Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42/02a2e07dac9c9fa5200389642554daaf59566365dc7188711a.cer
File:                     02a2e07dac9c9fa5200389642554daaf59566365dc7188711a.cer (raw, json)
Hash identifier:          iLSxATnvOnqKzyim37SLWr5JqALPUwwU26gNlWKbsic=
Subject key identifier:   A6:89:2E:1D:E5:C0:4C:0E:57:E9:4A:F0:82:58:C8:0A:B8:B6:44:65
Authority key identifier: B2:22:35:74:FF:4E:88:24:06:11:87:DC:74:20:92:62:4D:D6:14:E2
Certificate issuer:       /CN=94008e39-99d4-45b9-99c6-73bae3250c42
Certificate serial:       010D0C9F43285847040A0350AABB73C5C18D8C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/1/A6892E1DE5C04C0E57E94AF08258C80AB8B64465.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 28 Jun 2024 22:13:40 +0000
Certificate not after:    Thu 01 Oct 2026 22:13:40 +0000
Subordinate resources:    AS: 395163
                          IP: 23.150.192.0/24
                          IP: 2604:70c0::/32

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 18:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:04:0a:03:50:aa:bb:73:c5:c1:8d:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94008e39-99d4-45b9-99c6-73bae3250c42
        Validity
            Not Before: Jun 28 22:13:40 2024 GMT
            Not After : Oct  1 22:13:40 2026 GMT
        Subject: CN=02a2e07dac9c9fa5200389642554daaf59566365dc7188711a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:78:df:9b:7a:6c:af:c5:fc:08:ba:90:4f:
                    e3:4b:09:47:65:b4:f0:96:3d:9f:f3:77:2e:d0:1f:
                    0b:64:7d:9c:1f:74:06:bd:84:cb:e0:be:ee:d4:15:
                    90:f8:15:d7:41:e3:db:c1:9d:aa:91:32:27:66:21:
                    95:a1:b5:8b:16:5b:28:2c:fb:5a:a7:b1:0b:ce:38:
                    f6:30:53:9b:fa:3e:ad:f2:f4:72:47:e6:4d:04:5d:
                    12:6a:83:bb:52:fd:d5:60:6c:bf:2b:b0:a2:ad:c4:
                    6f:94:60:c1:c3:9c:42:25:67:64:dd:4d:b9:4f:0a:
                    c7:c7:14:2a:a6:a0:77:6c:5a:f0:c5:eb:3c:d6:dd:
                    2d:c0:c0:32:7f:55:22:de:51:d2:f7:b2:85:33:58:
                    5e:90:e2:7c:42:c1:8e:f1:13:03:a7:28:4d:88:b2:
                    36:37:26:4e:e1:63:d2:a1:2a:63:a9:0d:d5:c0:4a:
                    5b:af:f7:34:ae:23:c5:5b:fc:cb:99:41:4a:b9:03:
                    67:a7:d1:02:83:53:c6:39:71:ad:26:b9:02:df:d8:
                    4f:cf:a2:2c:6b:0e:ad:d0:65:ab:89:20:c5:e7:d1:
                    8d:d2:57:03:7a:fb:5a:66:d4:fb:f2:fd:31:63:3d:
                    a2:31:d1:6b:8d:32:10:cb:1b:a0:6e:fb:4d:a9:e1:
                    93:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:89:2E:1D:E5:C0:4C:0E:57:E9:4A:F0:82:58:C8:0A:B8:B6:44:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/1/A6892E1DE5C04C0E57E94AF08258C80AB8B64465.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42/94008e39-99d4-45b9-99c6-73bae3250c42.crl

            X509v3 Authority Key Identifier:
                keyid:B2:22:35:74:FF:4E:88:24:06:11:87:DC:74:20:92:62:4D:D6:14:E2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.192.0/24
                IPv6:
                  2604:70c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395163

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:91:02:1b:db:93:a3:05:71:33:a3:c9:d5:b7:38:a6:a0:a6:
         15:c6:6e:21:36:9f:c8:7a:90:7f:e9:4e:cb:88:62:5c:06:22:
         9d:e6:57:d0:7b:99:3b:3c:05:cf:aa:33:e7:cb:f6:bd:2e:3f:
         bd:19:a1:06:d9:b6:73:1f:a3:3c:49:98:ab:7e:21:bc:6f:d9:
         72:1a:f7:89:a5:68:60:4a:76:d0:f2:30:cd:b2:2e:1c:06:3f:
         92:aa:82:06:b5:f9:30:3e:1a:ee:6c:1b:fa:cc:82:45:61:09:
         d9:2c:d9:a9:14:31:6e:8b:4c:b7:33:70:9a:d3:bf:50:3b:d3:
         58:e1:b8:94:c8:39:96:13:cf:b0:c2:26:5c:b6:fd:c0:61:36:
         53:e2:85:6d:94:7b:15:66:66:60:25:db:36:84:c2:56:39:c7:
         67:a7:83:89:72:a1:7f:ef:17:86:3b:9c:17:aa:f2:ed:05:50:
         4a:3d:e6:07:a5:10:5f:e1:4f:47:4d:aa:f5:c3:a7:30:ec:fa:
         37:fc:e8:70:39:14:d6:5c:79:19:26:95:84:da:ac:0a:9c:aa:
         a4:d2:25:cd:7f:39:ac:48:a3:7a:e1:ea:19:ba:bc:dd:f1:13:
         9e:f4:59:bb:0f:17:49:f6:f7:5e:41:b1:bf:20:b9:aa:9d:91:
         fd:f5:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 21:06:02 2024 by rpki-client on console-fra.rpki-client.org