Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5dd98a8-a4b2-4617-a393-78db5a68bf9b.cer
File:                     c5dd98a8-a4b2-4617-a393-78db5a68bf9b.cer (raw, json)
Hash identifier:          Gv6xxXUwcPUhTxoD+UjwiEqk8OA3h41TwfQUkHF12tQ=
Subject key identifier:   BC:BC:E7:45:94:BC:FA:21:70:71:BD:9E:8A:11:3C:BE:C5:23:FC:86
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285838899842F476B112E112C6C0A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5dd98a8-a4b2-4617-a393-78db5a68bf9b/c5dd98a8-a4b2-4617-a393-78db5a68bf9b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5dd98a8-a4b2-4617-a393-78db5a68bf9b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 04 Jan 2021 17:59:05 +0000
Certificate not after:    Sat 04 Jan 2031 17:59:05 +0000
Subordinate resources:    AS: 399141
                          IP: 45.42.172.0/22
                          IP: 2602:fcd8::/36

Validation:               Failed, certificate revoked on Tue 11 Apr 2023 14:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:89:98:42:f4:76:b1:12:e1:12:c6:c0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan  4 17:59:05 2021 GMT
            Not After : Jan  4 17:59:05 2031 GMT
        Subject: CN=c5dd98a8-a4b2-4617-a393-78db5a68bf9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e8:09:ff:8d:5f:f4:5f:e7:cb:46:04:35:ac:
                    cb:52:5a:89:db:4d:93:07:da:3e:1c:e4:86:24:cc:
                    2a:47:ab:80:85:13:b7:69:b0:c4:8e:c1:bb:6f:c3:
                    c7:25:8a:b1:97:d7:9c:28:32:b4:f7:fe:56:2d:c5:
                    d2:59:71:25:4c:5a:39:54:cd:2a:02:a5:ac:0f:03:
                    61:4c:70:f2:ec:da:77:a1:51:07:11:b7:b0:93:f0:
                    0c:06:26:50:35:d5:15:b7:ac:15:a3:70:c0:72:75:
                    f5:09:b2:d1:64:4a:21:67:71:d5:4e:46:15:ad:f9:
                    fb:6c:1d:1c:e4:4f:da:7b:0a:b6:a2:8c:ff:84:60:
                    95:4c:6d:54:3d:00:ab:e7:2b:db:ce:b1:ea:8a:d5:
                    bb:02:80:b6:a6:02:1f:94:4f:d5:89:f4:42:c7:d0:
                    58:47:83:a2:97:93:81:3f:71:f2:1d:7e:ee:00:69:
                    8b:5c:80:01:1b:05:e8:ba:d3:b0:4f:79:61:f1:7e:
                    d8:74:b1:60:31:a3:9a:f4:9b:2b:e6:96:f6:00:7b:
                    c2:16:71:5b:22:05:74:6d:01:6e:c7:3b:b1:48:bb:
                    1c:de:64:69:e1:18:13:f8:1f:ac:76:11:66:9f:f2:
                    a9:38:be:ca:41:2d:fd:bb:29:3f:19:0c:23:e8:ad:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BC:E7:45:94:BC:FA:21:70:71:BD:9E:8A:11:3C:BE:C5:23:FC:86
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5dd98a8-a4b2-4617-a393-78db5a68bf9b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c5dd98a8-a4b2-4617-a393-78db5a68bf9b/c5dd98a8-a4b2-4617-a393-78db5a68bf9b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.172.0/22
