Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
File:                     7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer (raw, json)
Hash identifier:          P+kgvN7FKK/9VFkpAvnG6r+8WNgDxFtTmGd8FbcQTAw=
Subject key identifier:   7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority key identifier: 32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0
Certificate issuer:       /CN=63f5ee71-32bc-44e4-a1cd-1226ea3c4797
Certificate serial:       010D0C9F432858402DDBF99BEE36D45DB6C8C100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 09 Dec 2022 16:05:59 +0000
Certificate not after:    Thu 13 Mar 2025 15:05:59 +0000
Subordinate resources:    IP: 23.130.136.0/22
                          IP: 172.99.232.0/23
                          IP: 204.10.192.0/22
                          IP: 2602:fcd3::/36

Validation:               Failed, certificate revoked on Sun 16 Apr 2023 09:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2d:db:f9:9b:ee:36:d4:5d:b6:c8:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f5ee71-32bc-44e4-a1cd-1226ea3c4797
        Validity
            Not Before: Dec  9 16:05:59 2022 GMT
            Not After : Mar 13 15:05:59 2025 GMT
        Subject: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d0:08:7f:f3:eb:3b:5b:f3:aa:c0:85:16:18:
                    b7:05:87:b8:1d:8b:03:ee:18:e2:0b:8f:dd:e3:43:
                    d5:5b:3d:6a:59:37:94:23:af:f1:e4:78:5b:7d:b1:
                    f2:1e:fb:66:8d:3e:c6:2c:3c:2d:3f:a7:fc:2f:43:
                    c0:c9:13:95:bb:a2:bb:a9:e7:3b:f1:c4:a2:83:47:
                    a5:e7:87:d3:9e:62:38:23:75:32:d4:ee:a8:62:66:
                    fb:c1:35:cc:3a:28:00:f5:07:66:35:ce:50:c7:cd:
                    f7:ac:bc:3c:95:0e:3b:e7:cb:9a:40:fa:5f:64:18:
                    b5:de:1e:12:59:bf:3e:4c:1d:de:33:f8:38:03:42:
                    7b:5b:53:e3:08:4e:2f:e8:f1:80:f4:2b:67:b6:ec:
                    e4:31:98:fb:e5:23:d9:39:70:32:d4:2b:43:28:39:
                    a8:08:b1:69:1a:3a:aa:17:b3:c5:d3:c5:f8:d7:ac:
                    13:8e:80:6e:70:dc:a4:56:07:9d:90:49:db:ef:d7:
                    cf:e7:ef:ce:c2:64:af:fe:ea:e0:35:17:f4:45:62:
                    d3:c3:62:59:ed:2e:f0:85:8a:90:bc:20:0e:ec:2f:
                    a5:3d:93:ee:67:84:09:61:70:b5:cd:b5:62:ce:bb:
                    2e:e4:d0:97:21:f4:69:83:53:57:32:32:c1:39:1c:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl

            X509v3 Authority Key Identifier:
                keyid:32:96:B8:19:68:00:0B:24:A2:BB:73:0E:21:E4:28:6C:47:76:4B:F0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.136.0/22
                  172.99.232.0/23
                  204.10.192.0/22
                IPv6:
                  2602:fcd3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:44:50:a2:45:db:ab:54:5f:87:36:16:56:82:c5:de:70:35:
         01:53:64:fb:35:86:d4:88:f0:c1:a1:cc:ba:01:39:45:6d:fc:
         4e:47:f9:72:3c:50:5b:5c:8d:ed:62:be:84:83:a2:ae:9c:0b:
         84:01:50:ec:0a:ec:56:12:3e:07:f0:08:e6:30:94:f3:03:e9:
         58:59:89:24:cf:16:04:e9:1c:f0:79:87:4c:b1:8e:85:bb:80:
         11:46:e6:0b:a1:d2:f3:e3:f8:4e:02:b4:79:b8:22:27:05:d4:
         0a:04:15:b4:14:4d:9d:87:a1:b1:a7:68:9b:ae:29:df:c3:0c:
         6b:e1:9e:d3:d2:cf:75:16:0d:bf:38:13:bb:06:7b:8a:4d:f4:
         ba:82:d3:5d:9b:51:d6:98:bc:71:fe:58:15:af:ed:f1:47:13:
         4d:d1:be:a4:a7:34:21:81:cf:de:60:df:8f:8b:42:67:77:26:
         c0:ef:3a:17:a2:7d:c3:16:dd:96:f6:ef:e5:91:67:77:e2:21:
         48:f5:fe:e1:39:5f:31:fd:2a:a1:20:11:75:68:3d:bc:49:f7:
         fc:a0:50:e4:db:fd:75:00:c7:75:b6:e9:e1:9b:d4:ef:94:d1:
         b5:ab:d4:52:49:b3:36:25:72:88:5c:44:41:64:f3:92:21:ad:
         8d:43:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org