Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c.cer
File:                     63e9b3a5-0873-46d2-b3db-1fe1d280a18c.cer (raw, json)
Hash identifier:          uSKdNGmQ7SJ9oSubEk4bQ5HbeJTsLtzraFDIQwv+cuU=
Subject key identifier:   B9:93:7F:20:21:00:43:B7:2F:FF:77:B0:F3:4D:ED:DB:98:F4:3E:52
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E4834DBF0C450CDE55C44B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/63e9b3a5-0873-46d2-b3db-1fe1d280a18c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sat 21 Jun 2025 19:06:39 +0000
Subordinate resources:    IP: 45.61.48.0/20
                          IP: 146.71.76.0/22
                          IP: 209.182.216.0/22
                          IP: 2604:bc0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4d:bf:0c:45:0c:de:55:c4:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 21 19:06:39 2025 GMT
        Subject: CN=63e9b3a5-0873-46d2-b3db-1fe1d280a18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:88:61:f1:99:1a:ff:b3:8d:83:00:e1:b7:32:
                    d8:8d:9b:eb:57:c6:c6:2d:c0:46:66:8c:94:02:2c:
                    c3:fa:02:96:06:55:73:ab:0f:e2:81:3b:87:8d:08:
                    da:8d:d1:9b:cb:54:9e:97:3f:39:80:82:07:dd:50:
                    0b:a7:61:57:c0:9d:9f:37:ab:4e:d8:75:04:27:a0:
                    0e:00:74:d7:1a:22:36:dd:f8:6a:58:00:d5:77:80:
                    53:ff:70:1c:f6:21:09:d6:ea:79:b0:e6:da:d3:e2:
                    9e:a3:2f:c6:47:98:66:8b:66:fb:f9:4c:7b:b8:ce:
                    28:6a:07:44:05:58:94:2b:5a:77:ad:fa:c2:5c:b5:
                    af:90:4c:0c:b2:39:5e:5f:4b:0d:6d:6a:fd:88:b9:
                    85:8f:24:8e:46:eb:10:ee:51:98:8c:24:c9:d7:0f:
                    3b:1b:6a:71:41:c8:1f:b4:4b:ba:64:ba:5a:1d:8d:
                    8e:d0:b0:b3:6d:7c:d3:1e:52:3f:3e:28:06:07:9b:
                    57:40:7b:e1:e0:fe:05:a7:29:fd:a4:c2:61:ae:e2:
                    ae:84:3f:bf:cc:01:d9:ef:76:d9:17:be:60:5a:9b:
                    05:92:fc:59:85:a8:86:71:5f:83:46:c2:49:8b:9a:
                    4c:ba:94:6f:9a:be:5b:d6:20:78:1f:c0:b5:58:61:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:93:7F:20:21:00:43:B7:2F:FF:77:B0:F3:4D:ED:DB:98:F4:3E:52
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/63e9b3a5-0873-46d2-b3db-1fe1d280a18c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.48.0/20
                  146.71.76.0/22
                  209.182.216.0/22
                IPv6:
                  2604:bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:2d:c3:6b:cd:55:31:bc:c6:1d:31:86:f0:af:cc:53:be:58:
         d8:02:4f:2b:b9:2f:4b:b7:a1:90:13:c9:f1:13:94:90:b6:ed:
         3e:cc:1f:c1:42:44:54:cf:5d:19:c1:a9:53:f4:03:40:5c:ed:
         15:30:33:2c:ff:fd:b4:70:0c:47:46:bb:7f:3a:3e:9d:6f:b4:
         05:70:22:8c:0a:02:b5:bd:ad:32:d5:36:57:2e:4f:a8:48:a2:
         86:93:5a:c4:9f:1c:c8:d4:57:f7:f7:39:c4:46:d5:ac:b2:da:
         30:9a:80:5b:c1:56:8d:03:11:d3:de:04:54:97:08:d4:13:93:
         23:df:ed:f2:98:6b:80:0a:b0:a1:5a:74:2e:b6:e4:dc:41:87:
         c4:99:63:2c:c3:32:49:7a:af:fc:0a:d4:40:82:96:cf:df:37:
         57:4b:94:70:26:c9:d7:3d:f3:9e:0a:87:f6:74:ab:47:92:07:
         85:56:b1:11:cb:90:17:3e:2f:10:3d:40:57:e6:27:11:57:7e:
         08:40:fc:a3:a9:88:34:3a:91:7d:71:c9:20:07:94:cd:05:77:
         5b:0c:b2:60:bf:b4:da:5e:c9:0a:7d:89:dc:a2:83:ac:f6:9c:
         d7:8f:a7:b8:71:ce:a4:15:91:24:01:eb:4f:f3:31:42:71:e9:
         3b:80:1e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:19 2024 by rpki-client on console-fra.rpki-client.org