Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
File:                     e02382c7-abd5-4293-a7a2-334013e1284b.cer (raw, json)
Hash identifier:          rJIOKQs7u+U8Wkc4D0nMC9ywYOSzmUST7cbN3Ob85qA=
Subject key identifier:   95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584206AB4DF2339F0A2649D2AD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 28 May 2023 00:45:16 +0000
Certificate not after:    Sat 30 Aug 2025 00:45:16 +0000
Subordinate resources:    AS: 36352
                          IP: 23.94.0.0/15
                          IP: 75.127.0.0/20
                          IP: 96.8.112.0/20
                          IP: 104.168.0.0/17
                          IP: 107.172.0.0/14
                          IP: 108.174.48.0/20
                          IP: 172.245.0.0/16
                          IP: 192.3.0.0/16
                          IP: 192.210.128.0/17
                          IP: 192.227.128.0/17
                          IP: 198.12.64.0/18
                          IP: 198.23.128.0/17
                          IP: 198.46.128.0/17
                          IP: 198.144.176.0/20
                          IP: 199.21.112.0/22
                          IP: 199.188.100.0/22
                          IP: 206.217.128.0/20
                          IP: 2607:9d00::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:06:ab:4d:f2:33:9f:0a:26:49:d2:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 28 00:45:16 2023 GMT
            Not After : Aug 30 00:45:16 2025 GMT
        Subject: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:b9:c0:42:e9:27:99:63:ef:ff:43:ca:5c:
                    28:3c:be:48:89:68:f9:a2:b9:7d:8b:87:97:6b:a9:
                    9e:2f:12:0c:1f:4d:71:55:09:ef:5d:aa:94:80:0a:
                    ff:2b:bf:05:78:9b:3d:a0:fd:3b:c6:10:b5:02:1d:
                    25:b8:91:e3:fa:b6:38:50:17:48:fc:85:84:34:73:
                    d4:6c:91:aa:b4:9e:21:ef:f6:0f:25:8f:10:93:87:
                    c7:26:eb:9a:62:35:e7:8c:81:cb:f3:2c:26:91:a1:
                    4f:53:32:2f:5a:5c:21:74:03:f3:af:56:6c:c1:fa:
                    b3:fc:d3:31:12:fb:d6:d1:5c:d2:ff:ae:7c:d3:cb:
                    2e:b5:bd:ab:dc:cc:f2:da:55:7e:ef:6c:bf:e3:80:
                    28:63:a4:a8:12:4c:9d:a1:c9:98:a4:1f:e0:da:17:
                    e2:69:09:62:aa:0c:82:45:bf:1d:98:c3:28:89:52:
                    4b:34:b6:ee:7a:a0:38:00:aa:42:e1:62:6b:6a:c9:
                    da:47:bd:0b:c8:e5:44:15:c7:54:d0:68:00:4c:10:
                    11:43:99:bb:61:d8:10:56:13:f5:33:1e:99:a0:b8:
                    fc:d2:52:0b:aa:da:d3:fd:c2:45:ef:b5:c5:21:b6:
                    db:27:8b:19:1d:a5:65:ed:75:2c:9a:24:53:1a:ea:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.0.0/15
                  75.127.0.0/20
                  96.8.112.0/20
                  104.168.0.0/17
                  107.172.0.0/14
                  108.174.48.0/20
                  172.245.0.0/16
                  192.3.0.0/16
                  192.210.128.0/17
                  192.227.128.0/17
