Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f1bcd60b-3df5-40ae-bb37-eb7a25cc0e1e.cer
File:                     f1bcd60b-3df5-40ae-bb37-eb7a25cc0e1e.cer (raw, json)
Hash identifier:          fG6DTxO7j8xDXJJ9zqNtsL5G0Cozh6dVKA42QLHRZYU=
Subject key identifier:   11:BD:61:71:1B:FE:28:04:14:F5:AD:4C:76:67:81:CE:58:8A:61:D6
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E4834C37A39B3C29608D2640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f1bcd60b-3df5-40ae-bb37-eb7a25cc0e1e/f1bcd60b-3df5-40ae-bb37-eb7a25cc0e1e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f1bcd60b-3df5-40ae-bb37-eb7a25cc0e1e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Wed 11 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 393292
                          IP: 170.39.205.0/24
                          IP: 2602:fd34::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4c:37:a3:9b:3c:29:60:8d:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 11 19:06:39 2025 GMT
        Subject: CN=f1bcd60b-3df5-40ae-bb37-eb7a25cc0e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:68:a3:59:7a:3b:98:4a:39:85:05:08:68:
                    25:2b:f9:d4:14:cc:42:bc:34:7b:3b:b2:fb:b9:be:
                    dc:44:a6:eb:1f:80:3d:c7:c6:2a:2c:d5:69:2e:43:
                    96:6a:9c:6f:3c:23:75:7c:7c:c6:9f:82:b0:22:90:
                    29:c4:48:b9:8d:47:cf:99:45:2e:89:bf:6d:33:c8:
                    87:fb:a1:5f:84:4c:23:7d:aa:10:3a:d9:7d:c9:42:
                    2a:66:c7:e0:9d:52:2d:02:87:df:d7:5c:4e:af:42:
                    82:72:fd:58:f5:a0:10:e3:61:4b:8f:40:2d:14:da:
                    d5:af:1e:ea:3b:9b:00:40:aa:6d:4f:a6:aa:39:16:
                    58:26:11:e9:b4:78:c0:7a:63:ff:4c:2d:de:44:58:
                    07:ad:4d:8c:d0:99:64:ea:7a:3e:3c:28:31:f4:74:
                    89:85:d1:80:f4:b5:ae:d3:c9:50:38:2d:1a:3a:b8:
                    69:87:f0:5e:42:90:4d:67:0c:11:d2:65:cc:76:b3:
                    6e:2e:03:89:f9:97:db:58:28:53:18:c2:84:28:8c:
                    f3:1a:1e:b7:76:aa:c9:e3:6f:39:56:c4:32:80:cc:
                    a7:54:cf:51:91:49:b4:02:f0:94:f9:7d:2a:11:b8:
                    6f:6a:5f:5e:8e:27:8d:c7:2e:4b:c3:a3:14:bd:44:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BD:61:71:1B:FE:28:04:14:F5:AD:4C:76:67:81:CE:58:8A:61:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f1bcd60b-3df5-40ae-bb37-eb7a25cc0e1e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f1bcd60b-3df5-40ae-bb37-eb7a25cc0e1e/f1bcd60b-3df5-40ae-bb37-eb7a25cc0e1e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.205.0/24
                IPv6:
                  2602:fd34::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393292

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1d:dc:d1:41:28:61:3b:75:f7:b9:52:0a:94:61:8d:bf:07:
         18:b3:0e:fd:9b:4a:ba:da:02:8c:70:57:fc:1d:47:5d:a7:a1:
         33:de:c8:ed:b8:ba:76:be:ab:a7:8d:b5:e7:5c:15:65:bc:3f:
         65:92:5e:db:8b:3b:3c:27:32:1b:a7:8a:4f:87:aa:b8:31:f8:
         91:23:56:69:9c:b6:02:ac:50:9f:64:c1:6a:33:d0:e6:49:7b:
         50:b8:64:9d:0b:52:3c:81:41:87:65:ba:52:d1:6f:53:00:17:
         d9:8c:2c:3a:07:c0:5c:53:17:d8:30:6e:4e:f2:66:6a:c0:1f:
         50:c0:ae:84:ac:e2:ee:45:a2:66:41:6f:ac:e0:7d:6a:5e:d5:
         e5:92:4e:99:0f:31:8c:b9:45:78:55:35:13:48:b5:3d:4c:18:
         d2:05:66:d4:73:2c:5c:e0:bb:ab:96:42:e3:82:fa:de:57:e1:
         0b:7f:8b:b7:2b:f0:7d:87:42:3a:93:a5:b3:c2:94:73:b7:f6:
         17:12:2b:e2:46:83:6f:32:e8:ec:97:24:49:fe:1f:f7:f2:e1:
         77:61:80:fa:ac:4d:88:b2:36:75:f9:c8:66:89:50:e4:28:4b:
         fc:8e:1e:94:ea:c1:a6:34:48:b4:f6:db:a2:bd:3c:6c:c8:ff:
         0f:31:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 15:41:16 2023 by rpki-client on console-fra.rpki-client.org