Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
File:                     a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer (raw, json)
Hash identifier:          lYVyzG/d4LIBsL4hshAih5CNjH0RYpvozD0FaCo+cUg=
Subject key identifier:   DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E4833AFE2EAE2C10A311ACC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 14 Feb 2025 20:06:39 +0000
Subordinate resources:    AS: 21948
                          IP: 144.49.0.0/16
                          IP: 2602:274::/36
                          IP: 2620:78::/48
                          IP: 2620:100::/44

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 16:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:3a:fe:2e:ae:2c:10:a3:11:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Feb 14 20:06:39 2025 GMT
        Subject: CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:d7:c9:8a:a4:5a:cc:3c:99:ce:a9:5d:28:
                    ad:88:f4:4c:3c:7c:7f:5b:d5:10:95:95:8a:82:59:
                    f6:1b:cf:48:a3:1a:30:19:a9:ec:ae:30:9e:f1:db:
                    21:0e:0d:e8:19:64:4d:18:6f:bd:ad:1c:ed:e2:dd:
                    f6:6f:c4:e4:07:4a:9a:78:d0:f5:c0:26:ae:99:29:
                    4d:12:f9:f6:37:fe:53:cf:a2:c7:ea:eb:e4:f0:61:
                    37:87:6b:75:ef:8f:ab:22:89:19:3a:90:66:67:6f:
                    fa:e5:42:d6:cf:cf:54:c0:af:13:65:69:4c:14:3b:
                    33:81:7d:50:b5:91:23:54:54:cb:55:0e:05:2c:d5:
                    d0:cf:25:6d:5e:46:5b:d0:00:ed:e4:35:8a:76:22:
                    6f:33:96:cf:6b:a3:2b:3e:8f:16:02:d8:d3:b7:d1:
                    8f:6b:ec:9b:10:94:00:c2:d4:3e:bb:08:4a:a2:1e:
                    63:d4:82:ea:72:b3:7a:5b:a4:68:99:34:af:ae:7b:
                    a5:a9:e9:e5:93:a7:22:42:d0:13:dd:60:ff:2d:48:
                    bb:c2:60:f4:85:c9:07:27:4b:f0:02:0b:80:e4:b2:
                    c9:0c:07:92:c4:9f:d4:67:55:5b:ee:98:12:39:aa:
                    48:73:b4:fa:e0:ad:41:ae:b1:53:45:95:8c:36:4a:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.49.0.0/16
                IPv6:
                  2602:274::/36
                  2620:78::/48
                  2620:100::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21948

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:39:97:a9:0a:be:9c:e3:02:b6:1c:4b:f1:d5:7d:7f:c1:cb:
         46:74:20:b2:f9:07:c4:41:97:48:c0:d2:e7:36:12:aa:d3:29:
         4f:e5:8f:80:b9:0f:3a:40:c6:c0:1c:95:85:ff:e3:86:1c:ee:
         38:4a:04:48:d2:1c:a7:c0:b7:dc:2e:c6:40:76:04:5a:97:4b:
         01:c4:94:ba:6a:38:79:8d:c0:00:63:2a:90:e8:57:0f:81:8d:
         80:20:a7:de:de:a3:a0:ab:ca:33:23:21:d2:b5:f7:2c:1c:da:
         60:48:d2:3e:8c:52:83:eb:49:9c:80:26:b1:d4:dc:d8:96:ba:
         03:10:de:38:18:f9:a3:b5:83:4e:03:0b:9b:52:33:f5:97:43:
         ea:49:9a:38:2d:12:98:3d:fc:79:5d:95:bf:69:c2:7a:22:16:
         2d:97:6c:3e:fa:a3:f5:63:e0:35:86:84:d0:f3:03:4a:3b:32:
         df:12:e4:d2:da:db:19:77:b2:0a:a3:29:f0:d1:2c:2d:6c:71:
         1c:65:cd:de:a4:6c:82:a6:d8:c9:aa:00:7d:2f:86:32:96:9b:
         d7:a4:e3:72:c2:c7:85:9e:33:ec:94:c3:02:6b:ad:7d:ad:83:
         f0:6c:5a:bf:0b:75:0d:77:7c:3a:aa:0c:f9:45:13:7b:e6:ad:
         65:34:51:67
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEHkgzr+Lq4sEKMRrMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDIxNDIwMDYzOVowLzEtMCsGA1UEAxMk
YTJmZjdjY2YtYzEzOC00ZTI1LWIzYmItZGMyMDY1MTJhZjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWHXyYqkWsw8mc6pXSitiPRMPHx/W9UQlZWK
gln2G89IoxowGansrjCe8dshDg3oGWRNGG+9rRzt4t32b8TkB0qaeND1wCaumSlN
Evn2N/5Tz6LH6uvk8GE3h2t174+rIokZOpBmZ2/65ULWz89UwK8TZWlMFDszgX1Q
tZEjVFTLVQ4FLNXQzyVtXkZb0ADt5DWKdiJvM5bPa6MrPo8WAtjTt9GPa+ybEJQA
wtQ+uwhKoh5j1ILqcrN6W6RomTSvrnulqenlk6ciQtAT3WD/LUi7wmD0hckHJ0vw
AguA5LLJDAeSxJ/UZ1Vb7pgSOapIc7T64K1BrrFTRZWMNkpLuQIDAQABo4IEOzCC
BDcwHQYDVR0OBBYEFNwP+8rdri81YCm/vP22by0Dn+TgMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9h
MmZmN2NjZi1jMTM4LTRlMjUtYjNiYi1kYzIwNjUxMmFmM2EvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2EyZmY3Y2NmLWMxMzgtNGUyNS1i
M2JiLWRjMjA2NTEyYWYzYS9hMmZmN2NjZi1jMTM4LTRlMjUtYjNiYi1kYzIwNjUx
MmFmM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMAsEAgABMAUDAwCQMTAgBAIAAjAaAwYEJgICdAADBwAmIAB4AAAD
BwQmIAEAAAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICVbwwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASzmX
qQq+nOMCthxL8dV9f8HLRnQgsvkHxEGXSMDS5zYSqtMpT+WPgLkPOkDGwByVhf/j
hhzuOEoESNIcp8C33C7GQHYEWpdLAcSUumo4eY3AAGMqkOhXD4GNgCCn3t6joKvK
MyMh0rX3LBzaYEjSPoxSg+tJnIAmsdTc2Ja6AxDeOBj5o7WDTgMLm1Iz9ZdD6kma
OC0SmD38eV2Vv2nCeiIWLZdsPvqj9WPgNYaE0PMDSjsy3xLk0trbGXeyCqMp8NEs
LWxxHGXN3qRsgqbYyaoAfS+GMpab16TjcsLHhZ4z7JTDAmutfa2D8Gxavwt1DXd8
OqoM+UUTe+atZTRRZw==
-----END CERTIFICATE-----
Generated at Mon Feb 5 20:17:00 2024 by rpki-client on console-fra.rpki-client.org