Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer
File:                     69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer (raw, json)
Hash identifier:          aIMja/fglL6u+XttfPQN0vYbl5/CU3BQ8DXCZxeXJww=
Subject key identifier:   84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0
Authority key identifier: 09:34:4F:22:0E:7B:21:C1:CA:04:08:C6:2A:83:C0:09:FE:63:B4:41
Certificate issuer:       /CN=a816e8ad-9bcc-46da-afd8-70dd97bd0232
Certificate serial:       010D0C9F4328583C3E6E179332C3F7BA8C130FA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A91905300000/2/84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A91905300000/2
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Mon 13 Dec 2021 19:25:35 +0000
Certificate not after:    Sat 13 Dec 2031 19:25:35 +0000
Subordinate resources:    AS: 54110
                          IP: 199.182.132.0/22
                          IP: 2605:3880::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:3e:6e:17:93:32:c3:f7:ba:8c:13:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a816e8ad-9bcc-46da-afd8-70dd97bd0232
        Validity
            Not Before: Dec 13 19:25:35 2021 GMT
            Not After : Dec 13 19:25:35 2031 GMT
        Subject: CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:de:86:da:cf:57:ca:b7:8d:23:32:81:07:ec:
                    cc:27:a6:59:21:49:fb:92:97:b8:7d:61:d8:31:86:
                    33:93:52:04:91:e6:7a:1b:63:0d:22:47:31:ac:7d:
                    df:85:66:78:c1:2b:1b:06:89:72:83:cd:18:ac:c4:
                    65:69:aa:26:1b:aa:a0:55:f5:42:d3:a5:66:38:38:
                    17:4c:16:d0:c7:b2:bf:10:7b:7c:c4:ad:bd:80:14:
                    e8:f1:4f:c3:06:34:a6:0f:1f:1e:8f:f6:36:0d:a8:
                    dc:97:b3:c5:65:50:04:90:8c:82:b0:a3:cb:c2:45:
                    eb:95:41:e8:8b:8b:88:a5:8c:eb:59:f2:12:f8:58:
                    a1:d3:87:29:7c:e3:cc:6a:28:8c:9b:6c:ae:2d:49:
                    c6:a4:da:d1:b2:87:35:ef:f8:3d:fd:d9:cf:8f:63:
                    6a:8d:4e:b1:ec:34:f7:6d:38:59:3d:1d:80:dd:23:
                    49:49:37:71:16:94:91:23:6b:d1:c6:95:42:33:33:
                    36:b8:ec:78:db:7f:33:29:92:12:2a:30:98:a9:85:
                    1b:14:29:4f:96:ae:29:04:52:06:31:65:fc:3f:4f:
                    78:c7:1d:10:99:bf:dc:79:3f:f2:6b:e1:44:26:c2:
                    61:b9:63:e2:4b:91:f4:5a:cc:16:4c:d9:fe:40:95:
                    34:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/a816e8ad-9bcc-46da-afd8-70dd97bd0232.crl

            X509v3 Authority Key Identifier:
                keyid:09:34:4F:22:0E:7B:21:C1:CA:04:08:C6:2A:83:C0:09:FE:63:B4:41

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.132.0/22
                IPv6:
                  2605:3880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54110

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:1c:e2:74:da:d7:b4:54:2f:ee:a2:e5:a0:8e:8d:4d:43:8f:
         03:f5:be:d6:18:aa:c5:bb:de:f9:9e:21:86:1d:ef:69:ea:76:
         94:e5:8f:54:ba:3c:64:5f:bc:7a:58:b8:c6:c7:08:7d:09:d2:
         65:8f:3f:4c:29:c4:4a:b2:bb:36:0a:70:d4:99:88:be:72:1f:
         17:99:6b:de:e7:8b:76:b6:f0:59:15:4a:fa:9a:f3:66:ef:dd:
         99:78:89:f6:f0:d7:17:7e:d1:06:e1:19:28:61:b3:3f:9f:2b:
         63:eb:1b:41:cf:10:35:a3:d8:b8:21:95:a6:4a:54:2e:f3:1c:
         9e:f4:32:81:6f:9a:cd:5a:b0:d9:41:c4:69:4f:9c:fc:6a:c2:
         c1:a0:06:e6:88:cf:4c:2c:4f:ea:8e:e6:bd:5f:e5:1e:05:59:
         37:08:6b:c6:63:73:28:83:32:ea:54:e6:b5:4b:0e:f1:34:21:
         25:0e:78:69:6a:33:19:07:b0:2b:e2:b7:dd:5b:cc:ce:c4:4a:
         61:48:bc:03:81:c4:f3:30:be:b8:ec:30:fa:6e:ea:8a:57:f6:
         9b:53:9a:74:93:fa:90:0a:2a:b3:87:08:38:1a:95:fc:49:a8:
         a8:9e:1a:f8:7d:cf:35:2a:d6:93:5f:2e:97:dd:16:e2:e9:d9:
         7c:2c:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:42 2023 by rpki-client on console-fra.rpki-client.org