Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d712dc0d6fc2d98d60c85653369949d5de95183ebd5.cer
File:                     86de965d712dc0d6fc2d98d60c85653369949d5de95183ebd5.cer (raw, json)
Hash identifier:          unreB0VNbcu/NF9GBKar4ggrYy1dzOz4vxkgOU/uhI8=
Subject key identifier:   E5:62:BA:1D:9A:CB:5B:6F:E3:2A:A3:81:82:78:4C:48:F0:21:1C:90
Authority key identifier: 8E:12:A5:9C:11:20:6D:2D:11:85:61:D3:CA:3A:96:46:C8:6D:95:8F
Certificate issuer:       /CN=7c9b1947-b813-43b3-9152-c4ccbff1cde7
Certificate serial:       010D0C9F432858473F9AE4C75CF79030CF89B1C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7.cer
Manifest:                 rsync://rpki-pp/repo/localname/0/E562BA1D9ACB5B6FE32AA38182784C48F0211C90.mft
caRepository:             rsync://rpki-pp/repo/localname/0/
Notify URL:               https://rpki-pp/rrdp/notification.xml
Certificate not before:   Tue 17 Sep 2024 22:07:58 +0000
Certificate not after:    Mon 21 Dec 2026 23:07:58 +0000
Subordinate resources:    AS: 13527
                          IP: 2602:f83d::/40

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 14:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:9a:e4:c7:5c:f7:90:30:cf:89:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9b1947-b813-43b3-9152-c4ccbff1cde7
        Validity
            Not Before: Sep 17 22:07:58 2024 GMT
            Not After : Dec 21 23:07:58 2026 GMT
        Subject: CN=86de965d712dc0d6fc2d98d60c85653369949d5de95183ebd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:96:73:14:bb:76:82:8d:9f:81:c3:4c:f9:
                    52:e3:52:ce:80:b4:d1:ae:80:7b:bb:54:cd:43:38:
                    ee:a9:47:61:e1:b6:fb:4b:08:12:8b:07:db:8e:62:
                    78:d3:43:e9:ac:99:61:b3:b8:86:2f:49:10:4d:f6:
                    3b:15:28:5d:56:fa:fc:fe:a1:cb:dd:ec:35:7d:1c:
                    c4:41:24:49:d4:d6:85:2f:f3:04:1e:14:b1:de:ad:
                    0c:e8:33:bf:59:ea:74:3b:96:df:56:1d:75:40:62:
                    c1:f2:be:ef:b3:3c:1d:82:b5:2e:93:28:aa:e6:8e:
                    0d:b2:de:53:f4:4c:c8:af:68:05:dc:ea:de:9b:14:
                    4b:0f:f1:3a:0d:44:9c:a3:4b:46:82:18:8c:8e:39:
                    5e:ea:7f:65:95:f5:33:6b:37:f7:79:16:8b:39:e4:
                    24:51:d7:c6:cc:f4:f7:e2:62:b2:4c:3b:5e:91:d5:
                    e9:db:03:ab:73:dd:05:35:b6:60:af:2c:ed:43:af:
                    62:82:ac:9b:a1:bf:c5:7f:6f:9b:d9:c7:04:46:cb:
                    88:1e:89:e1:08:3c:25:ba:3f:44:68:b5:ea:7e:92:
                    cf:eb:7a:f6:51:0f:43:ed:3f:b4:c9:66:1b:9b:88:
                    35:bd:dd:6c:11:da:50:06:7f:9d:94:8d:67:d8:a9:
                    de:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:62:BA:1D:9A:CB:5B:6F:E3:2A:A3:81:82:78:4C:48:F0:21:1C:90
            Subject Information Access:
                CA Repository - URI:rsync://rpki-pp/repo/localname/0/
                RPKI Manifest - URI:rsync://rpki-pp/repo/localname/0/E562BA1D9ACB5B6FE32AA38182784C48F0211C90.mft
                RPKI Notify - URI:https://rpki-pp/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.crl

            X509v3 Authority Key Identifier:
                keyid:8E:12:A5:9C:11:20:6D:2D:11:85:61:D3:CA:3A:96:46:C8:6D:95:8F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83d::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13527

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:48:c0:65:2c:eb:91:a9:da:90:44:8c:54:46:2e:e8:6b:b4:
         1a:f3:9a:c3:6d:49:58:ac:c2:0b:94:2f:c0:22:e8:fc:fa:99:
         b4:e6:cf:cd:c8:fb:4b:1f:9c:9f:8d:06:57:63:b5:2b:7e:a4:
         dc:1f:ec:f1:28:32:5e:66:87:1a:5f:8d:87:d4:ad:00:d9:e0:
         db:cb:d3:29:d0:07:0e:bf:21:9a:4a:5b:a6:5e:65:c2:4c:36:
         1f:2c:f7:bc:7d:c4:9f:ac:25:91:f7:fb:ab:e1:9a:2c:48:c5:
         3c:38:57:7e:ff:34:26:f2:9a:f1:e1:92:b3:56:78:8d:6b:c0:
         b8:66:db:e3:3e:63:2c:15:3e:cd:4b:cc:32:df:cb:72:c4:07:
         dd:8d:06:ad:8c:64:af:5e:6d:27:f1:5c:f7:be:ac:4e:34:c0:
         76:b8:ef:2b:92:8c:0e:25:64:02:85:96:13:5a:ae:23:ba:39:
         5d:78:20:5b:cc:52:7e:1f:17:25:fd:d9:6f:00:00:96:b4:ae:
         00:3e:62:f5:30:1a:a7:9e:ef:d6:c8:60:b8:22:03:ab:08:ed:
         29:71:c8:bf:40:85:cc:32:c6:57:1e:f4:c7:e4:ff:bb:49:e9:
         2b:9b:9f:33:5f:82:b0:dd:9d:06:0b:05:ad:fc:b1:a3:a7:90:
         be:38:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:10:59 2024 by rpki-client on console-fra.rpki-client.org