Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/07b4a6ef-c900-4c1d-8e21-1303e902368b.cer
File:                     07b4a6ef-c900-4c1d-8e21-1303e902368b.cer (raw, json)
Hash identifier:          LRx6BqITZfHitxzOk8eA2JW+hWJPIhsHAj+HKcrMBp8=
Subject key identifier:   A5:24:40:73:09:19:93:72:C3:96:B0:A9:FC:FE:C3:F1:C0:D6:E2:09
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843A1737E471157F797F6514C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/07b4a6ef-c900-4c1d-8e21-1303e902368b/07b4a6ef-c900-4c1d-8e21-1303e902368b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/07b4a6ef-c900-4c1d-8e21-1303e902368b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 22 Oct 2023 04:10:03 +0000
Certificate not after:    Sat 24 Jan 2026 05:10:03 +0000
Subordinate resources:    AS: 33535
                          IP: 23.155.24.0/24
                          IP: 2602:2e6::/40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a1:73:7e:47:11:57:f7:97:f6:51:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 22 04:10:03 2023 GMT
            Not After : Jan 24 05:10:03 2026 GMT
        Subject: CN=07b4a6ef-c900-4c1d-8e21-1303e902368b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:b5:dc:e9:46:7e:09:6f:c9:9d:67:ea:1a:
                    b7:a1:4a:cd:d5:fa:e9:9d:82:b8:4b:88:c0:66:12:
                    a0:09:ab:70:9e:a6:47:2b:b0:f5:3b:b0:6e:b3:a3:
                    28:f8:2b:b5:8c:1c:10:50:a2:81:bf:c5:71:2c:76:
                    ee:fb:4c:db:17:fd:76:11:e4:3c:c5:5c:fe:1d:ca:
                    d0:34:f5:b0:c3:31:af:e0:a8:78:d9:3e:e3:26:74:
                    0d:57:d3:56:d6:36:84:05:78:f4:91:f9:03:9e:fb:
                    95:bc:94:f3:fc:e3:1e:52:fb:0f:e0:fa:b4:94:ce:
                    c7:cd:16:f6:55:69:7c:c1:80:de:7e:fa:29:91:56:
                    73:e4:ad:09:4b:e1:68:25:09:8f:3a:0b:07:8f:d7:
                    fb:9b:d6:60:59:65:d4:84:ff:e8:db:9b:63:39:c4:
                    ba:4b:cb:75:46:22:bf:ec:62:4a:5f:18:85:eb:07:
                    44:fd:ca:ef:b2:2e:d1:e0:91:7b:83:b5:39:53:7f:
                    1a:e0:a2:61:3c:d7:2a:67:cb:2b:63:99:d2:54:fc:
                    11:84:00:1b:98:f9:59:f3:ab:a9:e4:4a:63:90:67:
                    57:c0:30:d9:b1:73:b1:52:b9:66:a8:9a:76:d8:68:
                    94:8d:7c:d6:82:08:c9:54:3c:4b:5b:df:8c:9f:1a:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:24:40:73:09:19:93:72:C3:96:B0:A9:FC:FE:C3:F1:C0:D6:E2:09
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/07b4a6ef-c900-4c1d-8e21-1303e902368b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/07b4a6ef-c900-4c1d-8e21-1303e902368b/07b4a6ef-c900-4c1d-8e21-1303e902368b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.24.0/24
