Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/536dfbb3-e2d5-431c-9b43-d9ffce34b0c6.cer
File:                     536dfbb3-e2d5-431c-9b43-d9ffce34b0c6.cer (raw, json)
Hash identifier:          hr2VbgrwxW6Q4+34FfeoLMycwiwa+iEcUb/o3xMeKJQ=
Subject key identifier:   13:05:6E:56:1A:28:E8:16:C3:29:0F:E9:30:9C:9A:9E:98:F0:FA:46
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285844166C5BBC67D0E65677AC8180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/536dfbb3-e2d5-431c-9b43-d9ffce34b0c6/536dfbb3-e2d5-431c-9b43-d9ffce34b0c6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/536dfbb3-e2d5-431c-9b43-d9ffce34b0c6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 03 Dec 2023 01:45:15 +0000
Certificate not after:    Sat 07 Mar 2026 01:45:15 +0000
Subordinate resources:    AS: 18792
                          IP: 23.160.16.0/24
                          IP: 2602:80b:5000::/44

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:16:6c:5b:bc:67:d0:e6:56:77:ac:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Dec  3 01:45:15 2023 GMT
            Not After : Mar  7 01:45:15 2026 GMT
        Subject: CN=536dfbb3-e2d5-431c-9b43-d9ffce34b0c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6b:e9:56:d8:12:f9:c7:15:e3:75:e0:08:f8:
                    df:bc:5e:fe:c3:c0:35:ba:ce:4f:0d:8f:47:bc:54:
                    e1:b3:3e:96:87:01:2d:f5:51:26:51:02:b8:b1:c2:
                    6f:02:60:9f:5c:e6:ce:ec:88:b8:c6:0a:5d:1c:ad:
                    0a:33:9a:f1:47:fc:fd:5a:b4:a9:f9:49:67:c2:b9:
                    61:26:47:30:6d:44:20:e7:3a:c1:88:28:6a:06:d7:
                    8a:b0:9b:74:6d:5b:64:db:71:c2:a9:97:17:82:58:
                    32:60:4b:49:1c:66:01:c4:5c:20:ec:27:4c:64:34:
                    ea:a6:e4:e1:88:75:07:fb:41:c9:33:6f:74:ce:ad:
                    b0:ea:17:c3:03:e3:e4:c6:1a:f2:ea:39:80:91:bf:
                    a7:f6:4d:35:c2:8a:7f:43:51:46:0b:8e:42:76:67:
                    38:b2:d2:4e:22:92:d5:de:9b:dc:66:71:52:04:bd:
                    c6:ff:3c:ec:e7:9d:d2:9f:b6:5e:1d:06:44:e9:85:
                    80:e3:d7:b5:89:c0:3b:f6:ee:f8:74:94:f4:c6:9e:
                    b8:11:56:4d:6f:a2:e2:db:51:64:59:17:81:3d:9d:
                    59:15:d4:9c:b2:55:3f:e1:47:da:5d:e1:8c:cf:13:
                    83:52:0e:5a:a5:d2:3a:d9:cf:a6:d9:18:73:89:73:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:05:6E:56:1A:28:E8:16:C3:29:0F:E9:30:9C:9A:9E:98:F0:FA:46
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/536dfbb3-e2d5-431c-9b43-d9ffce34b0c6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/536dfbb3-e2d5-431c-9b43-d9ffce34b0c6/536dfbb3-e2d5-431c-9b43-d9ffce34b0c6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.16.0/24
