Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/62d5e763-728d-4e73-96d7-a3d05557ec00.cer
File:                     62d5e763-728d-4e73-96d7-a3d05557ec00.cer (raw, json)
Hash identifier:          bo1wDjQzjFXiHIqq1BHq5cAXXaHeC7UDN9bv/9KO1zU=
Subject key identifier:   D3:DE:63:B0:4A:2B:09:7A:0E:08:5C:86:9A:CE:0F:5D:FD:49:C7:51
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858439E432C4B874399DBCE08E000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/62d5e763-728d-4e73-96d7-a3d05557ec00/62d5e763-728d-4e73-96d7-a3d05557ec00.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/62d5e763-728d-4e73-96d7-a3d05557ec00/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 21 Oct 2023 00:45:16 +0000
Certificate not after:    Fri 23 Jan 2026 01:45:16 +0000
Subordinate resources:    AS: 14985
                          AS: 27234
                          IP: 131.239.0.0/16
                          IP: 209.160.128.0/17
                          IP: 216.57.128.0/19
                          IP: 2605:a900::/32

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 20:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9e:43:2c:4b:87:43:99:db:ce:08:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Oct 21 00:45:16 2023 GMT
            Not After : Jan 23 01:45:16 2026 GMT
        Subject: CN=62d5e763-728d-4e73-96d7-a3d05557ec00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:5c:cc:a7:74:f6:83:8d:01:84:0f:45:d4:
                    75:2c:41:4c:2f:f7:ec:de:1d:11:2f:c1:87:ce:84:
                    92:db:23:7e:ef:0b:13:e0:10:ed:29:d6:9c:02:9d:
                    dd:2d:b2:51:b1:e5:32:b6:29:b3:c1:0c:71:42:4c:
                    53:54:76:4a:ee:a2:53:59:f3:e2:ca:bc:c3:07:fd:
                    52:f7:02:dd:4f:b5:6f:ca:5b:75:29:6a:8d:c1:93:
                    d1:41:82:00:34:09:9d:9b:d0:58:af:15:54:2c:d9:
                    cd:5e:72:35:81:0f:85:fe:5a:af:89:5e:2e:2d:5c:
                    be:1f:95:f1:e2:04:fd:16:9d:12:4c:de:5f:5e:a8:
                    e4:e1:be:78:d9:fd:4f:ac:d1:68:87:ab:01:5e:55:
                    e7:fc:e7:5e:25:db:60:71:cd:ad:56:8d:14:9b:e3:
                    4d:33:9b:e4:54:e1:11:f6:de:df:63:41:35:94:0d:
                    86:e1:c3:e4:df:b7:0f:6b:18:52:4f:54:82:0a:78:
                    e2:9d:df:06:72:1e:58:c6:13:37:e1:d8:03:dd:07:
                    bb:32:ca:0e:b1:ad:a0:a2:14:09:4c:ae:1f:26:30:
                    dc:75:82:30:1a:9f:dc:4a:71:2d:c6:45:14:70:e4:
                    d7:02:13:2f:d4:63:3a:ea:4e:3c:ce:00:d5:39:59:
                    a4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DE:63:B0:4A:2B:09:7A:0E:08:5C:86:9A:CE:0F:5D:FD:49:C7:51
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/62d5e763-728d-4e73-96d7-a3d05557ec00/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/62d5e763-728d-4e73-96d7-a3d05557ec00/62d5e763-728d-4e73-96d7-a3d05557ec00.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.239.0.0/16
                  209.160.128.0/17
                  216.57.128.0/19
                IPv6:
                  2605:a900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14985
                  27234

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e1:c9:85:f7:94:6c:c8:bd:0e:17:41:47:0f:01:09:31:c9:
         a1:8a:f6:37:c1:bf:d9:c4:9c:8a:be:44:d7:d2:02:e7:d8:6b:
         27:86:0d:5d:86:f3:8e:b4:92:61:7e:30:e3:1c:b8:5a:52:70:
         d3:12:e0:4b:1e:7f:81:3b:96:ee:9b:2f:f4:b8:39:08:77:99:
         c3:c7:14:9b:8e:31:09:85:87:2c:fc:df:3b:b7:32:85:6c:ac:
         97:74:13:c4:28:01:82:d9:10:68:02:fb:c0:cd:01:aa:19:91:
         e7:c4:0a:c8:f3:65:82:a1:77:78:8d:da:67:65:5b:b0:7f:ca:
         bf:83:6a:7e:7f:4b:5e:d9:11:6f:1c:c2:4e:90:3a:76:e9:30:
         e1:b2:da:2e:88:cf:79:e2:c2:f7:2e:64:b3:68:4e:45:38:62:
         1a:ee:34:f8:f2:5a:d5:be:56:7c:30:0e:fc:8d:34:25:7c:e1:
         d4:e7:db:6f:c6:35:88:ec:5e:0d:c2:23:ab:f1:e7:1c:eb:98:
         69:c9:90:5e:cf:1a:6e:3d:da:10:d4:8e:6a:28:b3:d4:f1:e4:
         d3:9c:60:30:98:f5:ac:c5:fd:b3:94:1c:7e:28:74:59:33:59:
         80:e1:8b:ac:cf:37:8c:3e:60:d9:55:12:77:e3:05:34:c7:c1:
         8a:cc:6f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 00:13:30 2024 by rpki-client on console-ams.rpki-client.org