Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc.cer
File:                     209a3aae-fdf3-4626-893c-d4dbbb607dbc.cer (raw, json)
Hash identifier:          B1asCqxhX9YRJL2OowmfWB8rqWUYN5EQtrPLNovAeao=
Subject key identifier:   5C:F8:63:99:38:E7:29:CC:3B:CC:1B:AE:E9:04:20:41:54:76:12:06
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583E02E56DDED7227F5003A86680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/209a3aae-fdf3-4626-893c-d4dbbb607dbc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 24 May 2022 21:11:24 +0000
Certificate not after:    Mon 26 Aug 2024 21:11:24 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked on Wed 25 May 2022 13:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:02:e5:6d:de:d7:22:7f:50:03:a8:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 24 21:11:24 2022 GMT
            Not After : Aug 26 21:11:24 2024 GMT
        Subject: CN=209a3aae-fdf3-4626-893c-d4dbbb607dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:fa:da:6c:8c:9e:80:30:ae:25:be:ae:cd:
                    c4:a0:05:4d:c9:cc:99:f8:5c:ec:6b:61:b4:f0:96:
                    9c:d7:87:22:53:8f:b6:c5:af:04:5d:88:fe:b4:c1:
                    bd:a6:0e:2d:af:a0:d7:48:0d:fb:c7:88:44:b1:06:
                    77:4e:5a:ea:5e:62:b0:04:07:2d:6b:ff:53:a0:00:
                    b8:54:43:24:57:4a:b1:ca:a7:1e:2a:78:2b:7e:26:
                    ec:c7:d7:54:ff:7d:f9:8f:5f:95:18:7f:41:c1:3b:
                    d6:04:42:46:9f:e7:6b:4e:70:05:c3:3a:6a:32:ba:
                    63:53:c4:15:a1:b1:84:d8:63:27:e7:07:e6:0d:5b:
                    18:fb:38:7d:d2:03:ef:3b:c0:b1:8d:50:f6:cc:87:
                    51:e2:ab:dd:93:f6:61:31:33:ee:a6:31:a8:d7:60:
                    f2:60:0d:5e:12:b1:90:ff:5c:11:35:b4:29:c1:5b:
                    69:26:c3:17:5a:74:3c:c9:4b:92:0f:82:1f:94:0f:
                    de:47:c5:34:be:54:34:f3:23:45:3e:06:d0:17:8e:
                    fd:21:25:c8:5e:34:41:8a:90:3b:60:ac:04:e1:7a:
                    7a:79:eb:60:97:e7:21:7c:d2:95:f1:c9:af:36:b4:
                    95:59:96:00:30:f9:f7:c6:4e:f5:01:aa:3f:f9:9e:
                    39:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F8:63:99:38:E7:29:CC:3B:CC:1B:AE:E9:04:20:41:54:76:12:06
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/209a3aae-fdf3-4626-893c-d4dbbb607dbc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:fd:5a:d2:cd:19:83:bc:a5:1f:4f:e3:db:d4:8a:3b:0b:7c:
         c6:f8:1d:07:f0:91:4b:de:72:48:f9:d7:f5:d1:3e:f6:c1:76:
         aa:e2:70:c9:36:35:f2:44:c3:e6:24:83:a7:1d:ef:e9:c4:10:
         5b:96:67:e8:0f:6e:e8:4b:bc:ca:78:dd:73:57:a6:d5:7e:9c:
         f5:5d:95:04:ec:6c:22:ab:a4:a3:07:4a:72:4c:9b:f6:4f:67:
         58:7f:cc:39:6e:7f:0a:bc:9d:76:37:34:d6:0d:45:0d:d3:fe:
         60:08:e4:41:28:9d:bf:14:b1:52:d8:a9:9c:63:8c:f8:a6:13:
         b0:b1:9c:e6:38:a8:6a:c5:ca:5a:10:a6:ef:c4:e1:91:a5:52:
         e3:28:6e:2a:f5:ca:a3:85:0a:c3:05:d5:66:c5:81:bd:46:ac:
         c4:3c:31:e7:e7:20:b8:de:2c:d4:e9:58:21:d5:5b:c4:a9:94:
         c0:ff:9b:fc:d8:7f:3f:a1:d0:95:61:86:78:d3:6e:b6:7c:d2:
         04:41:b8:5a:de:73:bc:20:79:05:aa:3c:27:b1:a8:36:9a:f5:
         1d:6e:5e:4d:7d:20:ac:1f:67:6a:55:93:bd:7d:16:06:5b:b8:
         87:2c:ce:73:45:12:a9:4c:58:5b:56:27:9b:6a:71:14:6f:42:
         c1:42:ea:23
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWD4C5W3e1yJ/UAOoZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIyMDUyNDIxMTEyNFoXDTI0MDgyNjIxMTEyNFowLzEtMCsGA1UEAxMk
MjA5YTNhYWUtZmRmMy00NjI2LTg5M2MtZDRkYmJiNjA3ZGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2D62myMnoAwriW+rs3EoAVNycyZ+Fzsa2G0
8Jac14ciU4+2xa8EXYj+tMG9pg4tr6DXSA37x4hEsQZ3TlrqXmKwBActa/9ToAC4
VEMkV0qxyqceKngrfibsx9dU/335j1+VGH9BwTvWBEJGn+drTnAFwzpqMrpjU8QV
obGE2GMn5wfmDVsY+zh90gPvO8CxjVD2zIdR4qvdk/ZhMTPupjGo12DyYA1eErGQ
/1wRNbQpwVtpJsMXWnQ8yUuSD4IflA/eR8U0vlQ08yNFPgbQF479ISXIXjRBipA7
YKwE4Xp6eetgl+chfNKV8cmvNrSVWZYAMPn3xk71Aao/+Z45MwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFFz4Y5k45ynMO8wbrukEIEFUdhIGMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y
MDlhM2FhZS1mZGYzLTQ2MjYtODkzYy1kNGRiYmI2MDdkYmMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzIwOWEzYWFlLWZkZjMtNDYyNi04
OTNjLWQ0ZGJiYjYwN2RiYy8yMDlhM2FhZS1mZGYzLTQ2MjYtODkzYy1kNGRiYmI2
MDdkYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAKVcJgwDgQCAAIwCAMGBCYC/DsAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYaYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBH/VrSzRmDvKUfT+Pb1Io7C3zG
+B0H8JFL3nJI+df10T72wXaq4nDJNjXyRMPmJIOnHe/pxBBblmfoD27oS7zKeN1z
V6bVfpz1XZUE7Gwiq6SjB0pyTJv2T2dYf8w5bn8KvJ12NzTWDUUN0/5gCORBKJ2/
FLFS2KmcY4z4phOwsZzmOKhqxcpaEKbvxOGRpVLjKG4q9cqjhQrDBdVmxYG9RqzE
PDHn5yC43izU6Vgh1VvEqZTA/5v82H8/odCVYYZ40262fNIEQbha3nO8IHkFqjwn
sag2mvUdbl5NfSCsH2dqVZO9fRYGW7iHLM5zRRKpTFhbViebanEUb0LBQuoj
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:24 2024 by rpki-client on console-ams.rpki-client.org