Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7.cer
File:                     20f6a64b-91b3-442e-a7bd-5821a82b2db7.cer (raw, json)
Hash identifier:          tSGDuHHwq6g9lUBHlhiSSmZd5Qc6AWk+Cjq7l/JAt4k=
Subject key identifier:   ED:3D:EF:48:02:A5:D4:E1:93:64:7E:B7:BC:94:59:F2:20:2A:51:07
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858437068043B54687BBDE85A4A20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7/20f6a64b-91b3-442e-a7bd-5821a82b2db7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Oct 2023 14:32:19 +0000
Certificate not after:    Tue 06 Jan 2026 15:32:19 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked on Fri 03 Nov 2023 16:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:70:68:04:3b:54:68:7b:bd:e8:5a:4a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct  4 14:32:19 2023 GMT
            Not After : Jan  6 15:32:19 2026 GMT
        Subject: CN=20f6a64b-91b3-442e-a7bd-5821a82b2db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:d7:69:b6:01:06:9a:0c:f3:ed:bb:8c:3a:
                    7f:f4:46:f5:f5:10:6f:d6:01:e2:4b:1c:8c:40:97:
                    a6:b9:bb:ed:dc:69:70:df:c7:a4:32:44:90:52:89:
                    df:c6:ff:b6:00:05:3c:f1:4a:38:cd:7c:db:88:52:
                    bc:aa:f8:54:15:27:34:43:d5:97:65:94:39:ba:ee:
                    21:e3:c6:4a:a2:52:73:a4:6e:0f:f1:b6:47:48:52:
                    03:7e:da:bf:20:95:8e:9d:28:d5:e6:2e:d1:47:e7:
                    dd:a9:77:c9:0d:af:8e:93:92:c2:50:4d:da:28:8f:
                    bf:d0:3f:4f:56:eb:4f:f9:11:f4:83:1f:e0:65:44:
                    b1:63:b1:25:d2:ac:35:64:f1:2c:d1:b6:a3:8c:6f:
                    e6:31:ed:ae:2a:67:32:28:ce:b0:bb:97:0d:22:78:
                    49:e0:98:99:2c:5c:5d:fa:04:ef:64:47:34:44:f4:
                    80:04:55:a9:5c:70:f9:6e:40:7c:3c:46:6a:4e:ff:
                    a2:b3:2c:c8:36:ad:60:18:3b:03:73:05:e9:47:ed:
                    f0:ee:77:e1:bf:e1:88:69:a9:46:91:a1:85:56:cb:
                    d0:60:a0:17:98:4b:86:cb:d5:81:b9:d5:4b:08:e3:
                    22:9e:b3:97:3b:77:6f:7f:68:f3:5e:16:6f:ef:52:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3D:EF:48:02:A5:D4:E1:93:64:7E:B7:BC:94:59:F2:20:2A:51:07
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7/20f6a64b-91b3-442e-a7bd-5821a82b2db7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:1a:57:bb:2d:e3:0f:6d:46:12:8e:ca:69:97:09:c0:d2:db:
         94:3d:41:ef:7c:c0:e0:ac:2f:cb:3b:f8:20:c5:42:db:61:d1:
         f7:f0:f1:8b:2b:59:07:3d:96:d2:b6:68:da:c9:6c:64:36:b6:
         4a:3a:97:dd:28:28:da:96:24:5b:8d:88:5f:ff:75:7b:40:d6:
         f7:d6:ae:03:dd:ef:e7:70:42:de:81:3c:40:62:d3:3b:cf:de:
         7e:d2:c5:a6:02:1f:9a:32:79:d0:db:fc:9a:05:94:8c:99:85:
         a9:bf:5b:7a:8f:b6:e3:4e:f6:67:5c:96:a5:7a:b5:77:d3:08:
         0b:63:5e:68:3d:a9:2c:da:d0:86:ad:6c:06:c9:3f:a6:da:e2:
         7f:3d:54:96:b6:f2:98:b4:b6:21:ff:8b:14:9e:14:00:87:27:
         cb:c2:db:26:70:97:51:46:51:46:1b:c9:a0:b7:d7:cc:cf:70:
         aa:03:5b:ff:c5:85:23:fe:e4:a7:ba:b1:47:b8:c4:2e:3f:95:
         3e:6e:0f:1a:34:d9:58:23:e1:e2:15:1d:56:3f:fa:2e:46:76:
         34:16:f4:e9:f0:f0:9d:b9:60:cc:48:c9:02:26:4a:9c:a0:4b:
         05:1a:c1:1b:26:34:f6:83:7e:dc:68:4a:e8:91:1d:64:d8:5a:
         fa:22:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:10 2024 by rpki-client on console-fra.rpki-client.org