Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5525e23-f1ca-401c-b4da-8ce197d10fc8.cer
File:                     c5525e23-f1ca-401c-b4da-8ce197d10fc8.cer (raw, json)
Hash identifier:          T7nlxxnWYXlAPbtZxFMaDfHUntdAX03UzKmuozirfjk=
Subject key identifier:   A5:AC:8C:60:36:92:9B:7B:7B:3A:03:62:5B:A7:0C:DC:F1:AB:3E:6E
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583C83EDDC1AB910C9A5EC304980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5525e23-f1ca-401c-b4da-8ce197d10fc8/c5525e23-f1ca-401c-b4da-8ce197d10fc8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5525e23-f1ca-401c-b4da-8ce197d10fc8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Aug 2021 14:00:18 +0000
Certificate not after:    Mon 04 Aug 2031 14:00:18 +0000
Subordinate resources:    AS: 399398
                          IP: 23.175.176.0/23
                          IP: 45.59.128.0/22
                          IP: 63.133.212.0/22
                          IP: 2606:2f40::/32

Validation:               Failed, certificate revoked on Wed 17 Aug 2022 14:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:83:ed:dc:1a:b9:10:c9:a5:ec:30:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug  4 14:00:18 2021 GMT
            Not After : Aug  4 14:00:18 2031 GMT
        Subject: CN=c5525e23-f1ca-401c-b4da-8ce197d10fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:11:19:ad:83:64:b4:97:eb:3c:5e:c3:2c:
                    c9:fe:5e:cb:0d:f9:28:38:3a:63:10:5e:15:f4:da:
                    6a:af:de:84:fc:52:fc:49:5c:a6:1c:36:b3:82:c7:
                    9c:01:9d:dd:90:ac:62:e3:2b:f2:b2:1d:0c:90:57:
                    a1:a0:b0:ee:2b:2b:38:fe:49:c4:7a:c3:4d:c0:ab:
                    ea:ba:18:01:78:66:9a:75:06:5f:31:3d:45:ac:e2:
                    03:c1:10:a4:f4:f4:0f:8d:b9:27:91:75:70:87:86:
                    58:91:a9:78:d0:69:a4:3e:fb:69:8a:a3:4c:ce:23:
                    d7:d9:18:74:6a:92:2e:63:84:73:12:be:51:e5:7a:
                    e5:7a:1a:53:8a:dc:74:d5:93:66:19:68:7e:49:3b:
                    60:66:c3:73:6c:88:b7:b9:e9:dd:9a:26:ba:f7:57:
                    3e:a1:ba:ff:ad:f4:80:2e:cf:a3:34:be:1f:7a:e5:
                    67:d2:3a:02:26:17:10:6f:e6:95:dc:d1:95:be:fc:
                    eb:db:dc:33:fd:a4:14:9e:6b:b2:a0:e4:e1:34:77:
                    b9:09:78:48:98:c3:20:5d:f2:e8:40:9b:84:4b:01:
                    92:77:3f:db:89:52:0f:34:e6:07:83:88:83:7c:bd:
                    74:69:51:a8:86:41:fb:0c:10:4e:c8:ba:f0:9b:b6:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AC:8C:60:36:92:9B:7B:7B:3A:03:62:5B:A7:0C:DC:F1:AB:3E:6E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5525e23-f1ca-401c-b4da-8ce197d10fc8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5525e23-f1ca-401c-b4da-8ce197d10fc8/c5525e23-f1ca-401c-b4da-8ce197d10fc8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.176.0/23
                  45.59.128.0/22
                  63.133.212.0/22
                IPv6:
                  2606:2f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399398

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:33:79:43:97:fe:fe:77:c2:f2:1b:9d:ec:d7:97:dd:c8:20:
         76:61:77:a3:99:7d:23:0d:37:05:63:59:ad:6d:35:6a:7b:71:
         4a:8a:bf:fa:f4:9d:ba:d1:34:9d:bf:c0:72:58:dc:82:6d:9c:
         a9:0b:60:f3:86:f5:9d:4d:25:f8:de:b2:85:ea:52:63:f2:c4:
         73:58:21:b2:fb:bf:7f:50:d2:00:e1:bb:0e:af:74:fb:8f:41:
         7e:0a:de:c9:07:63:7f:0a:65:b1:c3:49:ff:a5:a5:20:22:5b:
         bb:3f:16:58:be:be:5a:67:c3:00:8e:75:71:ea:b6:9b:df:57:
         a4:cd:c4:95:d7:1c:79:4c:cf:fc:7b:19:5b:e5:43:ae:18:62:
         4f:4c:2e:44:38:18:cd:86:6c:be:03:b4:f4:e6:b2:b4:98:f8:
         35:32:c4:04:97:f3:dc:70:d1:6d:27:db:f8:3e:16:62:05:0c:
         7e:74:d2:34:4a:61:52:c3:02:d3:5d:dd:17:3a:51:29:61:5a:
         31:c2:80:98:65:ab:ca:75:a7:da:37:a7:3c:57:d9:6f:06:ff:
         54:5c:9d:ed:ab:ff:9a:4e:99:f4:58:9e:37:f6:2d:13:66:72:
         d1:36:f2:26:ad:4c:86:af:1f:68:a5:89:18:21:e4:22:89:a6:
         66:f8:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:33 2024 by rpki-client on console-ams.rpki-client.org