Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/474c8b23-c0b5-431f-9412-f10681ae3ddb.cer
File:                     474c8b23-c0b5-431f-9412-f10681ae3ddb.cer (raw, json)
Hash identifier:          6vFLPfipplH3z6O3q6Hh2rZ0B8UvBPjP7b2TmEpUscg=
Subject key identifier:   CC:D7:A2:91:EC:6D:AF:F6:88:09:53:91:33:33:4A:37:61:CD:4A:E4
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584314C8EAE8E00009C273434A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/474c8b23-c0b5-431f-9412-f10681ae3ddb/474c8b23-c0b5-431f-9412-f10681ae3ddb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/474c8b23-c0b5-431f-9412-f10681ae3ddb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 01 Sep 2023 18:53:11 +0000
Certificate not after:    Thu 04 Dec 2025 19:53:11 +0000
Subordinate resources:    IP: 137.48.0.0/16

Validation:               Failed, certificate revoked on Thu 23 May 2024 16:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:14:c8:ea:e8:e0:00:09:c2:73:43:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep  1 18:53:11 2023 GMT
            Not After : Dec  4 19:53:11 2025 GMT
        Subject: CN=474c8b23-c0b5-431f-9412-f10681ae3ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:30:90:d8:af:fd:ab:2f:e3:bb:db:ca:d9:
                    0f:e3:94:34:44:f3:4e:03:d1:8e:60:e9:6b:c5:3a:
                    15:0f:f2:17:ad:97:47:ee:04:a0:c4:2f:38:73:67:
                    cf:e1:a5:02:d0:05:03:bc:ff:5a:dc:7a:d4:40:08:
                    60:1f:d5:cb:7d:c6:af:ba:69:67:91:db:d2:87:90:
                    06:a3:e6:71:1b:fa:9d:94:ff:c1:23:1d:25:55:b8:
                    a0:b2:39:69:8c:e2:61:1a:b7:7c:5c:f6:46:60:4b:
                    be:52:bd:21:04:fb:e6:6a:63:d0:b6:42:db:a0:e9:
                    38:f7:91:ba:fb:e3:99:d3:48:40:30:38:a8:94:39:
                    92:5b:42:e3:f1:3f:7c:dd:df:28:85:ca:81:11:3f:
                    0e:c8:92:bb:97:4e:1d:af:b3:5d:82:cd:82:dc:1e:
                    5a:55:99:b8:04:72:29:52:f9:1d:24:c3:b7:65:79:
                    6c:72:25:76:10:11:71:81:4e:5e:65:bd:02:8c:c6:
                    a9:f5:d8:55:8d:39:ee:fd:ce:61:85:7d:f8:ff:a8:
                    45:c0:ca:8d:7f:ce:5a:ea:b5:d4:40:fa:12:43:9b:
                    66:d9:fa:43:ea:ab:d6:03:29:2f:ac:be:7e:3c:a9:
                    6a:82:b6:5c:07:94:6d:05:b6:bc:b7:92:1e:46:87:
                    5e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D7:A2:91:EC:6D:AF:F6:88:09:53:91:33:33:4A:37:61:CD:4A:E4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/474c8b23-c0b5-431f-9412-f10681ae3ddb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/474c8b23-c0b5-431f-9412-f10681ae3ddb/474c8b23-c0b5-431f-9412-f10681ae3ddb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8d:db:97:f5:60:ed:62:45:32:3d:f7:cc:de:0f:45:b7:1e:
         04:6b:80:69:73:7c:c5:da:4e:13:04:63:f0:d4:77:bd:a6:10:
         b4:5b:81:ff:85:36:82:11:88:90:5d:a5:f1:97:98:7f:91:60:
         94:48:c5:ef:8e:b4:3a:88:aa:68:10:fc:b4:ec:40:42:51:9f:
         bd:f6:b5:cc:a0:12:cf:33:79:5b:22:b4:97:b0:12:57:18:1c:
         51:18:32:5f:f4:e6:80:c4:88:e0:28:25:53:54:1e:36:46:c8:
         ab:ac:dc:89:98:f0:d9:ec:f0:ef:4c:4a:77:ad:a7:4f:e0:b4:
         2c:8b:38:4d:b4:f8:6d:b6:fb:e5:d3:20:26:e3:ae:54:00:46:
         d5:33:e4:3b:5c:65:d3:74:2d:66:1f:2b:cc:7f:c7:2b:56:7f:
         d1:22:c8:79:70:33:df:63:a6:d1:30:e8:f5:86:13:75:fe:af:
         4f:54:0d:68:f7:8f:6d:73:76:3f:c3:b6:5c:5f:a0:b1:bf:4a:
         de:8c:6d:f5:7b:bd:30:6b:0a:9b:76:b0:e9:37:12:32:dc:c1:
         93:22:33:33:8d:8f:cb:90:2f:b8:d2:3f:d9:70:e9:44:a7:58:
         60:63:b4:8e:e5:c2:cd:c3:e1:83:20:9e:4d:f6:d9:79:e2:be:
         ae:eb:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org