Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558.cer
File:                     2af590ad-2847-4970-8c2f-c8714fe9c558.cer (raw, json)
Hash identifier:          iW5UHe21m/VAmFTtXZgs7b8moc3E9uAtQtngwtae7ZQ=
Subject key identifier:   63:06:A3:BC:43:00:71:CD:AD:71:49:DA:6B:C6:82:75:52:5E:3A:3F
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858440876F23F3F7E655F31E07B68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558/2af590ad-2847-4970-8c2f-c8714fe9c558.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 28 Nov 2023 01:45:16 +0000
Certificate not after:    Mon 02 Mar 2026 01:45:16 +0000
Subordinate resources:    AS: 11385
                          IP: 192.110.156.0/22
                          IP: 2607:3280::/32

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 11:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:08:76:f2:3f:3f:7e:65:5f:31:e0:7b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 28 01:45:16 2023 GMT
            Not After : Mar  2 01:45:16 2026 GMT
        Subject: CN=2af590ad-2847-4970-8c2f-c8714fe9c558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9d:5e:d9:89:a9:6f:a0:a7:1c:7d:bb:74:d4:
                    a2:bd:f8:65:10:d6:08:95:b4:2a:69:29:01:10:8d:
                    1e:d2:42:3e:f9:2e:c5:67:31:6d:e4:20:00:eb:f7:
                    45:df:fd:84:74:9c:76:52:bb:ba:f3:7b:7a:a7:c9:
                    57:43:5e:0d:f6:97:29:77:55:60:86:94:0a:b8:3d:
                    f8:02:c9:61:55:32:46:31:24:3f:6e:98:db:17:5c:
                    e0:e7:5c:7e:82:5a:6f:85:4b:ed:93:73:da:af:67:
                    39:74:e3:b3:8b:7a:56:31:d7:4d:03:f5:b7:c8:05:
                    cd:fc:ed:4e:06:0a:29:08:51:bf:ec:bd:6c:f3:36:
                    ba:26:e2:ce:c8:97:c3:e6:ef:00:13:71:62:6c:7c:
                    32:b4:a6:6c:73:57:b0:d3:20:15:42:45:75:c3:42:
                    bf:fa:6a:db:10:90:9d:27:85:3a:da:46:58:7c:d4:
                    8f:bb:51:17:85:71:1b:e3:25:9a:f6:18:94:71:fb:
                    c4:a0:84:65:93:60:33:a5:ae:70:21:7c:4b:31:87:
                    43:a5:3f:63:c4:af:21:12:5b:c7:07:20:03:31:7f:
                    61:b2:65:ef:cc:05:a8:41:da:fb:98:d5:17:fc:93:
                    c5:51:0b:5d:95:dd:55:04:88:57:69:68:31:97:92:
                    5a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:06:A3:BC:43:00:71:CD:AD:71:49:DA:6B:C6:82:75:52:5E:3A:3F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2af590ad-2847-4970-8c2f-c8714fe9c558/2af590ad-2847-4970-8c2f-c8714fe9c558.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.110.156.0/22
                IPv6:
                  2607:3280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11385

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f3:57:ac:82:4b:2b:ec:8b:e4:31:d2:20:e3:71:18:79:69:
         8b:3b:8b:e5:ab:4f:ff:c1:d7:e0:d4:33:06:3b:41:d2:ec:19:
         2c:a3:63:7a:6f:2b:12:f4:ba:9e:55:c3:83:a7:eb:43:ab:51:
         f3:28:71:02:4f:58:26:51:75:8f:23:f7:1b:ab:0b:a9:fd:57:
         81:76:04:da:22:78:ea:99:6d:6f:46:2c:12:f1:41:dd:54:00:
         1d:27:43:c7:0f:b8:63:68:a1:ca:bf:6d:69:28:6e:73:08:04:
         d2:7c:5d:fd:2c:1d:58:6e:bd:42:82:22:b3:d2:0b:3d:d0:19:
         d8:d4:d9:63:90:7e:a2:eb:e6:b8:3e:5a:1f:20:00:59:aa:87:
         5e:75:20:fc:88:5f:64:f4:07:09:14:c1:bf:68:07:f0:7c:cd:
         0d:1c:0b:86:84:e9:d9:1c:08:74:50:f4:51:4a:6b:6b:16:ba:
         5a:10:d9:f0:3b:53:4b:06:34:e0:b3:fd:08:ff:f6:80:4a:c8:
         a9:24:b2:a5:cf:90:b1:75:dc:d5:ca:88:43:e4:c2:10:84:b3:
         6c:62:97:be:a8:1c:e1:74:df:bc:b4:11:d8:73:6c:43:4d:d3:
         11:39:61:a6:09:4b:e5:35:54:3f:54:75:d0:de:e7:d5:5e:6a:
         81:e8:15:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 13:12:48 2024 by rpki-client on console-fra.rpki-client.org