Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef077307e02f7b863b1557b4af9c05daeb9480f036.cer
File:                     7c4424b0ef077307e02f7b863b1557b4af9c05daeb9480f036.cer (raw, json)
Hash identifier:          7MEk+STH+CicsScTNJ9n5IRDp/ZjoTjVL+igPKdoCPw=
Subject key identifier:   07:08:45:53:1B:59:46:69:4E:51:6C:FF:78:C1:9C:BC:C7:A0:4A:05
Authority key identifier: 48:CF:03:1E:B0:F1:B4:01:7F:2D:DA:26:E5:2B:3D:55:AC:5D:F9:05
Certificate issuer:       /CN=5138de2d-512a-4692-8c53-d2d9a6ceb549
Certificate serial:       010D0C9F43285843DD39DF2F1BFD15B3BF9C08D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/070845531B5946694E516CFF78C19CBCC7A04A05.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 12 Nov 2023 14:02:27 +0000
Certificate not after:    Sat 14 Feb 2026 14:02:27 +0000
Subordinate resources:    AS: 15353
                          IP: 23.162.168.0/24
                          IP: 2602:fa11::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:dd:39:df:2f:1b:fd:15:b3:bf:9c:08:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5138de2d-512a-4692-8c53-d2d9a6ceb549
        Validity
            Not Before: Nov 12 14:02:27 2023 GMT
            Not After : Feb 14 14:02:27 2026 GMT
        Subject: CN=7c4424b0ef077307e02f7b863b1557b4af9c05daeb9480f036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:71:7f:26:58:9e:07:0c:0f:a8:44:7a:c8:
                    ac:59:7c:f9:4c:39:40:e8:aa:b2:47:ad:94:ee:7e:
                    d4:c4:7e:5c:a4:59:c6:36:a1:fa:3d:c1:70:d6:7a:
                    7b:05:8b:77:d4:93:bf:08:bc:31:a5:b2:d3:14:0c:
                    42:ca:62:02:d1:74:3c:0d:13:2a:6d:85:b1:af:62:
                    58:d9:e2:0f:de:50:df:6d:01:9e:0c:bf:c6:ea:7f:
                    d4:2c:3c:93:da:49:78:18:1e:2a:23:0b:b9:5b:da:
                    7d:08:4f:4d:31:3e:ed:30:3a:a7:7d:68:ff:44:3e:
                    67:53:82:b5:f9:c3:37:8c:82:f8:d9:1b:24:f2:0f:
                    61:26:4b:ae:e8:b9:d9:d8:78:40:8b:5f:1f:d3:e0:
                    60:f2:1f:96:b3:71:fc:d1:13:8d:1c:fc:20:c4:1e:
                    7b:23:54:0a:aa:9b:19:13:f6:44:71:3e:8e:9d:e5:
                    ee:e2:5a:bf:1b:0e:94:ef:65:55:f2:e1:97:d8:71:
                    1f:4d:cb:aa:94:fa:97:6b:43:0b:3d:3d:f5:1c:93:
                    5d:d1:28:0d:ac:b3:5b:d1:10:3d:ee:13:65:7c:f1:
                    74:ae:29:7d:94:af:72:d3:00:67:cc:b9:48:71:d4:
                    83:85:2f:eb:4b:aa:80:7b:2d:17:24:d5:9f:83:3f:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:08:45:53:1B:59:46:69:4E:51:6C:FF:78:C1:9C:BC:C7:A0:4A:05
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/070845531B5946694E516CFF78C19CBCC7A04A05.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl

            X509v3 Authority Key Identifier:
                keyid:48:CF:03:1E:B0:F1:B4:01:7F:2D:DA:26:E5:2B:3D:55:AC:5D:F9:05

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.168.0/24
                IPv6:
                  2602:fa11::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15353

