Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0660ace0-76dd-4391-8d84-97327f50c5b7.cer
File:                     0660ace0-76dd-4391-8d84-97327f50c5b7.cer (raw, json)
Hash identifier:          mjYn+unAPqBipsIhlCjggR4zCOrGM5jCoMW1/ZGbw5o=
Subject key identifier:   FB:86:1A:F4:8D:C6:BC:38:F1:9F:42:39:B6:34:EC:9D:F0:C3:46:D8
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858478FF64DB6EA8CF1164C2B3C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0660ace0-76dd-4391-8d84-97327f50c5b7/0660ace0-76dd-4391-8d84-97327f50c5b7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0660ace0-76dd-4391-8d84-97327f50c5b7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 16 Oct 2024 16:56:49 +0000
Certificate not after:    Tue 19 Jan 2027 17:56:49 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 17:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:f6:4d:b6:ea:8c:f1:16:4c:2b:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Oct 16 16:56:49 2024 GMT
            Not After : Jan 19 17:56:49 2027 GMT
        Subject: CN=0660ace0-76dd-4391-8d84-97327f50c5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:33:73:06:34:66:72:a9:3e:1c:2c:75:dc:
                    f4:43:c6:51:4a:a8:da:9a:3e:dc:d5:24:9e:3a:ca:
                    90:6c:85:5f:6f:74:31:c4:cc:18:45:16:bc:2d:42:
                    aa:92:3f:16:21:89:45:b1:82:9d:a8:cd:86:9a:a6:
                    d8:52:ac:42:cf:82:a7:21:88:29:66:d5:51:c7:cb:
                    cd:66:63:96:c6:a2:31:1f:ae:03:4e:51:1f:92:7a:
                    46:9c:c8:b0:3e:bb:bb:53:d7:8d:7c:66:5d:a1:77:
                    17:0a:e6:8a:00:eb:d8:3b:e5:71:58:08:10:b7:3e:
                    f0:98:8d:4e:cf:42:82:8f:cf:ee:f5:1f:4a:a6:00:
                    5e:b6:0e:86:28:10:5c:91:c9:fd:40:9a:04:06:1e:
                    6d:c1:00:15:e8:4c:2f:7c:60:66:c6:c9:2a:58:30:
                    7e:4b:e5:0e:26:fc:7d:99:96:73:a0:5d:b6:da:7b:
                    9d:bc:48:4c:6d:17:7b:2a:5d:3a:32:98:af:69:0d:
                    8e:9d:d9:e5:f0:1e:bb:7f:1d:47:5b:60:fd:09:f9:
                    a4:89:d5:ce:63:1c:4e:d5:a7:01:23:a0:ba:c5:20:
                    c7:3a:0c:55:ff:51:b7:1c:c4:78:0d:cd:de:34:1e:
                    01:b1:03:e4:17:d9:77:07:68:cf:a6:a6:7f:90:f8:
                    e7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:86:1A:F4:8D:C6:BC:38:F1:9F:42:39:B6:34:EC:9D:F0:C3:46:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0660ace0-76dd-4391-8d84-97327f50c5b7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0660ace0-76dd-4391-8d84-97327f50c5b7/0660ace0-76dd-4391-8d84-97327f50c5b7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:71:93:74:f7:e9:c0:65:13:12:61:4e:44:89:83:cd:02:
         56:75:f8:79:1b:e5:7d:a4:8e:e5:b9:24:9d:c3:14:16:c2:64:
         0a:1b:bd:a7:2a:b6:9c:46:75:5a:1a:57:14:f1:6f:e8:a8:6a:
         71:9d:68:24:94:bb:84:61:7c:d3:bc:b7:04:b8:74:2b:60:b2:
         b6:c2:20:1d:58:fe:94:39:36:ac:34:2c:0e:c2:b1:43:ac:1c:
         9c:f6:e3:c4:ef:18:d6:a7:39:53:e3:2a:5a:af:fc:ca:a9:b8:
         93:17:e5:a2:90:59:87:7c:cf:1e:d4:d2:4d:68:44:92:db:30:
         c4:57:34:47:52:f1:bd:65:e5:bb:a4:bd:b8:f7:13:f9:62:86:
         71:50:65:ce:e7:fb:95:ea:24:e9:69:08:a0:51:0d:da:c4:9d:
         2e:3a:0d:86:9d:85:e9:52:d9:18:49:e0:17:87:fb:94:97:6a:
         4a:ed:f2:5b:6d:ad:7f:84:15:4e:a9:8a:e1:5b:e9:41:6d:b9:
         88:8c:8b:ab:ed:49:89:7b:ae:49:b8:84:98:4c:02:7e:6c:97:
         e4:f0:bd:3c:5f:ac:34:64:f4:0f:7c:2d:1f:f2:e4:31:c9:b1:
         41:a0:b8:50:5c:8a:f3:d0:57:bb:22:86:2c:b6:fb:db:08:44:
         59:ab:b8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:33:09 2024 by rpki-client on console-fra.rpki-client.org