Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/40ee92cf-3557-46ad-bb58-9a6aaa820502.cer
File:                     40ee92cf-3557-46ad-bb58-9a6aaa820502.cer (raw, json)
Hash identifier:          We0N2HssQxuAhrTnuCMybFGVlYoUVYRN89h8mAqEpsM=
Subject key identifier:   48:E3:55:CA:0A:37:EF:11:32:3A:98:A9:A6:F6:DD:7B:1E:3A:A4:A3
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858450C189AE1FC068580A867CDC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/40ee92cf-3557-46ad-bb58-9a6aaa820502/40ee92cf-3557-46ad-bb58-9a6aaa820502.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/40ee92cf-3557-46ad-bb58-9a6aaa820502/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 29 Feb 2024 01:45:20 +0000
Certificate not after:    Wed 03 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 27461
                          IP: 216.231.192.0/20

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 21:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:18:9a:e1:fc:06:85:80:a8:67:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Feb 29 01:45:20 2024 GMT
            Not After : Jun  3 00:45:20 2026 GMT
        Subject: CN=40ee92cf-3557-46ad-bb58-9a6aaa820502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d1:13:80:3f:0a:44:d5:73:0b:a2:37:0c:92:
                    e2:fe:fb:d8:bd:f2:a0:6c:01:8b:cf:10:43:4b:e1:
                    a5:95:90:0b:e2:8b:d4:cb:87:bc:16:19:43:84:5d:
                    64:c1:a6:26:36:01:90:b1:45:78:94:0c:cd:7f:17:
                    f1:6f:64:8f:3b:4c:c8:33:4e:00:6e:09:4a:4d:e7:
                    42:d5:ab:70:79:da:63:3f:ce:a3:28:ab:36:2f:b8:
                    d3:95:d1:cf:4f:38:c9:9e:cc:1b:38:9e:33:75:17:
                    e3:d1:e8:5b:93:b3:11:14:29:3d:b8:6a:e1:ef:a5:
                    dc:68:f8:4b:d5:5a:21:54:57:94:0c:cb:3f:eb:67:
                    52:ac:9e:f8:e1:dc:a3:e5:5d:da:a4:f5:02:9f:e0:
                    b5:e0:9e:d6:08:19:03:fd:42:6b:cf:45:ae:15:b4:
                    15:fa:e4:79:65:31:5f:8e:27:16:07:8f:76:d5:34:
                    22:ca:d4:3f:d3:ec:cb:8a:30:4d:30:04:90:31:d7:
                    0c:79:36:c7:48:4f:ca:6d:a5:02:e8:00:86:79:44:
                    a7:4a:06:b7:91:10:42:0b:be:e0:3b:22:c8:f2:98:
                    e3:f7:10:94:a3:70:a2:1c:20:49:ef:69:50:9e:c4:
                    db:26:3f:c7:e3:9f:19:cf:4c:50:a9:fe:82:fa:dc:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E3:55:CA:0A:37:EF:11:32:3A:98:A9:A6:F6:DD:7B:1E:3A:A4:A3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/40ee92cf-3557-46ad-bb58-9a6aaa820502/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/40ee92cf-3557-46ad-bb58-9a6aaa820502/40ee92cf-3557-46ad-bb58-9a6aaa820502.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.231.192.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27461

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e3:df:ec:22:aa:36:90:25:87:c4:01:96:33:93:8b:57:b2:
         cc:19:ba:20:c3:d8:90:7b:6d:2d:9f:66:5e:a8:42:ba:9c:76:
         14:8f:03:c8:f0:14:d1:5e:d0:5f:6f:eb:d2:bc:91:4a:18:f0:
         f2:23:4d:e5:9b:4a:1e:25:ef:f8:75:60:43:a2:90:08:d9:8f:
         87:a1:94:31:7d:85:c5:19:36:2c:46:3c:92:e4:5e:0b:0b:41:
         39:59:29:1f:6b:98:57:8d:13:fd:4a:f0:b5:e8:90:3b:8d:68:
         7e:d9:dc:d2:3d:5c:33:4f:0c:fd:74:e8:ac:28:95:99:85:9e:
         bd:3d:39:40:5a:0a:15:60:3e:6a:21:52:e7:cf:ab:d7:2b:4b:
         ee:1f:2d:ba:71:6f:20:eb:66:1d:4c:34:2b:9b:66:c1:4a:bf:
         3c:0b:7d:6a:48:01:0e:c1:f3:cb:85:f2:aa:28:ea:45:c6:64:
         73:e7:59:c7:30:73:08:0c:61:33:1a:cd:44:ac:ec:9d:0f:42:
         a7:ba:39:db:e4:91:ff:9a:ac:28:83:67:5a:86:28:c1:b8:ec:
         ed:8a:9c:e9:6a:3f:7c:c8:74:23:6d:0c:d5:74:b6:d7:b0:9c:
         47:db:09:53:fb:d8:3a:d2:a9:fb:9a:56:29:55:2b:87:1b:8a:
         c0:51:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 23:02:14 2024 by rpki-client on console-fra.rpki-client.org