Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8511f4e3-ff20-405d-91cb-9c3271104214.cer
File:                     8511f4e3-ff20-405d-91cb-9c3271104214.cer (raw, json)
Hash identifier:          vOWbD8pn30DjvFIrdFnu8nYsCpGda5HmggSpEIYM6G4=
Subject key identifier:   49:58:01:AB:9D:4B:BB:4E:36:E6:A6:7E:40:D8:4F:D7:C8:1B:53:9C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858430F7F4D282C64204135A3B780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8511f4e3-ff20-405d-91cb-9c3271104214/8511f4e3-ff20-405d-91cb-9c3271104214.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8511f4e3-ff20-405d-91cb-9c3271104214/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 30 Aug 2023 21:25:49 +0000
Certificate not after:    Tue 02 Dec 2025 22:25:49 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked on Thu 31 Aug 2023 18:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0f:7f:4d:28:2c:64:20:41:35:a3:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 30 21:25:49 2023 GMT
            Not After : Dec  2 22:25:49 2025 GMT
        Subject: CN=8511f4e3-ff20-405d-91cb-9c3271104214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e2:9d:fa:ba:54:35:8a:45:52:d7:20:0b:f4:
                    b3:ca:92:db:55:4e:e1:f2:ae:b1:30:45:3d:d3:60:
                    98:c7:a4:26:5c:b1:11:f1:a7:31:27:6f:06:e5:39:
                    32:32:6b:65:03:a6:6c:7f:a5:cf:3d:67:ef:06:a6:
                    86:bb:cc:c0:12:51:da:c0:a8:7d:4e:68:9c:0c:87:
                    5b:b9:ca:3b:14:c0:b5:5e:9a:fd:3e:4c:b9:89:60:
                    b8:ff:39:8a:56:f1:25:cb:d2:34:c5:0f:69:8a:ee:
                    1b:7d:7b:28:06:28:f1:10:bb:30:b7:ab:a2:85:d4:
                    f3:fc:ce:a7:e5:d9:8e:cc:cc:5e:25:0f:36:82:16:
                    e0:b9:7d:e9:81:84:7a:62:74:f2:dc:b6:bf:5a:fc:
                    7d:1b:6e:bc:0f:1d:2a:b8:6c:cd:9b:19:3a:6b:05:
                    4a:ad:8a:57:b3:c3:4c:17:13:cd:f4:f0:62:e5:26:
                    60:bb:1f:b8:e4:9a:3b:e6:04:be:4f:f9:58:43:18:
                    a1:a8:48:aa:3b:1f:d2:5e:22:5f:e9:70:5d:5e:ce:
                    77:f2:fc:e1:75:c8:66:a9:e8:32:9d:c4:94:73:f8:
                    be:ca:de:66:39:0e:e4:3c:8f:62:7c:c6:76:1d:b5:
                    8d:d2:97:97:12:5d:07:4b:05:12:4c:4a:4e:b4:40:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:58:01:AB:9D:4B:BB:4E:36:E6:A6:7E:40:D8:4F:D7:C8:1B:53:9C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8511f4e3-ff20-405d-91cb-9c3271104214/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8511f4e3-ff20-405d-91cb-9c3271104214/8511f4e3-ff20-405d-91cb-9c3271104214.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d3:56:63:60:b9:ce:0e:1d:02:c6:c4:97:72:76:51:ec:3d:
         4e:6a:59:6a:54:e2:df:fa:a5:c6:c0:b9:ef:d5:fd:a8:7c:28:
         88:c0:32:a8:c6:67:e5:7d:9e:67:42:6b:99:2a:e6:f9:ae:bf:
         0b:3a:66:12:aa:65:a2:83:4a:76:5f:48:5a:4d:a4:c9:c6:81:
         f9:69:6f:87:ac:7f:35:28:18:ce:4f:e0:21:2e:2d:4b:e7:a4:
         0d:d8:b0:b5:97:f7:56:a6:6b:b0:84:23:01:22:e0:32:dc:c5:
         6c:bf:fc:b6:6f:a5:44:3b:a2:f1:27:d4:c4:b5:8e:c9:f1:99:
         31:39:50:19:85:eb:b5:5f:15:33:bd:dc:7e:21:a7:52:f3:69:
         09:43:9b:0a:12:2f:a8:61:84:20:a8:41:c7:a7:7e:83:51:53:
         42:a8:87:ce:85:97:a9:9c:e7:a8:82:aa:51:6a:8f:14:9d:43:
         9a:83:2d:06:d8:41:fd:2c:26:ff:56:0f:fb:1e:5f:d5:26:db:
         f8:38:70:49:f5:67:29:07:c3:cd:0b:b1:2a:4c:28:e0:c8:ac:
         68:bf:82:dd:90:fa:6e:11:5f:04:7f:2b:c6:d2:5d:cc:68:2a:
         b0:25:e0:3c:94:e0:3e:0f:c5:a8:ba:3a:79:74:2f:67:0b:8e:
         8e:e2:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:14 2024 by rpki-client on console-fra.rpki-client.org