Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e6147b8-d55d-4ed8-8973-d5cf2a27e161.cer
File:                     8e6147b8-d55d-4ed8-8973-d5cf2a27e161.cer (raw, json)
Hash identifier:          GgEYWTVZnwKsJP43xYRQL+SnR292RV5m5EgQ87gSzW0=
Subject key identifier:   ED:63:D4:6D:6D:1A:F4:DB:7A:04:38:0B:D6:0F:8F:BA:8F:D8:B6:50
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845BDA86A75F485408A7325E700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e6147b8-d55d-4ed8-8973-d5cf2a27e161/8e6147b8-d55d-4ed8-8973-d5cf2a27e161.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e6147b8-d55d-4ed8-8973-d5cf2a27e161/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 02 May 2024 16:13:11 +0000
Certificate not after:    Wed 05 Aug 2026 16:13:11 +0000
Subordinate resources:    AS: 401039
                          IP: 23.177.8.0/24
                          IP: 2602:f905::/40

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 20:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:a8:6a:75:f4:85:40:8a:73:25:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May  2 16:13:11 2024 GMT
            Not After : Aug  5 16:13:11 2026 GMT
        Subject: CN=8e6147b8-d55d-4ed8-8973-d5cf2a27e161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:dd:ca:c0:50:c6:73:90:10:fa:07:cf:63:
                    7c:d6:7a:32:cc:c1:ce:e5:42:f2:d7:1c:93:bf:f1:
                    1c:68:ba:77:5d:b8:80:82:a6:91:e6:e2:b3:97:9f:
                    4e:da:72:af:a1:b7:eb:6c:ad:46:47:80:43:81:7c:
                    e7:49:35:42:ea:df:51:fe:73:97:8d:8e:79:10:ea:
                    e2:58:bc:3c:3b:87:68:69:62:bc:c1:10:d2:54:22:
                    a1:d8:b3:f4:07:36:ca:89:74:fa:cf:d1:01:31:f4:
                    16:5d:55:44:56:d9:03:ea:eb:64:58:f0:d3:de:32:
                    97:ae:24:08:35:35:46:99:af:49:d7:15:f1:85:f6:
                    2b:a9:22:f1:36:07:99:f3:80:ee:dc:e8:43:a6:3c:
                    6c:a9:ff:c2:ab:37:f2:91:b8:63:2d:14:ba:82:01:
                    28:d5:ab:5f:da:54:48:4d:c7:50:65:aa:c6:5b:3c:
                    d7:45:a3:5b:94:7d:27:73:63:10:9e:70:3c:6b:e9:
                    ad:e3:c5:d6:f2:c6:a2:f7:a4:01:8e:c9:6b:40:c4:
                    6e:2f:40:5b:9a:03:1d:68:3e:e0:ee:62:35:36:37:
                    20:43:18:35:8b:8c:e2:90:b2:37:c0:bd:1c:84:39:
                    25:16:19:3f:e8:15:ff:bb:0c:f1:4a:b3:3f:86:69:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:63:D4:6D:6D:1A:F4:DB:7A:04:38:0B:D6:0F:8F:BA:8F:D8:B6:50
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e6147b8-d55d-4ed8-8973-d5cf2a27e161/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e6147b8-d55d-4ed8-8973-d5cf2a27e161/8e6147b8-d55d-4ed8-8973-d5cf2a27e161.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.8.0/24
                IPv6:
                  2602:f905::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401039

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e7:f6:d0:52:10:b2:77:bc:be:21:82:20:8c:f9:30:d3:87:
         cd:d1:10:0b:7c:a7:2a:eb:75:45:c9:7f:56:17:52:06:98:6f:
         c3:dc:9a:10:98:2d:f7:73:f2:6c:5b:74:d5:22:0e:a4:67:1d:
         6f:6d:63:ab:00:d9:f4:13:2d:90:48:b0:49:f9:aa:a4:2e:b7:
         59:88:7e:28:5e:65:91:e0:df:e2:39:49:0a:e2:ba:13:f2:ce:
         55:6c:b0:aa:b4:f6:31:f5:e3:5b:6c:c3:19:3a:32:2e:28:0a:
         e0:42:cc:26:7e:91:0b:d6:54:08:2b:07:ec:a5:c3:ef:84:d6:
         6f:3c:c8:e6:f4:18:3f:4e:6c:81:ad:aa:c4:33:a8:3a:ee:3d:
         9e:80:8f:ce:9b:ff:65:59:6e:7e:0f:c7:f0:dc:4d:61:ce:96:
         3b:c5:48:13:33:27:35:a4:a6:82:66:1a:6b:75:50:53:39:a9:
         93:a7:bc:22:c9:fb:8b:e6:d8:c8:e2:e6:43:1d:6d:f7:ff:0c:
         71:85:50:f1:fe:a0:82:db:a8:15:26:af:88:8a:ff:62:92:3b:
         e0:82:93:8a:05:4a:5b:9f:f2:fd:a3:ad:d6:c1:e3:23:b4:20:
         a0:d5:a1:65:8a:bd:ec:2b:7c:d1:d2:42:58:73:50:4b:e4:7f:
         1c:94:cb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 21:53:22 2024 by rpki-client on console-ams.rpki-client.org