Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16.cer
File:                     9d14f316-922d-497d-be54-fa80fcfb9e16.cer (raw, json)
Hash identifier:          HgJApEHbt5JXQPlyeRhHwpTZVX+UtEaIaeLQHuD41Ls=
Subject key identifier:   C9:24:3C:C1:3E:B8:0C:44:D6:96:03:79:89:FA:01:E8:FB:73:B0:54
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285844D6AE260AE3902041F5544440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/9d14f316-922d-497d-be54-fa80fcfb9e16.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 09 Feb 2024 22:33:01 +0000
Certificate not after:    Thu 14 May 2026 21:33:01 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 18:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d6:ae:26:0a:e3:90:20:41:f5:54:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb  9 22:33:01 2024 GMT
            Not After : May 14 21:33:01 2026 GMT
        Subject: CN=9d14f316-922d-497d-be54-fa80fcfb9e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:20:15:e5:9d:64:7d:12:15:c8:39:93:ab:
                    55:75:3a:45:d9:0d:26:b7:d8:fc:6c:c1:a9:c2:38:
                    df:70:be:74:06:9c:26:d3:b3:75:28:9a:57:61:a3:
                    5d:c9:9b:3c:71:7e:7b:df:de:86:d8:f7:eb:f1:26:
                    50:86:93:50:5b:90:a1:ac:fe:be:a8:a5:5b:fa:bd:
                    34:45:35:b9:c9:be:42:74:4b:ca:fe:d2:8e:79:90:
                    04:f5:86:0d:6d:ec:16:7b:3c:90:b4:9d:16:47:98:
                    c5:32:b7:46:ff:ef:56:24:5a:45:4e:f2:68:26:62:
                    11:46:39:a3:b3:dd:8b:6a:81:d7:42:08:a6:11:d3:
                    33:9b:3d:71:3f:1d:6c:60:f3:dc:c1:ab:35:65:2e:
                    43:39:17:f0:2f:0e:ec:66:28:d9:94:21:10:78:6d:
                    f9:89:25:f1:1c:83:87:1a:53:ea:10:f4:01:9e:85:
                    fa:3e:1f:1f:e6:62:00:17:84:d6:f2:57:a2:60:4b:
                    ca:6f:ac:a1:e0:68:d3:3b:13:b5:89:23:de:01:7d:
                    05:33:dd:17:12:e7:e1:37:6e:f4:fa:90:7f:53:80:
                    f2:af:64:9e:db:be:7d:e3:22:e0:dd:be:18:b6:85:
                    5f:3f:c1:0e:da:0d:38:8a:2c:61:04:3d:76:3e:db:
                    41:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:24:3C:C1:3E:B8:0C:44:D6:96:03:79:89:FA:01:E8:FB:73:B0:54
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/9d14f316-922d-497d-be54-fa80fcfb9e16.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:27:42:eb:b6:45:34:77:4d:e5:fe:4d:8c:39:cb:85:23:9f:
         8d:f3:fa:2f:cb:d7:7c:f0:64:0c:8d:24:44:b2:23:c9:7e:7f:
         68:94:99:80:60:24:61:14:2b:45:d2:09:17:0d:4f:1b:fd:7b:
         29:4a:57:28:a2:31:88:a3:76:09:85:09:b3:d3:5e:e4:37:7c:
         f2:15:2c:bb:32:54:ce:f1:ee:25:76:fc:89:db:2a:9f:ae:e3:
         92:8d:32:cd:12:05:5a:74:cf:40:17:0c:04:c0:c4:6a:f2:39:
         d2:74:fb:bc:f0:aa:f3:8e:af:72:cb:1c:4a:75:92:3b:e9:42:
         59:d8:83:50:71:76:4b:e6:0f:5b:11:9b:9f:7d:2d:a5:60:87:
         f1:2a:c0:8b:da:ee:1d:77:59:8c:5c:13:fb:a3:cf:d0:30:52:
         7e:d3:64:01:99:4d:74:4d:ce:ad:a4:f3:bd:32:fe:9a:5b:e4:
         bf:0d:f0:b9:60:dc:58:8b:28:e0:9c:13:fd:13:ec:87:c4:df:
         10:ba:f0:46:b1:ed:90:51:3d:4e:6b:3d:72:40:b5:01:7d:14:
         bc:f8:2a:ec:c7:85:5f:c8:97:6f:f4:a2:60:6c:53:ea:b4:ec:
         73:e3:20:71:7e:a8:b2:53:aa:62:8f:59:0d:61:f2:27:6c:d3:
         5b:20:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 20:22:35 2024 by rpki-client on console-fra.rpki-client.org