Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/17bed06c-5f0c-43d0-a0de-df2d969d7a63.cer
File:                     17bed06c-5f0c-43d0-a0de-df2d969d7a63.cer (raw, json)
Hash identifier:          S1Q99No0i6aunZLCYoM8SaZ53Ja3dSoXp5SrMK5N15Y=
Subject key identifier:   92:82:D8:EE:C8:AD:F4:E0:EB:EE:35:21:56:07:29:E6:C7:E5:FA:EC
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285837EF694CEAE228BC6932F12F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/17bed06c-5f0c-43d0-a0de-df2d969d7a63/17bed06c-5f0c-43d0-a0de-df2d969d7a63.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/17bed06c-5f0c-43d0-a0de-df2d969d7a63/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Nov 2020 16:59:19 +0000
Certificate not after:    Wed 13 Nov 2030 16:59:19 +0000
Subordinate resources:    AS: 32242
                          IP: 23.130.224.0/24
                          IP: 172.102.0.0/22
                          IP: 2620:48:a000::/48

Validation:               Failed, certificate revoked on Fri 21 Apr 2023 14:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:ef:69:4c:ea:e2:28:bc:69:32:f1:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Nov 13 16:59:19 2020 GMT
            Not After : Nov 13 16:59:19 2030 GMT
        Subject: CN=17bed06c-5f0c-43d0-a0de-df2d969d7a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:1c:2d:34:7d:5d:b2:b3:fb:82:4f:d8:73:
                    45:30:15:18:83:d9:6f:a5:dc:b8:8e:f5:51:16:3e:
                    79:43:fa:b6:d4:55:22:e3:a5:6e:63:b2:79:d7:3c:
                    29:ba:1f:9c:35:e7:d3:7d:9c:0d:8e:ae:7d:82:50:
                    07:e7:c8:07:ea:44:4d:b9:e4:1a:c4:a4:c6:12:0d:
                    6b:df:7a:65:c8:53:7d:c3:14:5f:39:c2:54:17:ba:
                    a1:91:c6:df:98:bd:b5:86:e6:d0:a7:1d:26:de:28:
                    4a:0f:43:f2:f6:86:e1:c2:31:50:15:43:66:46:c2:
                    7d:72:63:58:1e:7c:d2:13:10:68:98:f5:27:31:93:
                    09:c0:c4:15:98:20:17:3d:1b:d6:4b:55:72:27:92:
                    77:57:19:bb:1b:de:74:b2:1e:58:f2:44:f1:11:df:
                    48:5d:62:52:7f:7e:a1:45:e9:6c:cf:4f:99:16:35:
                    6d:e5:89:a0:02:5e:36:4a:66:0e:9e:4d:16:9b:1e:
                    55:73:ee:05:24:f4:6e:5b:e7:16:26:32:46:d0:3a:
                    46:ac:ef:f1:32:4b:72:f9:dd:f3:64:4f:49:99:9f:
                    19:55:ac:d5:76:58:dc:01:cd:bd:0c:a4:49:1b:26:
                    fb:17:2a:d4:e1:54:5a:b5:f6:ea:0e:d6:04:d0:92:
                    56:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:82:D8:EE:C8:AD:F4:E0:EB:EE:35:21:56:07:29:E6:C7:E5:FA:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/17bed06c-5f0c-43d0-a0de-df2d969d7a63/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/17bed06c-5f0c-43d0-a0de-df2d969d7a63/17bed06c-5f0c-43d0-a0de-df2d969d7a63.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.224.0/24
