Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a072df282a2c7ab18af110c1c83b0687a1fec2815.cer
File:                     d90d8aba2a072df282a2c7ab18af110c1c83b0687a1fec2815.cer (raw, json)
Hash identifier:          rSktJL0pPYmkKz44biaHbTR2yDQIl68VrUMH2osWWXE=
Subject key identifier:   BC:ED:96:DA:57:4B:2B:B2:53:39:B6:0B:A5:A0:9C:C6:5F:C9:7E:69
Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63
Certificate issuer:       /CN=0ec17157-66de-4aab-85e7-28af4de430e2
Certificate serial:       010D0C9F4328584720862E89AF9C0C282F426C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/BCED96DA574B2BB25339B60BA5A09CC65FC97E69.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 06 Sep 2024 18:56:11 +0000
Certificate not after:    Thu 10 Dec 2026 19:56:11 +0000
Subordinate resources:    AS: 26561
                          IP: 23.164.152.0/24
                          IP: 2602:f9fa::/36

Validation:               Failed, certificate revoked on Sat 07 Sep 2024 17:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:20:86:2e:89:af:9c:0c:28:2f:42:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2
        Validity
            Not Before: Sep  6 18:56:11 2024 GMT
            Not After : Dec 10 19:56:11 2026 GMT
        Subject: CN=d90d8aba2a072df282a2c7ab18af110c1c83b0687a1fec2815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:51:f6:24:d7:38:47:85:de:56:c2:8d:75:
                    d2:eb:a9:cc:e9:90:ab:93:88:91:69:9e:fc:5f:02:
                    0f:10:5b:9a:4c:43:9c:09:3f:7f:60:99:96:8f:83:
                    87:76:90:2a:5f:7b:3c:37:98:22:fd:f7:73:14:d1:
                    d8:86:f0:17:85:5f:91:d5:96:9e:39:25:0a:c7:74:
                    0f:e9:0f:56:68:e1:16:b2:54:87:df:50:02:94:cd:
                    79:28:d9:92:52:d3:d9:23:2e:dd:58:5b:e7:5e:1a:
                    36:a9:56:81:cd:82:43:d3:77:e1:68:e1:91:92:a7:
                    5b:a1:df:a8:2b:2e:ef:35:93:86:0c:64:70:b3:80:
                    4b:99:eb:0d:6f:d6:7d:7d:97:36:cb:7d:b1:78:8a:
                    a2:4d:5f:6f:89:01:44:be:76:b6:1f:2b:68:19:8f:
                    a0:32:47:4f:02:37:24:0a:0b:97:c7:49:b6:a5:59:
                    6a:79:ee:82:27:0e:02:a7:14:db:8d:92:fc:76:e8:
                    e7:4b:d6:3c:4c:f9:29:07:a5:00:0c:38:c5:bf:96:
                    1f:d0:ef:e1:56:9b:fa:cf:70:7e:1a:8d:bf:39:f2:
                    98:a8:6b:4f:3f:a3:f2:b1:48:be:13:91:49:c0:25:
                    5e:b6:5c:2f:05:b9:4a:a9:e1:8f:af:ac:15:7e:d3:
                    1f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:ED:96:DA:57:4B:2B:B2:53:39:B6:0B:A5:A0:9C:C6:5F:C9:7E:69
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/BCED96DA574B2BB25339B60BA5A09CC65FC97E69.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl

            X509v3 Authority Key Identifier:
                keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.152.0/24
                IPv6:
                  2602:f9fa::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26561

