Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b54df042-8c4f-4c87-a636-3e7b23156997.cer
File:                     b54df042-8c4f-4c87-a636-3e7b23156997.cer (raw, json)
Hash identifier:          9bOQYXCY+2gEyCrwBhsfoebGQ3Wf5FWl68mjU2IPTCc=
Subject key identifier:   9B:B5:95:25:6F:B8:82:5A:14:D2:93:F1:E3:DF:32:4E:2B:97:BA:63
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858410D0A949A081ABA0523122EF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b54df042-8c4f-4c87-a636-3e7b23156997/b54df042-8c4f-4c87-a636-3e7b23156997.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b54df042-8c4f-4c87-a636-3e7b23156997/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 27 Feb 2023 14:45:09 +0000
Certificate not after:    Sat 26 Apr 2031 13:14:42 +0000
Subordinate resources:    AS: 399517
                          IP: 23.178.240.0/24
                          IP: 64.112.66.0/24
                          IP: 2602:fc89::/36

Validation:               Failed, certificate revoked on Mon 06 Mar 2023 17:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:0d:0a:94:9a:08:1a:ba:05:23:12:2e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Feb 27 14:45:09 2023 GMT
            Not After : Apr 26 13:14:42 2031 GMT
        Subject: CN=b54df042-8c4f-4c87-a636-3e7b23156997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:af:c2:98:6f:fd:b6:c4:70:61:71:24:7a:dc:
                    e2:13:15:84:01:9e:93:79:65:70:2f:4b:9f:2b:98:
                    6f:45:c4:ac:20:17:c4:95:f7:07:09:cc:85:61:17:
                    8e:63:4a:d1:c1:a8:f5:dc:c9:6d:da:8d:92:91:a2:
                    33:d5:67:87:6d:0d:43:c8:50:78:6f:c7:b1:8c:a1:
                    d7:75:9d:86:18:ac:d0:3f:ba:b1:2d:4f:1f:84:6b:
                    60:25:3d:8d:1d:d0:fc:3c:55:63:69:5a:d3:af:0a:
                    33:b5:3d:af:af:91:37:03:90:e6:49:1e:93:db:d5:
                    1f:89:5c:5c:e8:d9:cf:9e:e1:1b:7d:07:40:00:d6:
                    57:59:24:fd:44:f7:97:b0:3b:45:8e:2e:64:9e:3c:
                    6d:19:8b:8c:17:a7:08:61:f0:af:cb:c7:87:17:37:
                    3e:8c:eb:03:2c:18:c5:43:01:77:78:32:33:70:9c:
                    31:90:ce:e4:e5:0e:e9:8d:be:11:53:f1:d9:4a:6d:
                    97:08:04:c8:ce:0f:e3:a9:bc:de:91:c4:b4:0c:30:
                    d9:d0:71:c8:67:29:8c:d1:8b:76:9a:eb:13:1e:fd:
                    ce:f6:c1:b1:42:f1:0b:98:da:9b:79:69:71:63:51:
                    9b:90:1d:5a:a7:52:39:e7:dd:3d:25:25:5a:41:52:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B5:95:25:6F:B8:82:5A:14:D2:93:F1:E3:DF:32:4E:2B:97:BA:63
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b54df042-8c4f-4c87-a636-3e7b23156997/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b54df042-8c4f-4c87-a636-3e7b23156997/b54df042-8c4f-4c87-a636-3e7b23156997.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.240.0/24
                  64.112.66.0/24
                IPv6:
                  2602:fc89::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399517

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:88:62:62:4b:dd:89:33:81:04:b0:60:59:86:2f:eb:91:79:
         c1:4e:ac:76:a9:10:09:9f:88:f1:5d:b9:9e:6d:23:1c:eb:cb:
         5d:76:22:9a:41:86:c4:d3:b4:71:d7:14:3b:78:7c:89:b5:07:
         f2:9e:93:26:09:ec:9d:92:50:0d:4b:d7:58:c5:c3:a7:a2:96:
         fa:ff:a7:4e:a5:d3:6f:ce:92:13:42:f0:2d:b2:64:a8:c2:49:
         b3:0d:dc:88:4b:66:a8:37:9f:f7:2c:75:95:2b:01:0f:8f:2f:
         5f:ec:54:89:0e:0a:e5:8e:f2:1b:3f:96:74:2f:5a:30:a2:9b:
         9a:ef:4e:5c:26:f9:5f:88:90:36:68:f8:e9:fb:cd:e0:68:85:
         65:52:91:6b:1d:8f:36:97:26:17:24:14:0f:33:47:f4:38:a2:
         e2:24:58:21:a3:20:ac:9e:7d:03:a5:50:f2:4c:4c:8e:a7:ac:
         4e:86:c7:ca:fe:c3:45:dc:7d:0d:61:c2:1f:d4:5e:13:7e:8e:
         e8:f8:8b:78:48:5c:ba:3e:45:00:62:79:7e:76:62:ce:7f:78:
         2e:14:01:61:d8:88:f0:b4:48:82:34:dc:52:2c:48:14:e8:94:
         bb:a7:bd:e2:0f:ed:97:80:be:35:dd:b9:5c:53:75:79:58:70:
         2a:8a:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:09 2024 by rpki-client on console-fra.rpki-client.org