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9c:75:0d:02:45:41:26:fd:28:65:0a:17:7f:28:47:bf:0d:
         33:ec:49:60:cb:a8:d3:c6:84:14:1b:4f:83:e3:67:82:4c:15:
         ef:b4:65:8b:5d:a3:db:68:01:cd:18:7d:31:2f:be:94:34:af:
         7f:d9:81:af:bf:63:ff:1a:ca:7d:21:31:99:fd:8a:7f:4c:0f:
         5f:3d:a9:cc:98:a7:5e:19:79:a6:73:12:3e:89:ec:f5:bc:5b:
         da:01:01:f0:72:df:7a:d0:e8:a4:24:c8:80:6f:e6:d5:b5:7a:
         50:c7:44:a0:9f:2f:b9:00:0b:42:3c:05:2c:cd:4e:60:46:97:
         89:56:f0:73:12:8b:d2:a9:8a:7e:9a:af:68:23:45:bc:39:c1:
         00:ee:39:0a:70:8e:64:c3:d8:ca:24:77:4a:d3:58:b1:5b:dc:
         e6:51:a2:96:95:bc:3a:7f:44:a9:c7:84:dd:f4:48:e4:07:e6:
         ed:09:de:85:8c:13:6a:ed:87:58:6c:42:39:39:db:cb:3e:9b:
         d0:07:d0:6e:b1:c2:c4:eb:6b:3c:ff:32:f4:77:29:2a:ef:af:
         6b:6e:b6:09:6a:da:15:a8:9d:71:24:ff:57:05:73:e2:90:fa:
         dc:82:a3:bb:71:39:a7:ee:fa:fb:c9:bb:7e:13:01:fa:cb:38:
         f2:98:20:fc
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEPdOd8vG/0Vs7+cCNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTEzOGRlMmQtNTEyYS00NjkyLThjNTMtZDJkOWE2Y2Vi
NTQ5MB4XDTIzMTExMjE0MDIyN1oXDTI2MDIxNDE0MDIyN1owPTE7MDkGA1UEAxMy
N2M0NDI0YjBlZjA3NzMwN2UwMmY3Yjg2M2IxNTU3YjRhZjljMDVkYWViOTQ4MGYw
MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCht3F/JlieBwwPqER6
yKxZfPlMOUDoqrJHrZTuftTEflykWcY2ofo9wXDWensFi3fUk78IvDGlstMUDELK
YgLRdDwNEypthbGvYljZ4g/eUN9tAZ4Mv8bqf9QsPJPaSXgYHiojC7lb2n0IT00x
Pu0wOqd9aP9EPmdTgrX5wzeMgvjZGyTyD2EmS67oudnYeECLXx/T4GDyH5azcfzR
E40c/CDEHnsjVAqqmxkT9kRxPo6d5e7iWr8bDpTvZVXy4ZfYcR9Ny6qU+pdrQws9
PfUck13RKA2ss1vRED3uE2V88XSuKX2Ur3LTAGfMuUhx1IOFL+tLqoB7LRck1Z+D
P3fJAgMBAAGjggPsMIID6DAdBgNVHQ4EFgQUBwhFUxtZRmlOUWz/eMGcvMegSgUw
ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j
LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2
NS04YTE2LWRiZmM0NTkzYzFhOC82LzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5
bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjZiZDkyZjEtNDE1Yi00
NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzYvMDcwODQ1NTMxQjU5NDY2OTRFNTE2Q0ZG
NzhDMTlDQkNDN0EwNEEwNS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w
YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD
AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u
ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw
OGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZl
YjgyYi81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1kMmQ5YTZjZWI1NDkvNTEzOGRl
MmQtNTEyYS00NjkyLThjNTMtZDJkOWE2Y2ViNTQ5LmNybDAfBgNVHSMEGDAWgBRI
zwMesPG0AX8t2iblKz1VrF35BTAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB
BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv
c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx
ZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzUx
MzhkZTJkLTUxMmEtNDY5Mi04YzUzLWQyZDlhNmNlYjU0OS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXoqgwDgQCAAIwCAMGBCYC+hEAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAjv5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG2cdQ0CRUEm/ShlChd/KEe/DTPs
SWDLqNPGhBQbT4PjZ4JMFe+0ZYtdo9toAc0YfTEvvpQ0r3/Zga+/Y/8ayn0hMZn9
in9MD189qcyYp14ZeaZzEj6J7PW8W9oBAfBy33rQ6KQkyIBv5tW1elDHRKCfL7kA
C0I8BSzNTmBGl4lW8HMSi9Kpin6ar2gjRbw5wQDuOQpwjmTD2Mokd0rTWLFb3OZR
opaVvDp/RKnHhN30SOQH5u0J3oWME2rth1hsQjk528s+m9AH0G6xwsTrazz/MvR3
KSrvr2tutglq2hWonXEk/1cFc+KQ+tyCo7txOafu+vvJu34TAfrLOPKYIPw=
-----END CERTIFICATE-----
Generated at Sun Nov 12 16:13:08 2023 by rpki-client on console-ams.rpki-client.org