Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518.cer
File:                     a3e437f7-1e43-4bb4-be78-da876ad33518.cer (raw, json)
Hash identifier:          vtGrfSN61zSOZKhBvHQlzfogE+Hr8D5Oyo+JBsrQa8s=
Subject key identifier:   2A:D1:EC:BF:34:6B:36:3C:63:B4:5F:34:83:80:5E:91:F8:72:52:90
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858484335CC79E74C6243540E4540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a3e437f7-1e43-4bb4-be78-da876ad33518.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Dec 2024 21:54:27 +0000
Certificate not after:    Tue 22 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 30002
Validation:               Failed, certificate revoked on Fri 20 Dec 2024 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:35:cc:79:e7:4c:62:43:54:0e:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 19 21:54:27 2024 GMT
            Not After : Dec 22 01:45:26 2026 GMT
        Subject: CN=a3e437f7-1e43-4bb4-be78-da876ad33518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a3:9c:b4:a1:54:d5:29:5f:d8:42:f5:8a:40:
                    ca:7f:0b:9e:de:70:37:bc:8f:e0:6c:20:6b:45:e4:
                    e3:ae:5f:92:92:02:99:c5:04:90:15:5a:75:50:ba:
                    b9:85:e4:04:2b:80:dc:fd:b9:b1:e6:69:70:bd:b2:
                    5b:c1:a7:c5:7e:70:99:b9:7a:d5:eb:41:16:4f:18:
                    19:a3:16:bb:8e:92:f4:37:4e:01:e7:10:48:4d:7e:
                    b8:37:74:86:8f:2b:4a:ad:04:02:1e:f0:2c:74:55:
                    7e:6c:3e:84:43:54:2c:3b:10:50:f9:92:50:a0:95:
                    43:e6:34:80:8f:0f:ae:ec:38:f7:52:2d:36:00:5a:
                    95:47:9a:6d:fb:b0:b7:48:7a:14:48:89:f7:f6:24:
                    08:8c:5b:a6:d1:db:f5:45:0f:28:15:79:7f:44:6a:
                    6a:46:63:5d:ef:6a:24:e0:e5:ef:1e:bd:56:ee:5b:
                    bb:44:72:ec:3b:ae:21:a9:0e:8c:70:8f:e8:76:8c:
                    2f:75:66:70:37:59:2f:06:82:b9:75:c3:9d:da:e2:
                    53:59:01:7b:81:1e:f5:c1:65:ee:2a:29:b1:d3:c4:
                    03:05:c8:9c:c3:ac:db:0d:3c:74:de:1d:60:db:bc:
                    9d:5a:10:1a:f1:a1:30:57:38:a0:29:c4:6a:c1:d3:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D1:EC:BF:34:6B:36:3C:63:B4:5F:34:83:80:5E:91:F8:72:52:90
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a3e437f7-1e43-4bb4-be78-da876ad33518.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30002

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:54:d7:91:ef:5f:60:d6:5f:18:af:f8:c7:cf:4d:fb:cc:
         99:11:68:aa:a2:8b:da:a3:1f:44:42:5e:51:e5:d6:aa:83:ef:
         09:dc:3a:d6:5c:79:41:f0:f1:4a:a9:7a:d6:d1:65:81:d5:39:
         74:ef:05:89:2c:78:b8:ac:de:f5:c0:6f:18:0b:81:46:b0:a5:
         f5:4d:9f:36:de:9d:3c:bd:81:12:ee:aa:ac:c8:7b:d8:ba:75:
         1c:ef:c0:22:c4:70:72:3a:4b:f8:96:7e:96:77:a4:fe:2c:42:
         04:25:88:ba:e6:f5:4f:d4:db:34:e6:93:67:2c:97:9e:bb:0c:
         3e:3a:12:cd:97:d7:b5:ac:59:fb:4f:50:85:17:25:a9:d1:5b:
         e0:20:27:50:38:da:60:fa:8f:6b:0f:2d:6a:30:33:7f:08:e7:
         1c:59:dc:85:b7:68:b8:46:a2:34:85:72:20:8a:ac:f6:0e:1a:
         b5:51:b4:34:7e:67:30:15:46:79:a6:a3:bd:b8:67:57:d1:9a:
         20:23:e6:af:b8:54:1c:b7:35:6c:54:eb:c2:7f:c9:cb:e9:30:
         80:94:0a:0b:75:b5:25:d5:21:73:35:46:f4:ee:d2:43:5e:40:
         ea:00:03:41:67:4d:12:18:1c:6f:03:99:4f:f2:9c:ab:a1:e0:
         63:7b:87:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:03:46 2025 by rpki-client