Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e2e4333-5d0b-491b-85cd-95b8452a3f71.cer
File:                     9e2e4333-5d0b-491b-85cd-95b8452a3f71.cer (raw, json)
Hash identifier:          YBWlV5/tX307mTEC4T1VLuqMuELVSURrJCtjeI9cZv8=
Subject key identifier:   4E:C5:02:6F:DB:1E:C2:8A:32:F9:14:A0:DB:1A:B6:4E:2D:A5:F1:B8
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285844D60FCFA49B45A5539E7E2400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e2e4333-5d0b-491b-85cd-95b8452a3f71/9e2e4333-5d0b-491b-85cd-95b8452a3f71.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e2e4333-5d0b-491b-85cd-95b8452a3f71/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 09 Feb 2024 17:13:59 +0000
Certificate not after:    Thu 14 May 2026 16:13:59 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 22:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d6:0f:cf:a4:9b:45:a5:53:9e:7e:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb  9 17:13:59 2024 GMT
            Not After : May 14 16:13:59 2026 GMT
        Subject: CN=9e2e4333-5d0b-491b-85cd-95b8452a3f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:93:92:fb:94:db:fa:03:e4:a5:f8:f6:19:
                    be:fc:e6:34:99:ca:8b:46:75:28:93:9d:aa:69:a7:
                    a5:84:44:04:b5:99:d9:1a:a4:3e:51:48:e1:bc:1d:
                    44:6a:f3:13:9c:f1:a9:c4:31:02:30:a9:29:82:e7:
                    2e:6a:08:46:dc:b0:87:a5:fb:5f:58:cb:11:a9:d4:
                    6b:78:4b:32:11:c7:09:10:c3:3c:2e:b0:89:88:59:
                    d7:86:63:76:ee:35:37:72:0a:45:46:3d:a5:8c:9e:
                    d5:9f:ee:46:5a:33:f4:e3:7a:31:8f:0f:38:9b:06:
                    52:14:e6:de:c3:25:fc:a0:b7:93:66:e2:ee:06:86:
                    7e:21:43:96:f2:05:dd:e9:58:2a:81:73:0a:1f:b3:
                    fc:58:10:81:e3:a3:99:04:0e:9d:b7:f8:3f:f9:c0:
                    be:b2:66:7c:12:1b:03:16:5b:f4:03:29:e9:2f:6d:
                    5e:3f:cb:3b:36:b8:bc:14:93:4d:40:fb:1c:23:b2:
                    11:79:ec:6d:aa:90:1c:e3:4f:33:2f:b5:9b:2b:f9:
                    88:ee:75:31:20:92:7a:51:8f:03:72:0f:e2:ab:04:
                    56:3d:55:8d:ec:1c:0b:16:7f:23:ae:64:0f:c4:38:
                    08:0f:6b:6a:a6:e2:3c:82:15:2f:12:84:48:97:ed:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C5:02:6F:DB:1E:C2:8A:32:F9:14:A0:DB:1A:B6:4E:2D:A5:F1:B8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e2e4333-5d0b-491b-85cd-95b8452a3f71/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e2e4333-5d0b-491b-85cd-95b8452a3f71/9e2e4333-5d0b-491b-85cd-95b8452a3f71.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c0:73:f3:2f:d8:3d:bf:22:8c:f6:58:75:c7:fe:0c:37:ce:
         dc:9a:1e:4f:a5:5d:6a:7d:98:b6:1c:f6:9c:05:5d:4c:c8:9f:
         d6:05:23:de:91:a7:ce:b0:90:ed:12:97:2d:7b:db:c4:1f:1e:
         1d:00:f6:29:73:36:82:ba:aa:00:fd:b5:a1:31:84:05:d5:b0:
         09:f8:c6:ac:99:81:3f:2c:b5:88:d2:71:2f:36:e2:31:ce:21:
         d2:e0:c6:29:82:d8:6f:60:17:00:a0:60:99:89:46:f8:32:53:
         23:49:f8:89:da:da:b0:07:15:0c:a6:a2:8e:1b:10:1f:1b:40:
         12:89:ea:98:dc:bb:cf:fb:ec:5e:83:c8:8e:28:6a:26:4c:ab:
         3f:d0:d4:62:14:3e:fa:71:39:8d:5f:da:e4:0a:9a:88:f1:f1:
         6a:a6:7d:00:18:06:30:8e:5f:d2:52:90:30:1d:21:6d:be:88:
         dc:c8:82:d9:4e:43:85:84:3e:b7:df:e9:7b:76:77:14:8d:ab:
         64:9e:61:2d:c5:99:a4:86:ee:cb:d8:97:31:c0:44:6c:3d:2b:
         fc:e4:8e:31:13:08:16:45:3b:bc:e4:c0:b9:52:80:09:79:95:
         77:26:1c:5c:0c:30:53:08:df:f8:42:c4:c9:17:ad:f9:b4:a6:
         39:01:f8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org