Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9173d8de-4da6-46f1-8ac0-343814206fd3.cer
File:                     9173d8de-4da6-46f1-8ac0-343814206fd3.cer (raw, json)
Hash identifier:          xfW90a7w+t3wOpCTG56wsTT/TBfETwaPwyEDyTiDTCY=
Subject key identifier:   0C:67:F3:62:6A:7D:EB:E9:13:70:13:6E:F3:BA:3E:AA:89:AE:1F:66
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285844EA1B4383CE0213939AF69580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9173d8de-4da6-46f1-8ac0-343814206fd3/9173d8de-4da6-46f1-8ac0-343814206fd3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9173d8de-4da6-46f1-8ac0-343814206fd3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 16 Feb 2024 21:33:13 +0000
Certificate not after:    Tue 27 Jan 2026 22:54:37 +0000
Subordinate resources:    AS: 400910
                          IP: 23.164.56.0/24
                          IP: 2602:f974::/36

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 20:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:1b:43:83:ce:02:13:93:9a:f6:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb 16 21:33:13 2024 GMT
            Not After : Jan 27 22:54:37 2026 GMT
        Subject: CN=9173d8de-4da6-46f1-8ac0-343814206fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:46:7c:30:ac:d0:97:19:5d:a1:e5:2b:39:
                    93:b7:ee:91:35:9c:6e:c6:5a:40:17:95:82:23:71:
                    23:d0:77:30:c7:7d:d9:c2:96:b0:c8:62:7c:17:c6:
                    f3:bf:df:b6:ec:d3:c2:41:2a:2a:94:32:a9:f5:d3:
                    03:c3:a5:08:fc:ed:a1:6f:9b:56:c2:89:54:15:49:
                    7c:ca:5b:8b:8e:57:ac:07:94:1b:ce:24:a6:37:7c:
                    16:21:f9:bb:1d:5f:02:9e:53:84:ac:e3:c3:42:56:
                    6c:79:c4:c1:18:2c:1e:db:2a:a4:ba:58:91:94:2a:
                    ac:79:4a:35:9c:59:56:50:87:b4:7c:79:ce:39:ed:
                    12:6d:62:48:ca:98:58:e5:0a:4e:0d:3e:80:a4:60:
                    7c:a1:34:54:4a:2b:a9:9b:06:d9:50:b7:c2:91:b0:
                    7b:ac:a7:a1:80:30:ff:57:89:19:0d:d9:e0:c0:68:
                    b4:b0:4a:64:51:83:88:01:90:02:e6:39:f8:c6:b4:
                    70:81:a6:33:c8:3e:33:36:31:1f:0f:18:32:db:b7:
                    ed:66:c4:de:31:88:30:d1:8b:cd:ce:77:cb:f9:7e:
                    4d:4e:2c:63:5b:a7:20:f6:a5:d2:be:31:68:51:bb:
                    16:30:1e:4e:41:9e:9d:68:4c:f8:5b:01:46:fe:78:
                    82:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:67:F3:62:6A:7D:EB:E9:13:70:13:6E:F3:BA:3E:AA:89:AE:1F:66
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9173d8de-4da6-46f1-8ac0-343814206fd3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9173d8de-4da6-46f1-8ac0-343814206fd3/9173d8de-4da6-46f1-8ac0-343814206fd3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.56.0/24
