Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce6bdd6e-2e76-41c0-a77f-4d7ef67a3a0d.cer
File:                     ce6bdd6e-2e76-41c0-a77f-4d7ef67a3a0d.cer (raw, json)
Hash identifier:          8d4LglIyYm8nZarn1eQbNs9mLqaK30iLMfYVIPAOclE=
Subject key identifier:   63:E0:70:DF:D2:C2:3D:1E:AD:BA:33:79:B0:6E:88:7A:9E:B3:F3:D6
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583D81B5C90B546E574C033F6380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce6bdd6e-2e76-41c0-a77f-4d7ef67a3a0d/ce6bdd6e-2e76-41c0-a77f-4d7ef67a3a0d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce6bdd6e-2e76-41c0-a77f-4d7ef67a3a0d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Jan 2021 14:57:39 +0000
Certificate not after:    Tue 21 Jan 2031 14:57:39 +0000
Subordinate resources:    AS: 21559
                          IP: 74.119.24.0/22
                          IP: 104.218.240.0/22
                          IP: 167.94.224.0/23
                          IP: 192.254.96.0/20
                          IP: 198.52.240.0/22
                          IP: 2604:1cc0::/32
                          IP: 2605:5d40::/32

Validation:               Failed, certificate revoked on Wed 22 Feb 2023 14:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:b5:c9:0b:54:6e:57:4c:03:3f:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 21 14:57:39 2021 GMT
            Not After : Jan 21 14:57:39 2031 GMT
        Subject: CN=ce6bdd6e-2e76-41c0-a77f-4d7ef67a3a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:cb:dd:cf:a6:b4:f0:b4:58:42:5a:eb:27:
                    37:6d:44:ba:23:9e:6c:53:3d:41:c6:81:72:df:f6:
                    e4:04:b3:a7:90:7e:17:7f:4f:59:7a:58:18:5b:9a:
                    a6:2c:c6:a6:c0:2e:f9:37:8f:76:a2:46:09:dd:39:
                    27:b3:2a:d0:bd:82:12:af:aa:a6:3e:a0:dd:0e:12:
                    e4:90:43:81:87:b8:32:97:2c:51:9a:03:bd:3e:49:
                    5a:7e:ca:d8:7e:86:2c:3b:a1:f8:4f:6b:81:3b:44:
                    ac:d5:12:11:d0:0f:bc:ae:8e:68:ac:73:27:22:4c:
                    3c:ae:33:f7:95:7e:a1:68:c2:7f:d4:30:b7:5c:ae:
                    5f:5a:45:93:b8:4f:71:6f:d9:41:f7:e5:61:3b:d5:
                    90:fd:3e:0c:15:52:32:90:1d:15:ee:b6:97:f3:fd:
                    18:3f:3e:5a:8b:34:b8:2f:39:b3:51:af:c7:84:d7:
                    b1:d9:9d:c4:94:3e:f9:fe:81:c0:8d:b5:5a:d3:eb:
                    b5:9f:d5:ec:eb:a7:16:8a:82:23:6c:69:2b:97:6a:
                    db:8f:7d:a8:b9:1e:61:68:ee:73:d9:05:83:e4:26:
                    3b:65:b8:db:68:00:d4:5a:c7:92:d9:72:4f:9d:a7:
                    3f:84:0e:1d:44:e7:f9:97:4d:68:41:05:86:df:37:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E0:70:DF:D2:C2:3D:1E:AD:BA:33:79:B0:6E:88:7A:9E:B3:F3:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce6bdd6e-2e76-41c0-a77f-4d7ef67a3a0d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce6bdd6e-2e76-41c0-a77f-4d7ef67a3a0d/ce6bdd6e-2e76-41c0-a77f-4d7ef67a3a0d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.24.0/22
                  104.218.240.0/22
                  167.94.224.0/23
                  192.254.96.0/20
                  198.52.240.0/22
                IPv6:
                  2604:1cc0::/32
                  2605:5d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21559

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f9:9b:93:24:37:de:aa:7e:22:e5:d0:d4:09:ff:61:f3:4d:
         ff:6c:3f:ed:2e:8f:d1:2a:a0:d8:9f:07:04:6b:ba:36:bf:54:
         1d:f9:6b:ac:34:cc:21:b7:25:cf:a2:c8:3d:85:87:a5:4f:c0:
         6f:78:ac:9c:ce:fc:65:b9:ec:ac:8d:56:55:cf:00:60:94:32:
         79:f9:d7:58:ca:41:be:b2:1c:3c:d2:b5:83:dd:1a:27:f1:9a:
         2d:9e:1c:a5:77:27:a0:51:b6:67:fd:fa:2b:b2:59:3b:35:3f:
         4c:22:3c:e2:58:16:ac:50:53:c2:2a:f4:65:c5:f1:b4:53:be:
         fc:b6:41:da:4b:79:69:b5:9b:6f:7b:bb:d8:d8:37:cf:46:d1:
         11:38:99:6d:24:b4:f6:f4:ad:46:a7:0d:ae:1a:59:72:b8:9a:
         94:0d:5a:4d:e6:0c:40:1b:cb:65:20:3b:3d:71:3c:fa:25:6c:
         a2:d3:b6:c3:76:cb:2d:4f:c8:fa:de:22:af:b7:87:91:6d:5e:
         fe:74:35:24:af:af:4f:88:63:62:1b:0f:7e:8c:65:88:a3:70:
         f4:c3:91:86:df:1b:b4:a2:95:88:a5:1e:22:bb:bc:c4:69:bc:
         30:d9:33:59:1d:c9:fe:08:ab:bd:60:5a:aa:ed:63:2a:10:d7:
         b2:5d:e1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:09 2024 by rpki-client on console-fra.rpki-client.org