Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f9f8692-a65b-4699-996f-10ad41fccc8e.cer
File:                     9f9f8692-a65b-4699-996f-10ad41fccc8e.cer (raw, json)
Hash identifier:          CAenfmt7JF1MpXSy5bPpz6QdaxPUTJFMBa1CizWj0b4=
Subject key identifier:   3C:D9:E1:49:D9:F4:73:93:AF:63:C7:69:9B:A7:83:C2:EF:73:4C:1B
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842AF0F2AB94875D9A2A32ECFC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f9f8692-a65b-4699-996f-10ad41fccc8e/9f9f8692-a65b-4699-996f-10ad41fccc8e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f9f8692-a65b-4699-996f-10ad41fccc8e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 27 Jul 2023 08:22:17 +0000
Certificate not after:    Wed 29 Oct 2025 08:22:17 +0000
Subordinate resources:    IP: 2604:b040::/32

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 16:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:af:0f:2a:b9:48:75:d9:a2:a3:2e:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 27 08:22:17 2023 GMT
            Not After : Oct 29 08:22:17 2025 GMT
        Subject: CN=9f9f8692-a65b-4699-996f-10ad41fccc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:dd:81:bd:99:c2:f2:5a:c5:f1:5d:eb:90:
                    0a:87:71:2e:14:de:18:3e:fe:84:53:71:b5:7c:17:
                    5b:6a:1c:fe:df:e5:6e:fc:92:97:aa:c0:23:20:92:
                    80:18:03:20:56:f4:c4:7d:f1:2a:52:be:86:15:7e:
                    06:c2:90:f7:b1:f0:1b:44:be:28:56:7f:e2:82:a8:
                    4f:89:d3:31:8a:27:4e:a5:33:c3:de:ec:9b:36:b4:
                    f8:3c:b6:dc:17:a1:b3:8c:0b:09:3b:24:6c:73:08:
                    4d:eb:40:0b:3a:11:79:54:e7:d2:4e:ba:fa:79:a3:
                    04:79:a0:38:e8:e6:76:36:32:95:0e:cd:30:2a:6c:
                    4a:a3:cf:da:cf:7b:6b:c2:f4:11:4e:af:84:50:a5:
                    6e:59:af:6c:8d:a2:78:79:bc:71:0f:fb:ee:9c:62:
                    12:96:ea:af:61:0d:e9:c5:b5:7c:81:9a:64:49:c2:
                    f5:b8:5b:1e:b4:35:75:88:c0:f9:79:be:84:f8:4a:
                    fb:07:d6:2b:87:fb:b8:05:76:83:83:ee:b3:a1:a7:
                    8e:88:a8:93:51:16:dd:bb:16:8c:64:b0:d5:40:6a:
                    c5:58:08:63:e9:f3:40:69:50:5a:b0:34:3e:c0:2c:
                    34:78:db:cf:38:6f:4a:c1:93:f4:ae:f1:a5:99:85:
                    cb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D9:E1:49:D9:F4:73:93:AF:63:C7:69:9B:A7:83:C2:EF:73:4C:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f9f8692-a65b-4699-996f-10ad41fccc8e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f9f8692-a65b-4699-996f-10ad41fccc8e/9f9f8692-a65b-4699-996f-10ad41fccc8e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ac:f7:3d:83:d8:c2:fd:aa:90:a1:bd:65:bb:03:bf:13:18:
         e9:74:bc:e7:8b:5d:9a:50:79:0a:b6:20:a7:ce:06:50:24:a0:
         2a:c6:de:c1:84:86:b3:7c:94:31:e3:7c:e8:e0:e3:95:20:01:
         04:71:6f:3d:b9:fe:74:32:1b:a8:f7:7e:36:66:d3:49:8d:1e:
         ea:b4:a9:b6:93:a4:c7:db:e0:a8:b1:6c:9f:3b:da:9f:5a:68:
         38:80:bb:59:6c:52:5e:fe:29:3a:1a:10:bc:12:65:e1:4b:55:
         dd:96:df:44:bb:a1:0a:20:29:ab:67:a7:80:1d:f4:7e:80:b4:
         00:48:74:5d:fe:ab:2b:08:79:0c:bb:51:c9:e4:6a:57:e3:02:
         c0:bb:41:4b:da:7f:49:d4:86:1b:5d:c5:e1:df:cc:b4:1c:91:
         a1:10:de:e2:71:bc:f7:84:d6:44:9b:78:f7:5c:37:be:ee:ea:
         2e:cc:73:4d:2f:fc:04:98:50:be:59:fe:67:9f:79:b8:b7:99:
         bc:96:52:0c:1c:8b:67:15:6c:69:74:32:59:a5:36:b8:9d:a6:
         a4:47:c5:9f:4c:f7:75:ec:a3:cc:09:f3:86:d4:4d:2a:74:94:
         7d:e8:9b:ac:89:b4:45:ee:6b:3a:f7:74:16:b8:f4:e5:40:a8:
         0c:68:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:17:00 2024 by rpki-client on console-fra.rpki-client.org