                  198.12.64.0/18
                  198.23.128.0/17
                  198.46.128.0/17
                  198.144.176.0/20
                  199.21.112.0/22
                  199.188.100.0/22
                  206.217.128.0/20
                IPv6:
                  2607:9d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36352

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:cc:e7:8d:f9:81:ac:c5:30:3f:73:1e:ba:fd:5e:29:a4:96:
         df:4e:2e:06:95:bf:5c:15:1a:47:74:84:22:80:e9:40:8f:78:
         b1:69:e9:a0:4a:a7:99:e9:a6:5e:a2:a3:9a:50:e5:9d:51:7b:
         2a:be:4e:f0:8d:99:8f:64:a4:ea:a9:d1:d6:db:37:30:62:93:
         2a:94:f4:37:a5:1d:d5:08:f3:89:ea:b2:95:47:93:25:8d:be:
         d7:03:f1:6f:a2:47:6d:d7:a4:66:25:44:93:81:5a:32:53:61:
         04:0a:d7:43:39:37:d7:e6:13:64:d9:88:0e:55:57:8d:c6:31:
         49:76:dc:c5:77:ca:62:d9:bc:29:e7:52:40:8d:eb:1d:9c:33:
         0e:ef:7a:1a:39:26:b2:a1:30:6d:1e:c4:32:fa:73:eb:86:c1:
         07:4c:9d:5d:a5:0e:2b:cf:a0:68:d8:69:fa:dd:ee:13:ff:2e:
         d6:40:e5:40:f4:87:36:02:ac:b3:8a:16:71:f8:11:a7:fb:24:
         e1:2e:a9:5a:ce:4d:99:0b:cb:6d:da:e9:22:94:fb:63:5c:e0:
         c8:cf:72:8b:e4:c6:21:e7:3b:4c:c2:9e:8d:e3:fc:dd:57:fa:
         89:23:2a:7d:0c:79:b4:cf:8f:69:e6:e9:af:ae:38:e8:20:64:
         ae:97:82:78
-----BEGIN CERTIFICATE-----
MIIHdTCCBl2gAwIBAgIUAQ0Mn0MoWEIGq03yM58KJknSrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMDUyODAwNDUxNloXDTI1MDgzMDAwNDUxNlowLzEtMCsGA1UEAxMk
ZTAyMzgyYzctYWJkNS00MjkzLWE3YTItMzM0MDEzZTEyODRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNy5wELpJ5lj7/9DylwoPL5IiWj5orl9i4eX
a6meLxIMH01xVQnvXaqUgAr/K78FeJs9oP07xhC1Ah0luJHj+rY4UBdI/IWENHPU
bJGqtJ4h7/YPJY8Qk4fHJuuaYjXnjIHL8ywmkaFPUzIvWlwhdAPzr1Zswfqz/NMx
EvvW0VzS/65808sutb2r3Mzy2lV+72y/44AoY6SoEkydocmYpB/g2hfiaQliqgyC
Rb8dmMMoiVJLNLbueqA4AKpC4WJrasnaR70LyOVEFcdU0GgATBARQ5m7YdgQVhP1
Mx6ZoLj80lILqtrT/cJF77XFIbbbJ4sZHaVl7XUsmiRTGuorvwIDAQABo4IEhzCC
BIMwHQYDVR0OBBYEFJU7uXUOHVA2Tn/Q2N6ibPBs70VBMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9l
MDIzODJjNy1hYmQ1LTQyOTMtYTdhMi0zMzQwMTNlMTI4NGIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2UwMjM4MmM3LWFiZDUtNDI5My1h
N2EyLTMzNDAxM2UxMjg0Yi9lMDIzODJjNy1hYmQ1LTQyOTMtYTdhMi0zMzQwMTNl
MTI4NGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgYoGCCsGAQUF
BwEHAQH/BHsweTBoBAIAATBiAwMBF14DBARLfwADBARgCHADBAdoqAADAwJrrAME
BGyuMAMDAKz1AwMAwAMDBAfA0oADBAfA44ADBAbGDEADBAfGF4ADBAfGLoADBATG
kLADBALHFXADBALHvGQDBATO2YAwDQQCAAIwBwMFACYHnQAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAI4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACzM5435gazFMD9zHrr9Ximklt9OLgaV
v1wVGkd0hCKA6UCPeLFp6aBKp5nppl6io5pQ5Z1Reyq+TvCNmY9kpOqp0dbbNzBi
kyqU9DelHdUI84nqspVHkyWNvtcD8W+iR23XpGYlRJOBWjJTYQQK10M5N9fmE2TZ
iA5VV43GMUl23MV3ymLZvCnnUkCN6x2cMw7veho5JrKhMG0exDL6c+uGwQdMnV2l
DivPoGjYafrd7hP/LtZA5UD0hzYCrLOKFnH4Eaf7JOEuqVrOTZkLy23a6SKU+2Nc
4MjPcovkxiHnO0zCno3j/N1X+okjKn0MebTPj2nm6a+uOOggZK6Xgng=
-----END CERTIFICATE-----
Generated at Thu Jan 4 18:54:42 2024 by rpki-client on console-ams.rpki-client.org