                IPv6:
                  2602:fcd8::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399141

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:4c:ec:aa:2c:00:15:0f:8b:7f:3a:2c:5a:26:f6:1e:e2:e7:
         82:78:fc:11:59:1e:93:ed:a1:c3:2b:96:a6:32:16:5f:ed:5c:
         60:f9:51:0e:51:02:5f:82:5b:0e:e1:84:0b:a7:30:dc:8c:be:
         ed:fe:51:19:d3:02:c9:ea:58:dc:3e:5f:c6:28:5a:58:68:8f:
         f6:87:b1:77:9e:f8:f2:74:43:7a:17:70:42:3f:4a:c1:b5:b9:
         9c:13:8e:33:f9:33:20:ae:b3:ea:69:14:2f:29:0d:ef:51:86:
         17:d2:48:58:d8:dc:f7:d9:42:40:72:f3:ba:7f:20:c4:34:e0:
         12:e7:e5:d2:65:a9:bf:1b:13:59:cc:a4:c4:b3:5d:de:9b:4d:
         5d:01:c9:cb:e9:75:30:d3:26:23:84:db:4e:5d:a6:25:2c:90:
         e5:89:82:48:61:8e:80:ea:be:da:21:57:df:41:2b:ef:70:09:
         52:f0:1a:ae:13:bc:cf:f0:d0:11:81:00:03:1b:f8:38:60:a3:
         9a:5b:4f:5b:7d:1c:fb:9d:e4:fb:cf:b3:4c:71:56:d1:56:9f:
         c4:5b:8c:9f:90:83:d6:00:e3:47:59:13:e9:d5:f0:71:d4:6a:
         bd:f0:74:3e:b4:f5:c6:eb:b3:ed:79:c7:3f:e6:c8:4a:fa:d8:
         f1:54:7c:09
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWDiJmEL0drES4RLGwKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIxMDEwNDE3NTkwNVoXDTMxMDEwNDE3NTkwNVowLzEtMCsGA1UEAxMk
YzVkZDk4YTgtYTRiMi00NjE3LWEzOTMtNzhkYjVhNjhiZjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+gJ/41f9F/ny0YENazLUlqJ202TB9o+HOSG
JMwqR6uAhRO3abDEjsG7b8PHJYqxl9ecKDK09/5WLcXSWXElTFo5VM0qAqWsDwNh
THDy7Np3oVEHEbewk/AMBiZQNdUVt6wVo3DAcnX1CbLRZEohZ3HVTkYVrfn7bB0c
5E/aewq2ooz/hGCVTG1UPQCr5yvbzrHqitW7AoC2pgIflE/VifRCx9BYR4Oil5OB
P3HyHX7uAGmLXIABGwXoutOwT3lh8X7YdLFgMaOa9Jsr5pb2AHvCFnFbIgV0bQFu
xzuxSLsc3mRp4RgT+B+sdhFmn/KpOL7KQS39uyk/GQwj6K1z6QIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFLy850WUvPohcHG9nooRPL7FI/yGMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j
NWRkOThhOC1hNGIyLTQ2MTctYTM5My03OGRiNWE2OGJmOWIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M1ZGQ5OGE4LWE0YjItNDYxNy1h
MzkzLTc4ZGI1YTY4YmY5Yi9jNWRkOThhOC1hNGIyLTQ2MTctYTM5My03OGRiNWE2
OGJmOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAItKqwwDgQCAAIwCAMGBCYC/NgAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYXJTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCATOyqLAAVD4t/OixaJvYe4ueC
ePwRWR6T7aHDK5amMhZf7Vxg+VEOUQJfglsO4YQLpzDcjL7t/lEZ0wLJ6ljcPl/G
KFpYaI/2h7F3nvjydEN6F3BCP0rBtbmcE44z+TMgrrPqaRQvKQ3vUYYX0khY2Nz3
2UJAcvO6fyDENOAS5+XSZam/GxNZzKTEs13em01dAcnL6XUw0yYjhNtOXaYlLJDl
iYJIYY6A6r7aIVffQSvvcAlS8BquE7zP8NARgQADG/g4YKOaW09bfRz7neT7z7NM
cVbRVp/EW4yfkIPWAONHWRPp1fBx1Gq98HQ+tPXG67Ptecc/5shK+tjxVHwJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:33 2024 by rpki-client on console-ams.rpki-client.org