Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a276014419fdb44ec8a186dd7c241c33e6c353dd7.cer
File:                     d90d8aba2a276014419fdb44ec8a186dd7c241c33e6c353dd7.cer (raw, json)
Hash identifier:          2bKjqGiguJaIO3YSAPvIzhwtcN877EaWNee9L3Orst0=
Subject key identifier:   37:94:7C:A4:C4:EA:8D:E3:F5:A8:56:93:38:0E:E8:56:81:A0:C8:D0
Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63
Certificate issuer:       /CN=0ec17157-66de-4aab-85e7-28af4de430e2
Certificate serial:       010D0C9F43285845F28EF963A82F16D5DE04DE40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/37947CA4C4EA8DE3F5A85693380EE85681A0C8D0.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 21 May 2024 14:59:46 +0000
Certificate not after:    Mon 24 Aug 2026 14:59:46 +0000
Subordinate resources:    AS: 26561
                          IP: 23.164.152.0/23
                          IP: 2602:f9fa::/36

Validation:               Failed, certificate revoked on Wed 22 May 2024 18:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:8e:f9:63:a8:2f:16:d5:de:04:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2
        Validity
            Not Before: May 21 14:59:46 2024 GMT
            Not After : Aug 24 14:59:46 2026 GMT
        Subject: CN=d90d8aba2a276014419fdb44ec8a186dd7c241c33e6c353dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:0b:7a:df:b1:a8:ab:1b:dd:c5:59:d4:41:
                    3a:33:65:e0:aa:78:2b:3d:c0:87:ca:e2:39:df:1a:
                    dd:d5:65:46:cf:c1:0d:e4:f9:64:9f:16:ee:1b:bd:
                    b8:6a:4f:e8:27:4a:09:3b:c1:a0:12:bb:1e:a5:6e:
                    18:88:40:0b:b2:35:e7:b8:35:8b:0a:99:88:45:da:
                    a0:61:e3:e5:92:e8:f6:fa:72:e9:97:20:d6:d4:4d:
                    68:ef:28:b6:5b:c2:17:12:2a:2a:c9:03:1a:2f:b4:
                    fd:51:86:9e:cf:35:45:cf:65:a4:30:15:bc:aa:6d:
                    40:21:36:2d:d0:68:6d:86:26:f4:02:d8:be:37:4b:
                    05:fd:b3:0b:e4:5a:b2:ad:96:7f:d4:ef:b5:4e:e0:
                    80:85:5b:86:6f:e2:41:24:c7:2a:33:d1:cc:36:a3:
                    df:5f:c3:02:76:05:42:c8:d1:fd:69:89:f6:bb:68:
                    3f:1e:e8:36:b9:c5:8c:9a:d1:57:b6:8c:87:90:4f:
                    0f:67:e1:ca:9b:23:36:68:a1:8f:b9:89:9c:49:30:
                    58:a8:6b:f8:34:59:87:cc:ee:42:ad:81:44:9e:28:
                    08:1a:b5:75:ef:bc:5b:8f:07:e5:90:17:40:e1:09:
                    9b:b0:4a:07:fe:f2:da:96:a9:b0:60:7d:bc:ca:86:
                    33:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:94:7C:A4:C4:EA:8D:E3:F5:A8:56:93:38:0E:E8:56:81:A0:C8:D0
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/37947CA4C4EA8DE3F5A85693380EE85681A0C8D0.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl

            X509v3 Authority Key Identifier:
                keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.152.0/23
                IPv6:
                  2602:f9fa::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26561

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:4c:62:ec:6a:71:52:d5:b4:47:91:17:40:e4:96:22:7c:d3:
         fe:89:71:0e:c6:6e:84:fa:1b:d6:5f:c8:ed:fc:46:cf:d5:06:
         d7:a6:43:91:43:db:a9:ba:81:17:3a:cf:99:ef:4b:c1:29:e6:
         67:1b:03:c7:a6:9a:cd:29:d0:ab:4c:6b:f5:7b:9d:97:5e:78:
         4e:e2:9f:4b:a7:38:9b:ef:55:40:8c:33:5b:52:34:62:37:37:
         8f:e7:dd:6b:b2:21:86:62:b8:78:f7:de:1c:8a:4b:06:68:05:
         b4:84:e5:eb:0d:19:a3:a4:04:e8:6c:53:95:17:d9:a3:a2:15:
         86:51:28:41:7b:52:93:62:1d:8c:8a:e6:26:ce:08:7d:d9:69:
         a1:a7:bd:de:13:25:a9:05:38:2e:9e:d8:28:0b:a0:e8:c4:f9:
         0a:f5:80:b3:ee:fc:1c:af:fb:e7:c6:f6:f3:a7:f1:de:dc:72:
         30:47:3b:9b:ac:d1:8e:0e:7c:49:a0:17:f0:a5:c6:be:1f:4a:
         3d:9e:00:5e:92:bd:ca:52:87:6f:52:99:1c:95:61:2c:fa:84:
         68:bc:e9:8c:35:95:2d:dd:69:83:50:29:a2:1e:12:37:6f:31:
         31:45:90:24:39:e6:f3:e9:51:77:2c:9e:ae:07:d3:3e:53:33:
         d8:05:2e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:10 2024 by rpki-client on console-fra.rpki-client.org