Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340.cer
File:                     e45b2423-bd81-480e-93e3-8cc66e601340.cer (raw, json)
Hash identifier:          hXYDDzsv0OWQIajhgrkil6fFE4loo8edNoHnDZR9uH4=
Subject key identifier:   A0:90:AC:4B:5C:E6:B9:28:EB:28:02:80:A0:B8:02:3D:D7:26:64:07
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847B73D04C6F593CE3851741B70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/e45b2423-bd81-480e-93e3-8cc66e601340.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 30 Oct 2024 18:35:49 +0000
Certificate not after:    Tue 02 Feb 2027 19:35:49 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/32

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 12:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:3d:04:c6:f5:93:ce:38:51:74:1b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 30 18:35:49 2024 GMT
            Not After : Feb  2 19:35:49 2027 GMT
        Subject: CN=e45b2423-bd81-480e-93e3-8cc66e601340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:01:53:20:fa:03:61:08:b2:ec:e6:29:e2:99:
                    21:79:36:3a:ed:b0:31:87:cb:b1:3e:d7:f5:a2:7d:
                    0d:21:e7:9f:ba:2e:51:6a:fa:56:a2:64:70:5d:9b:
                    07:8e:ed:13:af:30:be:64:a2:76:c4:9c:cf:d9:4a:
                    bc:41:a5:12:5b:7f:df:fd:c9:26:6a:11:9c:b5:d1:
                    fd:b6:ba:af:2a:49:0f:64:82:8d:ac:31:55:50:6a:
                    ae:db:8e:28:84:be:b9:0a:fb:64:fd:2b:c9:92:d3:
                    7c:1d:08:4f:9c:d9:8b:22:65:2f:f5:94:46:02:92:
                    0a:66:8e:3b:5a:bc:e3:b4:e6:d7:51:ba:96:9b:a9:
                    e6:ab:55:35:92:af:c1:d9:c3:c0:a1:5d:c5:34:64:
                    10:0c:0d:71:6f:e5:22:63:96:c7:6b:e4:a9:1e:85:
                    6e:eb:5d:52:21:a5:ca:03:83:f2:b7:f0:4a:56:05:
                    7f:71:9c:14:c0:74:83:0e:75:70:f1:7f:5f:8a:85:
                    ae:05:68:35:ef:49:59:e9:1a:cc:5b:dd:bf:81:3f:
                    23:ad:37:fb:89:ac:9b:bc:79:8b:d4:42:52:8c:23:
                    d4:09:e1:f5:6c:b2:22:c6:9e:d8:d7:5b:c8:fb:6f:
                    f2:54:ac:9a:cd:11:0e:50:57:19:bb:c0:3e:b8:cb:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:90:AC:4B:5C:E6:B9:28:EB:28:02:80:A0:B8:02:3D:D7:26:64:07
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/e45b2423-bd81-480e-93e3-8cc66e601340.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5f:5b:0e:37:c6:3e:5e:6e:91:8b:c3:d7:07:6c:52:21:79:
         cf:ee:a5:2b:7a:9b:06:83:39:9e:83:2c:b9:13:e8:3e:8e:fc:
         7b:a8:eb:4e:ad:78:66:a2:86:b1:aa:e1:54:2b:23:a8:c3:ac:
         62:ac:23:8c:a6:71:9a:7d:f5:c6:8b:8d:87:7e:e1:93:7b:05:
         3a:0b:c5:cc:91:4a:60:d6:f6:3a:6b:17:3e:1c:44:53:e3:96:
         bf:e7:13:75:5c:11:5c:c5:1c:a6:47:30:ae:5c:2f:9e:36:f4:
         5e:84:a3:66:41:56:50:d3:65:31:c7:c6:c1:60:e9:e0:b0:61:
         ee:fe:a3:c5:06:e3:dd:1a:d0:ba:5e:86:a6:90:40:cc:6f:37:
         c5:4c:ea:ec:46:c5:c0:3c:bb:bb:16:04:22:17:4c:93:50:a8:
         5a:38:b5:7a:6b:5a:80:ea:86:db:cc:21:11:0c:e5:66:6b:4f:
         ea:34:6d:28:4f:14:25:67:ba:66:4d:07:9d:48:d8:21:dd:04:
         d4:d9:47:b7:9a:a0:52:9b:45:38:d3:12:65:90:57:84:61:11:
         cc:5d:fd:d1:b2:b7:68:6e:7b:ac:4c:44:e7:99:b0:08:e0:2a:
         20:55:cc:2f:ff:16:b3:74:99:11:9e:75:bc:45:4d:37:d3:e2:
         32:29:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 14:58:13 2024 by rpki-client on console-fra.rpki-client.org