                  172.102.0.0/22
                IPv6:
                  2620:48:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32242

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ee:21:29:6f:1a:c2:5f:88:3b:c5:61:ea:3c:88:da:d8:be:
         a1:f2:8e:68:d3:46:e9:52:58:0c:6e:45:ca:03:62:e7:01:c9:
         78:04:50:d8:61:23:e0:5a:79:12:4b:93:81:fd:c7:fd:5d:b1:
         ac:d1:fb:d6:b5:db:f5:fa:3c:08:00:3d:6c:b0:ae:6c:2c:1c:
         1d:53:21:cd:20:7a:df:d8:1b:98:6b:3f:81:1b:15:a9:3b:a5:
         59:87:9a:df:7f:b0:24:3d:56:06:66:fc:e0:1c:22:18:ab:a3:
         14:cc:2c:ba:31:29:10:db:cd:ad:75:00:ff:66:9c:4f:b0:82:
         01:4f:04:8c:47:c9:9d:fc:dd:8d:db:08:70:bc:54:88:ed:04:
         f0:f3:3f:ac:ff:bb:d9:b6:6a:dd:d2:c3:26:1a:9c:20:0f:e1:
         ae:2b:bb:39:f9:44:9c:a1:bf:1d:33:1f:d8:23:23:26:7e:02:
         e7:78:ad:c1:08:f5:8c:ea:42:88:a5:ce:21:cd:84:1d:8a:4c:
         2b:87:39:a8:a1:95:5e:8b:fe:6c:fb:f8:60:2c:f1:60:ff:9c:
         35:53:a6:2a:0d:3f:ab:ef:51:c0:fc:e3:a0:1e:b4:b4:8d:dc:
         cc:2e:8f:07:64:3f:cb:29:92:1d:9f:7e:9e:01:74:7d:72:ae:
         1a:de:2d:47
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWDfvaUzq4ii8aTLxLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIwMTExMzE2NTkxOVoXDTMwMTExMzE2NTkxOVowLzEtMCsGA1UEAxMk
MTdiZWQwNmMtNWYwYy00M2QwLWEwZGUtZGYyZDk2OWQ3YTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiQcLTR9XbKz+4JP2HNFMBUYg9lvpdy4jvVR
Fj55Q/q21FUi46VuY7J51zwpuh+cNefTfZwNjq59glAH58gH6kRNueQaxKTGEg1r
33plyFN9wxRfOcJUF7qhkcbfmL21hubQpx0m3ihKD0Py9obhwjFQFUNmRsJ9cmNY
HnzSExBomPUnMZMJwMQVmCAXPRvWS1VyJ5J3Vxm7G950sh5Y8kTxEd9IXWJSf36h
Relsz0+ZFjVt5YmgAl42SmYOnk0Wmx5Vc+4FJPRuW+cWJjJG0DpGrO/xMkty+d3z
ZE9JmZ8ZVazVdljcAc29DKRJGyb7FyrU4VRatfbqDtYE0JJWjwIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFJKC2O7IrfTg6+41IVYHKebH5frsMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8x
N2JlZDA2Yy01ZjBjLTQzZDAtYTBkZS1kZjJkOTY5ZDdhNjMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzE3YmVkMDZjLTVmMGMtNDNkMC1h
MGRlLWRmMmQ5NjlkN2E2My8xN2JlZDA2Yy01ZjBjLTQzZDAtYTBkZS1kZjJkOTY5
ZDdhNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNgYIKwYBBQUH
AQcBAf8EJzAlMBIEAgABMAwDBAAXguADBAKsZgAwDwQCAAIwCQMHACYgAEigADAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJ98jBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBI7iEpbxrCX4g7xWHq
PIja2L6h8o5o00bpUlgMbkXKA2LnAcl4BFDYYSPgWnkSS5OB/cf9XbGs0fvWtdv1
+jwIAD1ssK5sLBwdUyHNIHrf2BuYaz+BGxWpO6VZh5rff7AkPVYGZvzgHCIYq6MU
zCy6MSkQ282tdQD/ZpxPsIIBTwSMR8md/N2N2whwvFSI7QTw8z+s/7vZtmrd0sMm
GpwgD+GuK7s5+UScob8dMx/YIyMmfgLneK3BCPWM6kKIpc4hzYQdikwrhzmooZVe
i/5s+/hgLPFg/5w1U6YqDT+r71HA/OOgHrS0jdzMLo8HZD/LKZIdn36eAXR9cq4a
3i1H
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:02 2024 by rpki-client on console-ams.rpki-client.org