                IPv6:
                  2602:2e6::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33535

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:6c:c6:2d:70:bb:8e:fe:cd:80:84:17:ca:7e:5f:0a:66:e6:
         0b:d2:03:0d:49:b3:78:97:ac:a2:81:ee:ee:c9:db:49:0d:f7:
         91:1a:a8:8b:30:77:8d:ba:9c:ce:36:a8:69:14:a8:37:fa:e9:
         b9:da:3b:b7:c1:0c:6c:5b:5f:18:f8:e7:26:03:13:b2:06:f5:
         71:e0:00:c4:04:c1:3d:05:2a:86:71:e1:64:85:68:9c:c1:97:
         f2:25:45:70:87:14:f4:09:5f:ba:63:f7:5b:a2:9c:a1:cb:e8:
         2a:ca:10:55:51:05:e7:11:67:55:ba:ea:4d:c2:56:d2:f7:d0:
         99:a8:fc:7d:a0:d4:20:2b:9b:6f:31:69:91:50:8f:eb:f8:5b:
         78:84:4d:3d:bf:a0:b5:42:a0:b9:61:be:78:eb:27:a3:50:67:
         d0:c2:c3:74:a9:0d:f4:34:46:26:c9:eb:91:f8:b3:c9:a5:e6:
         5a:7d:c8:ad:e9:21:9c:af:f1:f7:55:5b:90:f9:f1:86:23:8a:
         44:eb:49:8a:b9:93:1f:f3:c1:2c:56:19:74:c5:83:9b:3f:8d:
         3b:a3:83:63:84:7e:21:07:e2:db:a7:7e:df:56:2f:4f:75:b7:
         43:51:5e:6d:c1:6d:6a:a8:d7:60:3b:ab:1c:08:53:86:5d:fb:
         f3:15:dd:5d
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEOhc35HEVf3l/ZRTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTAyMjA0MTAwM1oXDTI2MDEyNDA1MTAwM1owLzEtMCsGA1UEAxMk
MDdiNGE2ZWYtYzkwMC00YzFkLThlMjEtMTMwM2U5MDIzNjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtji13OlGfglvyZ1n6hq3oUrN1frpnYK4S4jA
ZhKgCatwnqZHK7D1O7Bus6Mo+Cu1jBwQUKKBv8VxLHbu+0zbF/12EeQ8xVz+HcrQ
NPWwwzGv4Kh42T7jJnQNV9NW1jaEBXj0kfkDnvuVvJTz/OMeUvsP4Pq0lM7HzRb2
VWl8wYDefvopkVZz5K0JS+FoJQmPOgsHj9f7m9ZgWWXUhP/o25tjOcS6S8t1RiK/
7GJKXxiF6wdE/crvsi7R4JF7g7U5U38a4KJhPNcqZ8srY5nSVPwRhAAbmPlZ86up
5EpjkGdXwDDZsXOxUrlmqJp22GiUjXzWggjJVDxLW9+Mnxq2KQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFKUkQHMJGZNyw5awqfz+w/HA1uIJMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w
N2I0YTZlZi1jOTAwLTRjMWQtOGUyMS0xMzAzZTkwMjM2OGIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA3YjRhNmVmLWM5MDAtNGMxZC04
ZTIxLTEzMDNlOTAyMzY4Yi8wN2I0YTZlZi1jOTAwLTRjMWQtOGUyMS0xMzAzZTkw
MjM2OGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXmxgwDgQCAAIwCAMGACYCAuYAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCC/zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLbMYtcLuO/s2AhBfKfl8KZuYL
0gMNSbN4l6yige7uydtJDfeRGqiLMHeNupzONqhpFKg3+um52ju3wQxsW18Y+Ocm
AxOyBvVx4ADEBME9BSqGceFkhWicwZfyJUVwhxT0CV+6Y/dbopyhy+gqyhBVUQXn
EWdVuupNwlbS99CZqPx9oNQgK5tvMWmRUI/r+Ft4hE09v6C1QqC5Yb546yejUGfQ
wsN0qQ30NEYmyeuR+LPJpeZafcit6SGcr/H3VVuQ+fGGI4pE60mKuZMf88EsVhl0
xYObP407o4NjhH4hB+Lbp37fVi9PdbdDUV5twW1qqNdgO6scCFOGXfvzFd1d
-----END CERTIFICATE-----
Generated at Thu Jan 4 18:44:05 2024 by rpki-client on console-fra.rpki-client.org