Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer
File:                     7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2.cer (raw, json)
Hash identifier:          vXnhmKRy5irDB/1TSUnON7zHsXcvQR/IyiGxueO6KnE=
Subject key identifier:   2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
Authority key identifier: 57:32:A4:DE:22:0E:8D:66:F9:38:C4:93:B6:6F:9C:BF:35:47:57:8E
Certificate issuer:       /CN=ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b
Certificate serial:       010D0C9F43285847A3B40BA0E7143EE1FFBBE980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 23 Oct 2024 18:39:29 +0000
Certificate not after:    Tue 26 Jan 2027 19:39:29 +0000
Subordinate resources:    AS: 54148
                          AS: 200351
                          IP: 23.160.152.0/24
                          IP: 2602:fa43::/40

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 21:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:b4:0b:a0:e7:14:3e:e1:ff:bb:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b
        Validity
            Not Before: Oct 23 18:39:29 2024 GMT
            Not After : Jan 26 19:39:29 2027 GMT
        Subject: CN=7ecae320493165bd255881e00078068ce32efb3eeaeae07cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0a:2c:09:44:13:4c:4f:41:22:fc:93:07:84:
                    0d:a4:2e:33:cf:62:e6:18:51:f7:ad:b0:0f:46:63:
                    98:18:04:4d:76:02:e2:d9:7e:f5:a1:34:c0:af:a5:
                    1d:e6:87:aa:a6:b9:fb:b8:f8:67:3c:6f:28:cc:8d:
                    43:5a:b9:c3:f2:bb:4d:1c:a4:48:7d:2d:bb:17:1c:
                    40:d7:6d:a9:01:4b:a2:71:b1:37:f1:45:d2:e8:0c:
                    67:10:cc:52:bc:09:e3:74:06:e5:47:a4:02:e5:29:
                    c9:4c:04:9a:d6:9c:42:3f:c6:75:a6:2a:1f:28:0d:
                    1b:20:4f:34:4f:0e:37:19:e4:b4:91:0d:8a:28:d8:
                    af:eb:76:b8:80:97:ba:14:80:5a:17:26:fd:ea:c7:
                    9e:d6:70:f3:91:e9:8b:76:cd:a9:8e:53:34:77:df:
                    5d:7c:d7:5b:a5:0e:47:83:ef:69:cb:3b:7b:db:04:
                    90:52:53:a6:8f:0e:eb:a7:b2:18:3b:4c:01:7c:03:
                    62:be:6e:f9:a2:f6:db:6c:0c:50:8e:3f:73:99:c7:
                    4f:5d:9b:81:57:8b:fe:92:93:bb:cb:b8:be:a0:f2:
                    a3:c1:e5:59:67:eb:01:bb:8d:e6:d2:01:cd:c7:a2:
                    4b:f8:a8:8a:35:d6:d6:42:ee:e3:41:77:aa:cf:68:
                    2d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8B:32:3B:D9:5B:B0:D4:44:81:CB:A2:DC:CE:3D:3A:BC:3A:3C:59
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/3/2C8B323BD95BB0D44481CBA2DCCE3D3ABC3A3C59.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl

            X509v3 Authority Key Identifier:
                keyid:57:32:A4:DE:22:0E:8D:66:F9:38:C4:93:B6:6F:9C:BF:35:47:57:8E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.152.0/24
                IPv6:
                  2602:fa43::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54148
                  200351

