Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de.cer
File:                     6f57e016-3f00-4230-8751-484573ddf8de.cer (raw, json)
Hash identifier:          WUWnPaFaacqCPXrw2JlbBfxp6I9ejLrQDI9RREIQUCY=
Subject key identifier:   B0:4A:AC:B4:CD:17:FC:FC:13:9D:45:27:73:67:CB:82:F6:62:48:F3
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285838AB1447657B06D9BFCFE01D68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/6f57e016-3f00-4230-8751-484573ddf8de.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 Jan 2021 22:19:58 +0000
Certificate not after:    Sun 19 Jan 2031 22:19:58 +0000
Subordinate resources:    AS: 32035
                          AS: 46205
                          IP: 66.43.92.0/24
                          IP: 66.43.96.0 -- 66.43.98.255
                          IP: 66.43.101.0/24
                          IP: 66.43.105.0 -- 66.43.106.255
                          IP: 66.43.108.0/24
                          IP: 66.43.110.0/24
                          IP: 66.43.112.0/21
                          IP: 69.28.96.0/19
                          IP: 69.168.192.0/19
                          IP: 69.170.160.0/19
                          IP: 74.85.0.0/19
                          IP: 207.232.80.0/20
                          IP: 209.141.64.0 -- 209.141.111.255
                          IP: 2607:f778::/32

Validation:               Failed, certificate revoked on Tue 18 Apr 2023 19:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ab:14:47:65:7b:06:d9:bf:cf:e0:1d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 19 22:19:58 2021 GMT
            Not After : Jan 19 22:19:58 2031 GMT
        Subject: CN=6f57e016-3f00-4230-8751-484573ddf8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:eb:b6:b1:22:80:f2:f6:61:cc:7b:3b:cd:d3:
                    20:c3:b2:9b:c5:d5:e9:be:59:8a:05:2b:e7:c7:46:
                    5d:be:a5:2d:e5:c8:6d:ec:56:45:43:ca:3f:b0:6b:
                    f4:61:91:b9:ce:fc:6f:9c:a2:86:53:c2:2f:42:0d:
                    cb:45:85:21:4a:98:b0:dc:67:5f:d8:89:0c:1f:f7:
                    19:61:d6:a7:31:dd:5a:fd:ca:e9:3b:00:18:53:f2:
                    0d:d4:cc:15:0a:f5:56:e5:29:ea:40:db:38:7d:be:
                    1d:1a:ca:2b:eb:00:5d:f2:ba:5a:d4:40:53:8b:29:
                    d4:8f:95:35:89:0e:15:78:d3:24:33:71:c9:79:e1:
                    e1:61:8d:27:e2:bb:ee:09:03:9b:b8:18:7c:9e:2d:
                    89:b1:c2:11:08:4c:2d:69:8b:e7:74:0b:72:ea:81:
                    d5:dd:fb:e3:2b:5a:76:78:ea:1b:02:da:2e:f8:72:
                    00:76:ef:47:f0:44:54:8f:a2:87:0b:38:c0:13:37:
                    aa:d2:9b:6d:71:8e:1c:66:4a:ae:93:8a:b8:20:69:
                    4c:3f:e4:0e:20:00:d2:0d:cc:a0:2d:a6:29:dd:24:
                    37:b0:cd:fa:8b:5b:3e:14:6e:c0:d6:15:b4:42:f7:
                    0c:ad:2d:17:b6:99:8d:e3:de:34:97:5a:44:0c:28:
                    24:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4A:AC:B4:CD:17:FC:FC:13:9D:45:27:73:67:CB:82:F6:62:48:F3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/6f57e016-3f00-4230-8751-484573ddf8de.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.92.0/24
                  66.43.96.0-66.43.98.255
                  66.43.101.0/24
                  66.43.105.0-66.43.106.255
                  66.43.108.0/24
                  66.43.110.0/24
                  66.43.112.0/21
                  69.28.96.0/19
                  69.168.192.0/19
                  69.170.160.0/19
                  74.85.0.0/19
                  207.232.80.0/20
                  209.141.64.0-209.141.111.255
                IPv6:
                  2607:f778::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32035
                  46205

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:77:23:98:70:17:3e:ab:50:69:5e:76:c3:81:3b:01:e7:78:
         03:ae:3a:a8:4c:77:07:21:c2:57:e1:79:3e:8c:e9:2f:57:92:
         60:f5:6f:e7:7d:1a:89:c2:91:da:73:77:6a:e9:41:51:2a:c6:
         1a:e7:92:f5:ae:c3:40:74:73:66:0e:df:ad:56:b7:49:c9:cb:
         4a:63:40:5f:a7:a2:12:9b:68:59:c3:ed:24:fc:43:ba:77:ca:
         03:26:d8:5a:d1:17:0a:59:22:37:e3:b9:9e:7c:3e:ca:26:77:
         1b:22:51:07:83:0f:f1:0b:26:3f:9f:68:13:37:16:86:04:b1:
         da:2c:b1:b0:fb:4c:03:46:51:f3:82:3a:16:3a:54:b1:ec:b0:
         69:3c:28:01:58:cc:ac:95:fa:47:f3:52:27:e2:97:ec:42:32:
         6f:de:c2:5c:43:bc:e8:fd:41:a0:08:29:2b:c4:b3:4e:10:8f:
         12:1f:46:c6:18:41:c8:0a:1f:ec:48:8e:ec:1a:f4:9c:ea:da:
         5e:b2:bf:b6:c9:5f:18:77:93:70:5a:27:2e:df:72:f4:61:13:
         39:b7:0c:e6:18:3b:79:a1:d9:55:1a:57:da:1a:74:e2:52:33:
         b9:fd:20:81:d5:a5:4b:4f:80:73:e5:27:93:63:5a:1f:1c:4a:
         c3:73:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:26 2024 by rpki-client on console-ams.rpki-client.org