Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4234c104-579c-4a61-9940-41aca9c1210f.cer
File:                     4234c104-579c-4a61-9940-41aca9c1210f.cer (raw, json)
Hash identifier:          lNCit46MTiQ4AQJDo6t0kqhHoI29rj3dcCM44cdWkGc=
Subject key identifier:   2D:CB:43:7B:F2:FA:F3:A6:89:1D:98:80:B3:DF:83:F2:9D:51:E0:84
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285844C382D28EE84CACA18FC2CDC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4234c104-579c-4a61-9940-41aca9c1210f/4234c104-579c-4a61-9940-41aca9c1210f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4234c104-579c-4a61-9940-41aca9c1210f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 03 Feb 2024 01:45:21 +0000
Certificate not after:    Fri 08 May 2026 00:45:21 +0000
Subordinate resources:    AS: 398852
                          IP: 104.166.98.0/24
                          IP: 2605:fec0::/32

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 11:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c3:82:d2:8e:e8:4c:ac:a1:8f:c2:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Feb  3 01:45:21 2024 GMT
            Not After : May  8 00:45:21 2026 GMT
        Subject: CN=4234c104-579c-4a61-9940-41aca9c1210f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:c4:43:ea:27:c4:3c:a8:ac:7c:30:54:ee:
                    aa:a6:44:29:18:b2:7a:cf:a8:41:d1:71:f6:a7:96:
                    49:c5:c4:c9:ec:53:48:c9:9b:79:b2:bb:94:86:0b:
                    16:29:e9:1e:bd:f1:01:0c:12:0c:54:10:08:4c:d3:
                    ab:59:d2:ac:c4:86:10:97:eb:73:73:29:e3:5e:c4:
                    2f:92:42:90:1e:4c:83:46:7f:d0:ef:17:87:3a:2b:
                    2b:84:9e:81:36:c0:07:78:f6:86:76:1e:e9:dc:20:
                    5f:7a:0a:ca:5a:10:da:28:18:f8:67:1f:f7:a9:da:
                    98:f2:42:ea:b8:f7:b4:89:ae:94:ab:74:07:fe:0b:
                    9b:ff:03:fd:5b:19:42:83:41:e1:73:f4:00:76:27:
                    65:b2:3d:20:c2:ce:d8:7f:73:0d:2c:59:9c:fb:42:
                    78:27:e2:e0:f6:d1:bc:c6:68:8f:1d:b1:37:3b:23:
                    4d:ef:c6:a4:62:85:80:80:6a:5d:a5:73:53:a1:19:
                    84:99:26:a9:ff:5b:e1:56:68:99:34:0a:75:cc:24:
                    e1:64:79:c9:c7:73:50:1b:1a:a3:aa:19:7f:2b:a8:
                    d9:71:85:3a:5d:7a:cc:8b:a1:cf:35:51:19:73:d7:
                    8b:bf:2d:2c:24:0a:61:97:41:d6:bf:a6:94:04:f5:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CB:43:7B:F2:FA:F3:A6:89:1D:98:80:B3:DF:83:F2:9D:51:E0:84
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4234c104-579c-4a61-9940-41aca9c1210f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4234c104-579c-4a61-9940-41aca9c1210f/4234c104-579c-4a61-9940-41aca9c1210f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.98.0/24
                IPv6:
                  2605:fec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398852

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:44:cb:2d:cf:d8:c5:56:a8:6d:a8:59:8a:63:b4:24:1c:
         17:ea:28:e4:a6:be:93:76:d5:9a:38:43:5d:17:7e:2a:49:ca:
         be:60:82:9b:cd:04:46:f2:37:bf:00:d6:e6:a2:75:c1:a5:9f:
         5c:6b:55:c7:35:28:2f:4b:3d:46:94:38:2d:f9:69:b4:84:f4:
         0b:bc:19:a7:08:9d:af:d8:54:f5:66:b2:33:f5:45:42:35:8b:
         b6:f8:b5:84:2f:85:5e:00:95:15:9f:20:84:85:38:34:92:da:
         19:c6:49:13:54:00:5a:31:79:68:d3:a9:0c:fa:7b:45:6c:28:
         f7:ba:db:15:ee:55:97:0b:41:06:8a:af:c2:c3:0d:33:16:b9:
         b7:a1:f3:34:cc:94:c6:f8:86:a1:9c:f9:eb:37:db:f5:92:7d:
         84:ea:ae:3a:2c:99:53:f2:1e:fa:e6:cb:ae:a6:ff:1d:a4:d1:
         60:93:9e:b6:b2:20:e8:46:55:61:a7:d5:04:12:d8:40:9e:17:
         78:07:6b:60:a0:92:10:30:a0:5b:9f:7e:8d:d7:d4:0b:99:7a:
         66:7f:74:4f:29:10:1d:25:8e:d3:6a:01:49:62:e0:1b:55:a1:
         f1:79:ba:cd:7a:91:b1:28:71:6b:2f:52:95:31:90:bc:a0:46:
         0f:56:45:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 14:23:31 2024 by rpki-client on console-fra.rpki-client.org