Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/097d4a05-19a0-4bb0-a39f-55de27b51d3a.cer
File:                     097d4a05-19a0-4bb0-a39f-55de27b51d3a.cer (raw, json)
Hash identifier:          QFks4ktIoaHC/SDJzugJ/Fg+6S0vpqhR7JnQXMrNEvo=
Subject key identifier:   64:7F:4D:68:26:B2:C9:A1:AF:ED:07:54:7A:DD:F5:79:88:B6:27:51
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584389E8DA70A928268FA3361E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/097d4a05-19a0-4bb0-a39f-55de27b51d3a/097d4a05-19a0-4bb0-a39f-55de27b51d3a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/097d4a05-19a0-4bb0-a39f-55de27b51d3a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Oct 2023 17:47:07 +0000
Certificate not after:    Thu 15 Jan 2026 18:47:07 +0000
Subordinate resources:    IP: 136.248.0.0/16

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 18:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:89:e8:da:70:a9:28:26:8f:a3:36:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 13 17:47:07 2023 GMT
            Not After : Jan 15 18:47:07 2026 GMT
        Subject: CN=097d4a05-19a0-4bb0-a39f-55de27b51d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:54:ad:a9:8f:18:11:2d:f6:e2:23:d8:e0:0a:
                    ef:03:51:10:1b:b1:bd:8d:c1:78:0a:8e:d6:64:d5:
                    40:31:8c:87:c1:7f:c6:40:f1:8c:09:61:d6:57:67:
                    bc:ec:24:09:f7:a5:cc:1c:a1:dd:63:c4:38:95:20:
                    ab:62:b9:03:8d:2b:45:80:c8:a9:97:e0:52:c5:b6:
                    d7:25:9f:95:40:90:e3:f4:23:ed:d0:f0:8d:4c:f5:
                    5c:ba:5f:3f:41:ef:58:c4:bd:55:6f:3b:cb:f4:fc:
                    7f:11:f9:57:01:e9:97:9d:9e:d9:9a:91:5d:fd:33:
                    ce:e2:fe:47:74:eb:e3:23:4f:33:38:cf:47:e4:7b:
                    88:86:a8:07:de:83:65:21:97:66:f7:25:be:13:a7:
                    18:92:34:f1:18:7a:e0:86:0f:64:11:df:53:0c:ae:
                    5d:d5:c3:4b:35:80:12:c9:ed:7d:c0:9b:a4:72:9f:
                    d1:98:80:c5:45:bb:09:a9:b4:5d:1a:6d:6a:10:5f:
                    78:91:15:7a:4c:7e:5e:30:34:6e:73:c3:58:52:fd:
                    7a:ac:34:81:91:21:68:5f:45:92:0f:5a:af:47:4e:
                    b3:8e:de:58:2a:1b:b4:dd:9a:31:f1:12:7b:96:a0:
                    f6:e8:3f:b2:d5:7e:16:65:ef:b0:99:b5:a8:1b:91:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7F:4D:68:26:B2:C9:A1:AF:ED:07:54:7A:DD:F5:79:88:B6:27:51
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/097d4a05-19a0-4bb0-a39f-55de27b51d3a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/097d4a05-19a0-4bb0-a39f-55de27b51d3a/097d4a05-19a0-4bb0-a39f-55de27b51d3a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.248.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c8:68:ad:84:06:ca:47:ea:5f:ad:6d:f9:9f:d4:6f:38:fa:
         22:33:d5:9d:21:72:7a:bd:01:46:2f:3b:6e:07:58:fa:b1:16:
         23:88:2d:cc:2b:63:7d:2f:f0:b5:62:9f:db:94:7d:d9:74:3f:
         11:65:d5:67:15:3e:8d:a2:e5:81:ca:57:15:ac:3e:a9:ff:20:
         af:97:fb:e5:15:91:a5:5c:11:ed:4a:d2:8a:8b:04:9d:01:d0:
         94:b1:91:a8:50:30:98:41:1b:b4:c6:18:38:56:1f:00:6f:7f:
         9c:c2:6e:7a:a1:1a:44:b2:84:e8:41:9f:8d:ae:aa:19:af:eb:
         27:6e:6b:8d:9e:dd:b4:07:00:c2:bf:f5:a3:92:05:18:e4:9c:
         da:89:b2:b2:06:26:eb:69:7f:03:6c:89:ea:db:d6:13:29:b6:
         9d:1d:8a:de:22:04:e0:ae:a1:b2:4a:42:e0:d8:11:22:e5:a7:
         3e:cb:4a:f9:5e:cf:d8:6a:85:b9:81:f9:62:d7:7c:11:81:f7:
         8a:87:c5:99:68:28:e0:ca:83:42:d7:11:05:ed:4c:bd:dc:28:
         17:b3:fa:2e:32:29:da:5d:cd:43:f2:62:82:d4:d7:89:5b:5c:
         f8:04:7d:16:63:53:4a:72:b1:54:93:18:c6:17:0c:3e:d5:b2:
         f8:c8:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 20:49:16 2024 by rpki-client on console-ams.rpki-client.org