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:08:a9:56:13:fc:dd:73:03:8f:87:d0:9d:27:9f:c1:de:a1:
         fe:62:ee:38:b1:e6:33:8a:c4:2c:53:cb:ab:c8:93:7e:3b:47:
         d7:0d:c8:eb:ec:38:d5:0e:07:d9:fd:bf:86:d7:9e:fc:fc:49:
         3d:5f:1f:80:68:06:d7:22:09:b7:1c:5a:7f:97:cc:5c:0f:97:
         10:05:a0:5e:11:07:52:a8:1a:e8:27:a6:26:d3:bb:5e:69:f6:
         f7:14:dc:3f:ea:e1:7c:b9:72:7b:6d:33:03:59:57:3a:84:35:
         be:b4:7d:9e:8d:af:83:96:ab:d0:c3:cf:48:b9:e2:dd:e1:ed:
         10:99:cc:61:71:50:3d:b8:85:de:0a:d7:cc:23:9e:30:ca:73:
         32:85:63:19:86:68:8b:d1:a8:8c:4e:1a:3c:1a:4f:3f:45:fb:
         a9:10:23:e8:8b:0a:07:83:8b:0d:cb:ab:ca:ac:13:91:97:d8:
         81:62:39:04:07:3b:3e:aa:62:80:a3:89:5e:ab:74:0b:b4:25:
         dd:11:d3:3f:2a:04:0e:60:5f:94:cb:8e:4f:db:66:aa:99:50:
         d8:38:a2:27:9e:24:a9:39:72:4f:e3:e7:35:d0:ce:cf:ab:ac:
         82:8e:93:03:96:8f:d2:b4:b6:07:4b:f8:a0:8d:5e:da:6d:b9:
         a6:d6:fd:5d
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEcghi6Jr5wMKC9CbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGVjMTcxNTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQz
MGUyMB4XDTI0MDkwNjE4NTYxMVoXDTI2MTIxMDE5NTYxMVowPTE7MDkGA1UEAxMy
ZDkwZDhhYmEyYTA3MmRmMjgyYTJjN2FiMThhZjExMGMxYzgzYjA2ODdhMWZlYzI4
MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pFH2JNc4R4XeVsKN
ddLrqczpkKuTiJFpnvxfAg8QW5pMQ5wJP39gmZaPg4d2kCpfezw3mCL993MU0diG
8BeFX5HVlp45JQrHdA/pD1Zo4RayVIffUAKUzXko2ZJS09kjLt1YW+deGjapVoHN
gkPTd+Fo4ZGSp1uh36grLu81k4YMZHCzgEuZ6w1v1n19lzbLfbF4iqJNX2+JAUS+
drYfK2gZj6AyR08CNyQKC5fHSbalWWp57oInDgKnFNuNkvx26OdL1jxM+SkHpQAM
OMW/lh/Q7+FWm/rPcH4ajb858pioa08/o/KxSL4TkUnAJV62XC8FuUqp4Y+vrBV+
0x9RAgMBAAGjggPrMIID5zAdBgNVHQ4EFgQUvO2W2ldLK7JTObYLpaCcxl/Jfmkw
ggE+BggrBgEFBQcBCwSCATAwggEsMF4GCCsGAQUFBzAFhlJyc3luYzovL3JzeW5j
LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNiODZjYjc3LTY5YWMtNDNk
OS05ZjZjLWZjNTMwNjZiZWI4OC8yMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zYjg2Y2I3Ny02OWFjLTQz
ZDktOWY2Yy1mYzUzMDY2YmViODgvMi9CQ0VEOTZEQTU3NEIyQkIyNTMzOUI2MEJB
NUEwOUNDNjVGQzk3RTY5Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBh
YXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB
Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l
dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4
Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3LzBlYzE3MTU3LTY2ZGUtNGFhYi04NWU3LTI4YWY0ZGU0MzBlMi8wZWMxNzE1
Ny02NmRlLTRhYWItODVlNy0yOGFmNGRlNDMwZTIuY3JsMB8GA1UdIwQYMBaAFMtU
fb8kh6VxsrDHiJaZ5zkgP3JjMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE
gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z
aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk
YTIxNTdkMy84NzFkYTQwZi03OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGVj
MTcxNTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQzMGUyLmNlcjAvBggrBgEFBQcB
BwEB/wQgMB4wDAQCAAEwBgMEABekmDAOBAIAAjAIAwYEJgL5+gAwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICZ8EwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXgipVhP83XMDj4fQnSefwd6h/mLu
OLHmM4rELFPLq8iTfjtH1w3I6+w41Q4H2f2/htee/PxJPV8fgGgG1yIJtxxaf5fM
XA+XEAWgXhEHUqga6CemJtO7Xmn29xTcP+rhfLlye20zA1lXOoQ1vrR9no2vg5ar
0MPPSLni3eHtEJnMYXFQPbiF3grXzCOeMMpzMoVjGYZoi9GojE4aPBpPP0X7qRAj
6IsKB4OLDcuryqwTkZfYgWI5BAc7PqpigKOJXqt0C7Ql3RHTPyoEDmBflMuOT9tm
qplQ2DiiJ54kqTlyT+PnNdDOz6usgo6TA5aP0rS2B0v4oI1e2m25ptb9XQ==
-----END CERTIFICATE-----
Generated at Sat Sep 7 19:45:06 2024 by rpki-client on console-fra.rpki-client.org