                IPv6:
                  2602:80b:5000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18792

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:2a:f2:61:59:52:f1:e9:a1:9a:8d:65:fb:6a:83:af:03:1c:
         a1:05:d8:81:ae:eb:b8:2e:f1:d6:21:a8:a3:2a:ea:9a:4c:f5:
         ad:f5:22:3d:70:6c:56:e9:04:d9:64:4b:f9:d0:fe:24:7b:ee:
         73:ca:6d:97:6d:78:88:88:15:18:f5:a5:c5:3c:73:7d:1b:17:
         d2:e0:d5:5f:36:15:c3:13:8f:09:23:98:0b:1f:6b:2c:59:30:
         42:52:c5:fd:f7:e6:f1:36:b6:da:0d:7c:af:24:ac:45:a2:66:
         c3:37:45:d8:2b:8a:16:77:21:b1:74:a4:3a:aa:7e:67:84:5d:
         ba:5d:1d:70:81:11:25:ef:4f:4c:db:d5:f2:a3:b7:81:60:45:
         1e:41:4f:1f:06:8d:3a:af:a0:3b:e3:35:40:89:f3:9b:7b:6c:
         e4:9e:b8:01:9b:2c:99:a1:1e:8f:8a:f0:4e:0a:ec:c2:29:2f:
         c4:8f:ac:83:65:4b:3d:fc:6b:be:d6:1e:8c:cb:70:fc:72:03:
         55:0b:02:1b:6c:0a:9a:0d:2d:b9:cb:ca:3d:cf:be:10:1b:be:
         8d:fb:65:64:55:e4:32:20:dd:42:59:1b:df:ce:b2:cc:1b:c5:
         b7:0e:c3:23:df:ea:e3:f8:7a:27:ae:99:dc:56:6d:5e:86:e5:
         19:86:cc:c1
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEQWbFu8Z9DmVnesgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMTIwMzAxNDUxNVoXDTI2MDMwNzAxNDUxNVowLzEtMCsGA1UEAxMk
NTM2ZGZiYjMtZTJkNS00MzFjLTliNDMtZDlmZmNlMzRiMGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mvpVtgS+ccV43XgCPjfvF7+w8A1us5PDY9H
vFThsz6WhwEt9VEmUQK4scJvAmCfXObO7Ii4xgpdHK0KM5rxR/z9WrSp+Ulnwrlh
JkcwbUQg5zrBiChqBteKsJt0bVtk23HCqZcXglgyYEtJHGYBxFwg7CdMZDTqpuTh
iHUH+0HJM290zq2w6hfDA+Pkxhry6jmAkb+n9k01wop/Q1FGC45Cdmc4stJOIpLV
3pvcZnFSBL3G/zzs553Sn7ZeHQZE6YWA49e1icA79u74dJT0xp64EVZNb6Li21Fk
WReBPZ1ZFdScslU/4UfaXeGMzxODUg5apdI62c+m2RhziXOjDwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFBMFblYaKOgWwykP6TCcmp6Y8PpGMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81
MzZkZmJiMy1lMmQ1LTQzMWMtOWI0My1kOWZmY2UzNGIwYzYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzUzNmRmYmIzLWUyZDUtNDMxYy05
YjQzLWQ5ZmZjZTM0YjBjNi81MzZkZmJiMy1lMmQ1LTQzMWMtOWI0My1kOWZmY2Uz
NGIwYzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBAAXoBAwDwQCAAIwCQMHBCYCCAtQADAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgJJaDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9KvJhWVLx6aGajWX7aoOvAxyh
BdiBruu4LvHWIaijKuqaTPWt9SI9cGxW6QTZZEv50P4ke+5zym2XbXiIiBUY9aXF
PHN9GxfS4NVfNhXDE48JI5gLH2ssWTBCUsX99+bxNrbaDXyvJKxFombDN0XYK4oW
dyGxdKQ6qn5nhF26XR1wgREl709M29Xyo7eBYEUeQU8fBo06r6A74zVAifObe2zk
nrgBmyyZoR6PivBOCuzCKS/Ej6yDZUs9/Gu+1h6My3D8cgNVCwIbbAqaDS25y8o9
z74QG76N+2VkVeQyIN1CWRvfzrLMG8W3DsMj3+rj+HonrpncVm1ehuUZhszB
-----END CERTIFICATE-----
Generated at Sat Feb 10 01:22:08 2024 by rpki-client on console-fra.rpki-client.org