Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dec0d08d-d479-41bb-abb0-5ad6efada791.cer
File:                     dec0d08d-d479-41bb-abb0-5ad6efada791.cer (raw, json)
Hash identifier:          a68jhHUZe7puqNimBR79rVFKgGMhbP2FyXAWLv+W6D8=
Subject key identifier:   0A:4C:B1:74:DE:CF:42:14:20:DD:88:FA:CD:D3:B5:C8:C2:0B:57:08
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858436AC4E2CE2250574564AF38A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dec0d08d-d479-41bb-abb0-5ad6efada791/dec0d08d-d479-41bb-abb0-5ad6efada791.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dec0d08d-d479-41bb-abb0-5ad6efada791/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Oct 2023 14:04:35 +0000
Certificate not after:    Sun 04 Jan 2026 15:04:35 +0000
Subordinate resources:    IP: 158.83.0.0/16

Validation:               Failed, certificate revoked on Wed 22 Nov 2023 15:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:6a:c4:e2:ce:22:50:57:45:64:af:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct  2 14:04:35 2023 GMT
            Not After : Jan  4 15:04:35 2026 GMT
        Subject: CN=dec0d08d-d479-41bb-abb0-5ad6efada791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:11:3a:da:55:2b:6e:de:6d:0a:2a:d3:44:20:
                    0b:41:ac:73:93:8f:16:c9:7c:9d:36:7d:c5:aa:af:
                    60:0a:5b:78:17:00:5b:fa:54:9b:ea:69:c8:78:03:
                    15:f5:52:b0:37:d8:50:6f:83:94:85:55:4d:69:0d:
                    09:04:f5:06:71:60:e7:a6:d7:0a:f4:ab:27:69:55:
                    82:b9:9b:ac:ad:e7:6f:04:51:af:31:d1:78:e3:23:
                    15:d2:2b:96:74:b1:3a:13:8a:48:0e:c0:71:a1:2c:
                    1f:48:d9:5c:85:32:ae:e5:f7:c5:a3:f7:1e:44:d8:
                    f4:77:9e:b6:f9:91:fb:e6:9a:d1:5e:d4:a7:d7:8a:
                    8b:d5:55:db:31:19:e2:d8:63:80:3d:43:55:e0:05:
                    5b:6f:a3:40:23:60:17:1f:87:c9:83:9b:d5:50:b7:
                    55:e9:cb:0c:12:74:0b:81:d8:53:89:2e:06:8b:0c:
                    06:17:99:65:33:b6:ba:5b:e0:a2:8c:8c:cb:26:a8:
                    36:d0:32:8a:5c:ca:f2:27:87:1a:0b:a0:9d:f6:c7:
                    27:8e:4a:17:f5:32:f3:e9:18:16:80:4e:ef:60:17:
                    ae:61:8f:5e:39:cd:4d:d3:da:7b:d7:94:4b:db:15:
                    fd:ad:8f:2e:84:7f:0b:64:bd:6b:8d:c8:dc:1b:1b:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4C:B1:74:DE:CF:42:14:20:DD:88:FA:CD:D3:B5:C8:C2:0B:57:08
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dec0d08d-d479-41bb-abb0-5ad6efada791/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dec0d08d-d479-41bb-abb0-5ad6efada791/dec0d08d-d479-41bb-abb0-5ad6efada791.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.83.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:04:c7:c3:bf:ca:d5:88:1f:af:03:94:8b:26:5f:a0:bd:2c:
         7f:fd:2b:e9:af:d6:a0:66:fe:04:f5:22:bc:c8:97:d1:93:e2:
         88:06:9a:8c:cb:7d:05:76:42:d9:5a:93:fc:8f:bc:7e:9a:68:
         06:56:7f:c9:3d:1f:02:6e:6f:5b:51:78:04:d7:f9:88:86:1a:
         6b:b3:d3:ee:5a:c1:8f:f1:b5:0d:c7:df:a1:fb:d0:0c:b5:72:
         4a:4f:31:1f:06:03:6b:76:2c:18:68:3b:35:ee:1f:59:c6:c0:
         57:a3:0f:c3:2b:10:8d:56:9c:f6:72:ca:a0:21:3f:5d:a2:ed:
         45:78:b8:5b:0b:af:1a:ce:b8:4d:47:6c:ec:10:da:ed:4b:8d:
         45:46:f5:5e:6e:c0:76:d1:1b:13:c4:60:3b:c9:ed:4d:8e:44:
         86:67:5e:40:d0:72:09:03:2f:84:29:4b:25:1d:0c:59:02:a7:
         94:79:75:a7:72:73:2c:62:54:80:bf:91:0f:67:1a:b6:0b:e2:
         bb:d4:6e:95:30:29:13:38:73:3a:15:ff:7c:6a:0b:21:72:4c:
         a0:b5:c9:6d:a1:ab:f6:48:1b:80:7e:0f:40:88:3e:2a:f0:ae:
         d8:ee:48:bb:9a:92:24:a4:6a:e7:83:f1:14:0c:d5:5c:da:a1:
         93:db:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org