Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df.cer
File:                     d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df.cer (raw, json)
Hash identifier:          Q9VaapjQjXwCW1XKbV/RLZ7F5/ZS54TYS5P68Oj6tAc=
Subject key identifier:   1A:E9:05:CA:D2:46:1E:1C:76:66:49:9F:2F:7D:68:BA:DF:E7:81:BB
Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63
Certificate issuer:       /CN=0ec17157-66de-4aab-85e7-28af4de430e2
Certificate serial:       010D0C9F43285845F2906A5E990432C501FF0740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/1AE905CAD2461E1C7666499F2F7D68BADFE781BB.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 21 May 2024 15:02:40 +0000
Certificate not after:    Mon 24 Aug 2026 15:02:40 +0000
Subordinate resources:    AS: 26561
                          IP: 23.164.152.0/23
                          IP: 2602:f9fa::/36

Validation:               Failed, certificate revoked on Wed 22 May 2024 18:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:90:6a:5e:99:04:32:c5:01:ff:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2
        Validity
            Not Before: May 21 15:02:40 2024 GMT
            Not After : Aug 24 15:02:40 2026 GMT
        Subject: CN=d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:c9:cd:85:03:5a:34:c3:4a:58:d9:ff:db:
                    e5:35:da:f1:3f:16:c4:96:02:ad:9d:8a:49:06:20:
                    33:f0:2d:a8:66:3f:ab:c6:b4:ba:09:20:f7:d1:46:
                    4e:23:aa:6d:c4:48:ae:e6:58:ee:53:86:5f:70:ae:
                    ba:f3:3f:b2:19:35:84:93:23:f4:61:8f:be:70:65:
                    47:50:be:62:5a:65:04:59:f7:f8:79:d7:79:b6:05:
                    e4:fc:1e:18:c2:32:15:0f:14:42:99:5c:4d:46:5b:
                    84:88:f4:f2:2f:91:3a:95:b7:5e:7b:eb:b9:7c:93:
                    56:fe:33:5e:60:4a:51:96:47:31:d2:72:41:cc:92:
                    62:97:79:3e:1f:6b:3f:e7:84:6b:15:38:f3:16:0d:
                    e0:32:f3:65:32:db:4e:99:bd:4d:9a:93:1e:7e:47:
                    94:48:92:fd:f0:f1:ca:27:92:a9:36:90:87:73:b7:
                    65:88:67:6b:82:ee:5d:b8:10:d8:45:85:0e:cf:81:
                    2a:18:4c:5d:7b:4d:f0:65:86:f1:60:ce:53:78:36:
                    fa:89:d5:5d:71:b5:0f:4a:22:ff:9b:b9:c8:0d:78:
                    15:63:c9:9e:22:64:48:e2:00:b7:0a:3a:ac:40:7e:
                    e5:d3:1f:17:26:27:00:1c:23:a8:b4:2a:c4:4e:aa:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E9:05:CA:D2:46:1E:1C:76:66:49:9F:2F:7D:68:BA:DF:E7:81:BB
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/1AE905CAD2461E1C7666499F2F7D68BADFE781BB.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl

            X509v3 Authority Key Identifier:
                keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.152.0/23
                IPv6:
                  2602:f9fa::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26561

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a9:4b:9e:e4:42:bc:80:d7:2d:29:74:88:a8:1a:43:52:57:
         83:66:35:f9:05:13:be:98:49:d4:75:3d:0a:51:0f:3b:0f:1e:
         4a:72:9d:d7:bf:c1:0f:d3:51:14:db:91:4e:90:ee:51:77:3a:
         c9:10:4e:f8:8b:5d:ee:9c:8d:fd:74:97:3d:52:43:95:55:c6:
         16:e6:a6:af:0e:bd:fc:d0:97:69:bc:78:94:de:8a:7b:d6:77:
         a2:dd:f1:9e:9d:12:07:36:ec:f8:fb:f5:f0:69:e2:f5:a6:13:
         68:24:67:f8:2d:54:3f:03:3f:10:e7:f8:16:bb:fc:b6:79:9f:
         5c:56:73:03:92:47:c9:99:0d:b7:68:62:1a:2a:41:55:df:78:
         77:ad:da:03:22:96:9b:71:8b:8d:4a:8b:e1:2e:1d:e4:71:0d:
         d6:60:e5:ee:02:71:bd:5a:84:e4:62:a6:5e:9b:c5:e3:d1:b1:
         c4:ca:47:f6:f6:67:ad:d4:35:c1:83:8f:b4:a3:e4:83:b8:a1:
         e1:31:2a:67:70:a1:d3:71:6c:c9:65:49:43:13:7b:80:20:e3:
         43:f4:54:b0:40:bd:5d:00:5b:15:ce:52:9c:2f:24:45:29:d9:
         48:1f:cd:db:cb:73:f5:19:78:41:29:18:80:0f:4b:23:3a:e1:
         d7:58:02:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:10 2024 by rpki-client on console-fra.rpki-client.org