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1d:61:d6:85:f4:64:2a:8b:ae:53:06:db:b0:95:51:e8:ce:
         88:6c:da:c3:f0:2f:b3:9f:a2:6e:d7:2d:c8:8b:81:de:6e:32:
         db:3d:bf:20:a7:8a:c2:ef:d2:2b:c7:00:ea:57:22:ad:88:9f:
         e4:61:df:bd:71:65:c5:81:eb:b6:13:18:df:7b:5e:78:8b:f0:
         25:bb:a4:bd:2e:02:50:df:63:db:dd:53:4a:2f:b3:7b:11:ee:
         f4:8a:95:9d:de:f4:fd:56:77:4d:79:81:df:27:0a:07:11:cf:
         05:28:02:37:b6:d0:08:77:cb:6a:5c:44:b7:9b:63:ae:be:de:
         1b:7f:b7:e3:5f:65:f2:2b:ae:ea:20:3a:6c:e4:60:4f:92:0c:
         f4:90:e6:93:61:09:96:d3:56:ab:71:59:e8:94:8c:84:65:93:
         fb:73:04:45:fc:88:3d:bb:8e:44:67:12:91:66:43:75:17:73:
         87:cf:ed:77:f5:2b:56:e5:88:1a:7b:1f:19:94:9f:48:7d:f2:
         bf:b8:44:2e:3b:8e:b3:7e:d5:c2:eb:c1:f7:91:06:0b:2b:d1:
         cb:68:91:17:23:da:66:ab:ff:c3:d6:80:8a:22:62:d5:d5:d9:
         45:03:3f:a6:c9:e2:1e:04:bd:a2:5e:fd:f4:df:8b:b8:cc:86:
         73:3c:a3:ea
-----BEGIN CERTIFICATE-----
MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEejtAug5xQ+4f+76YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWUxYmRmZjgtZGJiNS00ZjBmLTk4ZTYtYzhlMTMyNmJh
NzliMB4XDTI0MTAyMzE4MzkyOVoXDTI3MDEyNjE5MzkyOVowPTE7MDkGA1UEAxMy
N2VjYWUzMjA0OTMxNjViZDI1NTg4MWUwMDA3ODA2OGNlMzJlZmIzZWVhZWFlMDdj
ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFCiwJRBNMT0Ei/JMH
hA2kLjPPYuYYUfetsA9GY5gYBE12AuLZfvWhNMCvpR3mh6qmufu4+Gc8byjMjUNa
ucPyu00cpEh9LbsXHEDXbakBS6JxsTfxRdLoDGcQzFK8CeN0BuVHpALlKclMBJrW
nEI/xnWmKh8oDRsgTzRPDjcZ5LSRDYoo2K/rdriAl7oUgFoXJv3qx57WcPOR6Yt2
zamOUzR3311811ulDkeD72nLO3vbBJBSU6aPDuunshg7TAF8A2K+bvmi9ttsDFCO
P3OZx09dm4FXi/6Sk7vLuL6g8qPB5Vln6wG7jebSAc3Hokv4qIo11tZC7uNBd6rP
aC3NAgMBAAGjggPyMIID7jAdBgNVHQ4EFgQULIsyO9lbsNREgcui3M49Orw6PFkw
ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j
LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4MmY4NWJjLTNkNjktNDhh
Mi1iOWMzLTdlZjBhODM5Y2UxOS8zLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5
bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgyZjg1YmMtM2Q2OS00
OGEyLWI5YzMtN2VmMGE4MzljZTE5LzMvMkM4QjMyM0JEOTVCQjBENDQ0ODFDQkEy
RENDRTNEM0FCQzNBM0M1OS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w
YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD
AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u
ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw
OGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZl
YjgyYi9lZTFiZGZmOC1kYmI1LTRmMGYtOThlNi1jOGUxMzI2YmE3OWIvZWUxYmRm
ZjgtZGJiNS00ZjBmLTk4ZTYtYzhlMTMyNmJhNzliLmNybDAfBgNVHSMEGDAWgBRX
MqTeIg6NZvk4xJO2b5y/NUdXjjAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB
BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv
c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx
ZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Vl
MWJkZmY4LWRiYjUtNGYwZi05OGU2LWM4ZTEzMjZiYTc5Yi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXoJgwDgQCAAIwCAMGACYC+kMAMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwDThAIDAw6fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAEdYdaF9GQqi65TBtuw
lVHozohs2sPwL7Ofom7XLciLgd5uMts9vyCnisLv0ivHAOpXIq2In+Rh371xZcWB
67YTGN97XniL8CW7pL0uAlDfY9vdU0ovs3sR7vSKlZ3e9P1Wd015gd8nCgcRzwUo
Aje20Ah3y2pcRLebY66+3ht/t+NfZfIrruogOmzkYE+SDPSQ5pNhCZbTVqtxWeiU
jIRlk/tzBEX8iD27jkRnEpFmQ3UXc4fP7Xf1K1bliBp7HxmUn0h98r+4RC47jrN+
1cLrwfeRBgsr0ctokRcj2mar/8PWgIoiYtXV2UUDP6bJ4h4EvaJe/fTfi7jMhnM8
o+o=
-----END CERTIFICATE-----
Generated at Thu Oct 24 22:39:05 2024 by rpki-client on console-fra.rpki-client.org