:86:62:54:a6:36:91:a2:26:1f:
         76:68:86:00:1d:37:d2:d7:51:a3:2e:9d:13:bd:54:33:2d:6b:
         88:95:f8:77:82:52:5c:ba:7d:2a:74:ab:29:e3:29:30:69:67:
         c8:6c:44:e3:9a:74:69:48:e3:17:6e:7d:eb:6f:98:75:c7:dd:
         5f:a0:e0:4e:70:61:d7:d1:13:a8:79:ac:86:91:65:81:9b:ff:
         2b:d4:7a:fd:fd:69:d4:c7:ee:1a:54:78:ca:0a:f8:24:f7:a4:
         62:a9:a7:80:7a:ac:50:df:20:cb:c7:9c:31:74:c3:b8:e0:89:
         78:e6:bb:ad:3d:0f:e6:48:69:51:70:b2:6f:7a:9a:7b:1f:14:
         ac:2b:dd:43:b1:95:58:e8:30:58:db:d3:e3:61:ed:62:94:46:
         71:74:79:62:b0:a5:f0:07:af:37:c7:3a:b0:92:79:b6:18:78:
         7d:18:de:ad:c8:90:20:cc:e2:c1:13:44:04:49:03:e8:63:ec:
         04:ad:32:21:a4:bf:84:6c:6d:dc:54:dd:66:41:31:47:92:25:
         c1:b4:19:fb
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWELnpPMI9YGPUBsalMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMDgxNjE0NDkyMVoXDTI1MTExODE1NDkyMVowLzEtMCsGA1UEAxMk
MThmYTRiNjItYTY1OC00YWM1LTk4ZTQtMDhiMmNlNzhiMzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseeF6U9+h5y/TTeVJEZj/c7QusAo4+b7IHYu
Fw3D0eACdX7pijVx1JVqOmnp+vgKM3IKRoxjLHqDdDksd/Z3GJNkmUGwb76qv7gm
cMh/Ucums1yvas+UIncYTARAlrbPDr/CcNoopzYUJmStdemSt7OIrpvrxJRZfGba
9OZM+UXBUepOJ5+CKJesrglHR4KaTkDh2miKm811wHonpJKDDRrwETA27Wb6LHQN
XhdarAjDkqrwhfSlCUrf/UdtEtAo55GPVOKrdoblJMsdJNONsXOpx4pSSpa8DiUz
tnnWpIQbXoSvUtI2jhXcw7/D1qPuANs9mM55KJKGAO2Hlq0UuQIDAQABo4IENTCC
BDEwHQYDVR0OBBYEFOVgNdj0tz6Vrs2R/zn0WmtFVqQ5MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x
OGZhNGI2Mi1hNjU4LTRhYzUtOThlNC0wOGIyY2U3OGIzODQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzE4ZmE0YjYyLWE2NTgtNGFjNS05
OGU0LTA4YjJjZTc4YjM4NC8xOGZhNGI2Mi1hNjU4LTRhYzUtOThlNC0wOGIyY2U3
OGIzODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAKVcJgDBADNxGIwDgQCAAIwCAMGBCYC/DsAMB4G
CCsGAQUFBwEIAQH/BA8wDaALMAkCAmbkAgMGGmIwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABUCWNHVs1pkb
XFFknVXzHcZ3IX/vzZgKywliueY74aKZsFB1VmacezfSsv+dhmJUpjaRoiYfdmiG
AB030tdRoy6dE71UMy1riJX4d4JSXLp9KnSrKeMpMGlnyGxE45p0aUjjF25962+Y
dcfdX6DgTnBh19ETqHmshpFlgZv/K9R6/f1p1MfuGlR4ygr4JPekYqmngHqsUN8g
y8ecMXTDuOCJeOa7rT0P5khpUXCyb3qaex8UrCvdQ7GVWOgwWNvT42HtYpRGcXR5
YrCl8AevN8c6sJJ5thh4fRjerciQIMziwRNEBEkD6GPsBK0yIaS/hGxt3FTdZkEx
R5IlwbQZ+w==
-----END CERTIFICATE-----
Generated at Fri Aug 25 17:50:24 2023 by rpki-client on console-ams.rpki-client.org