Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34cf4bc9-0539-4a75-9307-4406b40c48cb.cer
File:                     34cf4bc9-0539-4a75-9307-4406b40c48cb.cer (raw, json)
Hash identifier:          hdCxMNpYFu15YvnzHxrxrEhXzPQajNtcC9afIF/e6Bc=
Subject key identifier:   50:C9:47:E4:5F:BF:3A:87:3C:79:10:9A:D9:15:54:08:38:0B:D4:52
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584640BE082599DDD37054D65700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34cf4bc9-0539-4a75-9307-4406b40c48cb/34cf4bc9-0539-4a75-9307-4406b40c48cb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34cf4bc9-0539-4a75-9307-4406b40c48cb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Jun 2024 15:07:38 +0000
Certificate not after:    Mon 21 Sep 2026 15:07:38 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 16:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:40:be:08:25:99:dd:d3:70:54:d6:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 18 15:07:38 2024 GMT
            Not After : Sep 21 15:07:38 2026 GMT
        Subject: CN=34cf4bc9-0539-4a75-9307-4406b40c48cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bf:03:64:8b:6a:82:e0:5c:34:c5:1e:29:b9:
                    0f:ba:f1:92:3e:3a:95:10:c6:ab:ec:29:40:6f:76:
                    d9:64:86:00:d2:e8:54:c4:a9:b2:a8:2b:11:9d:08:
                    5b:13:2c:05:93:eb:52:49:17:00:2b:5d:c1:ba:e7:
                    b2:9b:12:20:98:dc:16:b4:06:5f:5d:9f:92:db:a7:
                    ed:6d:d0:bd:49:e9:76:c2:f8:e1:59:2c:2d:d8:a6:
                    99:6a:c2:38:ec:43:61:79:59:88:b4:c3:a4:59:c0:
                    37:a4:dd:1b:9b:9e:f2:d3:0f:5f:79:88:e6:0a:dd:
                    c0:21:17:54:85:7a:42:88:18:d2:32:6f:95:e4:c4:
                    5c:39:21:c2:4a:a5:0f:71:5b:d5:a2:d0:df:2c:3a:
                    f1:7a:5d:a7:6e:25:3f:c4:cc:fa:ef:b2:c2:8d:cd:
                    6a:62:1c:64:75:1a:2e:f0:3a:a0:b3:05:f4:d0:04:
                    6d:f9:b6:ed:7b:f7:c6:0a:e6:b4:ba:37:64:11:f1:
                    f8:56:83:5c:4e:ea:a3:67:69:ef:76:61:c1:2e:5f:
                    e4:32:d0:bd:17:e5:dc:17:46:d5:c7:70:56:17:d9:
                    21:47:7c:45:12:f7:5f:06:b2:ea:4d:cc:01:70:89:
                    55:63:c2:fa:79:4e:82:de:bd:2f:c9:fa:62:4c:84:
                    6f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C9:47:E4:5F:BF:3A:87:3C:79:10:9A:D9:15:54:08:38:0B:D4:52
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34cf4bc9-0539-4a75-9307-4406b40c48cb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34cf4bc9-0539-4a75-9307-4406b40c48cb/34cf4bc9-0539-4a75-9307-4406b40c48cb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f4:15:16:72:32:98:13:e9:53:d4:8b:c5:ea:41:5a:83:f5:
         48:6b:3f:70:15:84:d7:d0:d8:e8:f3:a7:6f:e2:d0:48:07:76:
         94:1a:ce:b0:f0:68:69:d7:b3:09:19:6e:8f:74:00:09:e3:d2:
         04:ef:53:ba:3c:b4:ab:de:b3:87:cb:19:c6:71:e3:94:5b:62:
         b4:31:a2:1d:c9:be:a1:82:43:14:e9:04:ee:c5:f9:52:a6:08:
         b1:23:3b:c7:25:11:3c:0a:6a:32:df:a5:2a:5d:4c:2d:5c:c8:
         0c:80:89:a2:e8:4c:f2:28:10:e6:80:fc:00:e5:30:2a:2f:8c:
         20:ce:e8:4f:a1:99:88:e0:f7:52:f6:68:cc:63:55:87:63:87:
         b5:88:dd:0f:a2:01:bd:94:0e:27:24:c8:bc:e4:a6:91:e3:ad:
         7a:a8:a7:b7:47:c4:3d:36:de:cb:51:1e:36:bb:85:b7:e2:d3:
         04:0c:2a:ae:ff:41:a7:ed:2f:48:53:54:30:69:19:a0:0c:13:
         30:8c:3c:83:84:6a:6d:d7:dd:6e:fc:8f:e0:87:42:a7:ff:74:
         91:dd:39:1f:6b:ff:24:dc:8d:96:2f:36:7e:bf:36:d7:ec:b4:
         b6:27:ba:9d:d2:28:89:ba:d0:1c:e0:b7:66:dd:c0:d0:55:3b:
         70:59:1d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 20:20:28 2024 by rpki-client on console-ams.rpki-client.org