Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e114fc5-a47d-445b-97b0-2c531b89892f.cer
File:                     7e114fc5-a47d-445b-97b0-2c531b89892f.cer (raw, json)
Hash identifier:          eYmAxhRyhVLcKHJGBYlfAYdvTESBWrBJEHRbgEmLBjg=
Subject key identifier:   E9:CF:22:E6:60:35:A2:63:46:ED:34:87:D3:7E:50:F0:D3:42:D2:6E
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858376F42CCD9933FE1B27C800600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e114fc5-a47d-445b-97b0-2c531b89892f/7e114fc5-a47d-445b-97b0-2c531b89892f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e114fc5-a47d-445b-97b0-2c531b89892f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 22 Jul 2020 19:40:20 +0000
Certificate not after:    Mon 22 Jul 2030 19:40:20 +0000
Subordinate resources:    IP: 135.8.0.0/14
                          IP: 135.20.0.0/16
                          IP: 135.27.0.0/16
                          IP: 135.35.0.0/16
                          IP: 135.55.0.0 -- 135.56.255.255
                          IP: 135.60.0.0/16
                          IP: 135.64.0.0/16
                          IP: 135.74.0.0/16
                          IP: 135.105.0.0/16
                          IP: 135.122.0.0 -- 135.124.255.255
                          IP: 135.169.0.0/16
                          IP: 155.184.0.0/16
                          IP: 198.152.0.0/16
                          IP: 204.17.215.0/24
                          IP: 2620:38::/48
                          IP: 2620:116:1000::/40

Validation:               Failed, certificate revoked on Thu 20 Oct 2022 14:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:6f:42:cc:d9:93:3f:e1:b2:7c:80:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jul 22 19:40:20 2020 GMT
            Not After : Jul 22 19:40:20 2030 GMT
        Subject: CN=7e114fc5-a47d-445b-97b0-2c531b89892f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:a4:8f:6b:15:88:37:d8:22:00:25:49:7c:
                    88:e5:f0:bd:07:42:ef:18:07:bd:cb:d2:dc:b1:61:
                    39:52:3a:6f:c9:34:20:e6:0f:d9:a1:53:5a:ea:96:
                    81:7c:54:e2:a2:a8:07:15:49:5c:89:26:e4:b1:99:
                    e9:e9:e2:b1:b5:ff:5a:88:83:5c:69:bd:9b:66:22:
                    84:7f:38:d4:b3:76:6a:8c:f9:b5:d7:6e:c4:3c:51:
                    1c:87:e9:ce:03:3f:48:2a:82:4d:dd:e0:28:1c:61:
                    0d:d2:7b:1a:8e:b5:94:0f:89:90:a1:69:ba:e5:73:
                    37:ff:46:9a:73:0e:23:a1:19:f5:8c:06:bf:ca:d2:
                    2c:da:cf:c2:6b:93:2d:dd:1c:51:d6:01:31:c8:24:
                    10:08:9b:fd:33:73:fb:01:5f:c5:25:c6:7f:40:92:
                    0c:e6:4a:69:f9:2e:3e:6d:b6:cf:a2:a7:d1:a9:b4:
                    e9:9f:e2:b2:51:06:58:8b:a9:67:56:61:f8:09:6e:
                    eb:bb:82:fc:c3:f3:c4:c5:75:d5:59:90:ff:9e:5f:
                    82:64:21:52:47:8e:c9:5b:71:e4:26:b8:a7:ba:7f:
                    01:a4:8a:d0:b8:ae:f9:75:0d:21:2c:15:45:0d:55:
                    51:68:45:c3:be:89:7c:d2:0a:10:7d:5b:f0:99:a5:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:22:E6:60:35:A2:63:46:ED:34:87:D3:7E:50:F0:D3:42:D2:6E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e114fc5-a47d-445b-97b0-2c531b89892f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e114fc5-a47d-445b-97b0-2c531b89892f/7e114fc5-a47d-445b-97b0-2c531b89892f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.8.0.0/14
                  135.20.0.0/16
                  135.27.0.0/16
                  135.35.0.0/16
                  135.55.0.0-135.56.255.255
                  135.60.0.0/16
                  135.64.0.0/16
                  135.74.0.0/16
                  135.105.0.0/16
                  135.122.0.0-135.124.255.255
                  135.169.0.0/16
                  155.184.0.0/16
                  198.152.0.0/16
                  204.17.215.0/24
                IPv6:
                  2620:38::/48
                  2620:116:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:3f:bf:35:af:02:83:6a:b1:04:8e:f4:10:ab:19:e9:eb:6a:
         30:21:ae:e2:51:5a:2d:81:ce:43:13:f2:22:71:4e:61:74:46:
         82:fe:f2:c4:66:3c:bd:3a:45:07:93:f8:43:75:45:c2:2d:ed:
         30:e3:5f:a2:5e:b7:81:5b:56:7b:37:f4:ae:88:3d:ff:86:09:
         39:cb:23:79:3f:df:60:8b:95:e0:30:a4:ed:8f:eb:19:88:d0:
         e2:b1:73:c3:d1:00:40:d6:58:cd:e4:37:55:d9:68:92:d2:df:
         27:e2:a1:2f:d9:53:80:55:83:31:1b:24:6c:89:1f:32:6b:b7:
         5f:c4:b9:da:d4:e7:2d:ea:b1:c2:52:7d:f3:61:7a:3a:5f:e2:
         45:f2:ef:ee:ed:ac:33:1f:9e:5b:a5:57:62:6e:c6:ec:dc:a8:
         13:e5:30:45:b7:51:34:95:7c:0e:99:e0:40:cc:7f:59:2b:88:
         81:aa:59:fa:8b:1e:cf:e7:ae:15:90:7f:8d:d5:65:38:d6:58:
         bb:ac:82:d3:3d:4f:9d:c2:c0:23:5f:1c:f8:ba:8a:36:9e:20:
         25:50:9c:29:aa:47:94:c5:1d:7e:1d:73:c0:47:89:6d:2d:ee:
         9d:23:eb:ba:e2:de:c6:fc:35:dd:ae:c0:f7:d8:57:bf:7f:bc:
         c2:67:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:32 2024 by rpki-client on console-ams.rpki-client.org