                IPv6:
                  2602:f974::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400910

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:95:50:0c:c3:00:34:96:1d:6b:b2:a9:2d:52:db:80:04:
         0a:0f:75:fb:a0:85:3d:d5:c0:71:5e:3f:72:c7:25:1a:7e:c5:
         f6:7e:45:24:fc:ae:2d:21:12:41:7d:b5:d1:6c:52:87:f5:56:
         29:26:77:3a:a6:34:fc:74:c0:d6:e8:a2:58:5a:39:e7:0a:1f:
         e2:54:25:3e:49:46:ff:88:b3:ff:52:c6:8c:ff:08:7a:72:28:
         f0:cf:55:fb:34:9d:de:2a:b4:e3:93:b2:20:7b:a8:92:77:6f:
         8c:ce:c2:3c:ac:5e:cc:71:1e:68:aa:be:d2:a3:1f:70:eb:00:
         0f:5f:a1:e9:e6:fd:93:c0:7d:19:9a:92:24:fd:bf:16:79:cf:
         fe:7e:d5:f4:a5:af:bb:5e:21:ac:28:90:1e:9e:7b:62:64:86:
         d4:c8:0a:2c:c8:6c:2e:86:58:88:98:0f:f6:dd:b3:b9:b5:d6:
         1a:14:37:49:ad:39:ad:01:b6:db:84:93:c4:6e:da:56:3c:93:
         04:b5:7c:4f:c5:19:6b:4b:a4:12:94:fb:e7:64:b8:81:a4:76:
         0f:75:7a:ea:46:52:27:a4:bd:12:1e:9f:e9:fe:e2:75:dd:11:
         14:2d:cc:67:0a:7b:17:e1:f5:ca:84:4d:71:02:f8:88:8d:90:
         bf:21:cd:0e
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWETqG0ODzgITk5r2lYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI0MDIxNjIxMzMxM1oXDTI2MDEyNzIyNTQzN1owLzEtMCsGA1UEAxMk
OTE3M2Q4ZGUtNGRhNi00NmYxLThhYzAtMzQzODE0MjA2ZmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPxGfDCs0JcZXaHlKzmTt+6RNZxuxlpAF5WC
I3Ej0Hcwx33ZwpawyGJ8F8bzv9+27NPCQSoqlDKp9dMDw6UI/O2hb5tWwolUFUl8
yluLjlesB5QbziSmN3wWIfm7HV8CnlOErOPDQlZsecTBGCwe2yqkuliRlCqseUo1
nFlWUIe0fHnOOe0SbWJIyphY5QpODT6ApGB8oTRUSiupmwbZULfCkbB7rKehgDD/
V4kZDdngwGi0sEpkUYOIAZAC5jn4xrRwgaYzyD4zNjEfDxgy27ftZsTeMYgw0YvN
znfL+X5NTixjW6cg9qXSvjFoUbsWMB5OQZ6daEz4WwFG/niC8QIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFAxn82JqfevpE3ATbvO6PqqJrh9mMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85
MTczZDhkZS00ZGE2LTQ2ZjEtOGFjMC0zNDM4MTQyMDZmZDMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzkxNzNkOGRlLTRkYTYtNDZmMS04
YWMwLTM0MzgxNDIwNmZkMy85MTczZDhkZS00ZGE2LTQ2ZjEtOGFjMC0zNDM4MTQy
MDZmZDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXpDgwDgQCAAIwCAMGBCYC+XQAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYeDjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhzZVQDMMANJYda7KpLVLbgAQK
D3X7oIU91cBxXj9yxyUafsX2fkUk/K4tIRJBfbXRbFKH9VYpJnc6pjT8dMDW6KJY
WjnnCh/iVCU+SUb/iLP/UsaM/wh6cijwz1X7NJ3eKrTjk7Ige6iSd2+MzsI8rF7M
cR5oqr7Sox9w6wAPX6Hp5v2TwH0ZmpIk/b8Wec/+ftX0pa+7XiGsKJAenntiZIbU
yAosyGwuhliImA/23bO5tdYaFDdJrTmtAbbbhJPEbtpWPJMEtXxPxRlrS6QSlPvn
ZLiBpHYPdXrqRlInpL0SHp/p/uJ13REULcxnCnsX4fXKhE1xAviIjZC/Ic0O
-----END CERTIFICATE-----
Generated at Mon Mar 4 23:25:40 2024 by rpki-client on console-ams.rpki-client.org