Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/44bd9049-475d-4c5e-b77a-20d0af4d7da9.cer
File:                     44bd9049-475d-4c5e-b77a-20d0af4d7da9.cer (raw, json)
Hash identifier:          tDGRldRLOGHc1BzAx2NMyrT1SOZtW0BkCibLzEmuohg=
Subject key identifier:   21:95:A0:A8:C8:3B:73:65:0F:A4:B0:DA:A6:B1:AF:F9:99:67:F2:DA
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858413FC86CB50B533C1E013DF780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/44bd9049-475d-4c5e-b77a-20d0af4d7da9/44bd9049-475d-4c5e-b77a-20d0af4d7da9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/44bd9049-475d-4c5e-b77a-20d0af4d7da9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 17 Mar 2023 18:58:05 +0000
Certificate not after:    Thu 19 Jun 2025 18:58:05 +0000
Subordinate resources:    AS: 11810
                          IP: 204.194.222.0/23
                          IP: 216.185.208.0/22
                          IP: 2620:98:c000::/48

Validation:               Failed, certificate revoked on Fri 24 Mar 2023 18:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:3f:c8:6c:b5:0b:53:3c:1e:01:3d:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Mar 17 18:58:05 2023 GMT
            Not After : Jun 19 18:58:05 2025 GMT
        Subject: CN=44bd9049-475d-4c5e-b77a-20d0af4d7da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:76:24:20:c9:0e:74:61:74:9f:c6:2b:fa:78:
                    bd:4b:e9:06:0a:ea:59:a3:83:bb:54:27:66:b0:7b:
                    64:0d:ab:60:0e:76:e2:f9:fb:b9:2f:55:b9:4f:43:
                    9e:0b:5c:92:17:bf:3a:8f:4d:5a:a7:dd:fc:f8:66:
                    83:b8:d0:c1:e4:dd:dd:05:82:0c:46:44:ef:d8:9a:
                    32:8e:ea:a2:58:25:15:5c:b2:4b:f4:cf:4a:33:49:
                    73:8b:79:c6:d1:50:21:87:08:89:93:1e:20:50:98:
                    dc:49:85:43:ab:46:99:47:a4:c4:26:a3:45:a4:eb:
                    91:63:df:86:fa:6c:7e:50:e4:eb:de:35:ea:77:2d:
                    6b:35:75:0e:1e:07:78:18:41:e1:61:fd:b4:24:ef:
                    70:48:7b:55:1a:02:aa:32:94:92:7e:3a:aa:ce:2f:
                    4b:25:e9:7b:38:cd:19:ce:7e:5b:6e:02:62:d5:72:
                    ac:92:e9:3e:65:1d:56:f4:0a:52:45:7f:66:d0:f0:
                    80:ea:ff:23:1f:17:42:87:ff:ab:cc:00:31:c1:ad:
                    2f:8f:21:41:c5:bf:a2:ca:51:71:11:f2:f5:65:8d:
                    5e:a1:81:78:cb:6b:23:72:51:63:bc:6d:13:f5:f8:
                    52:ea:8f:7c:4b:cc:85:b8:8b:9e:2e:7f:a7:95:d4:
                    67:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:95:A0:A8:C8:3B:73:65:0F:A4:B0:DA:A6:B1:AF:F9:99:67:F2:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/44bd9049-475d-4c5e-b77a-20d0af4d7da9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/44bd9049-475d-4c5e-b77a-20d0af4d7da9/44bd9049-475d-4c5e-b77a-20d0af4d7da9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.222.0/23
                  216.185.208.0/22
                IPv6:
                  2620:98:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11810

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:66:0b:86:70:8c:a4:c8:b7:37:bb:dc:91:f6:77:d2:f1:a1:
         da:28:94:a8:ee:b3:cd:fd:c1:08:aa:bc:e8:49:a7:2e:9d:dd:
         3f:41:17:9b:06:96:94:cb:54:fe:a6:2d:ad:ba:60:0c:c2:e9:
         3d:61:6a:39:36:88:e5:57:7a:3f:ca:2e:42:2f:cf:ca:6c:3b:
         70:3b:2c:15:e3:24:15:b5:87:fa:06:1f:b0:18:83:db:ea:18:
         70:be:81:ff:36:e4:8b:4d:2e:74:49:f0:08:e7:a9:d7:32:74:
         f3:ec:68:cc:d4:41:db:31:f6:71:1c:d9:53:c9:21:dd:6f:da:
         14:b5:0b:c2:dc:13:ad:28:23:fc:0e:28:4f:0b:85:af:03:8f:
         62:b5:ca:2d:ab:7b:bc:f9:f0:27:f9:c6:1b:ac:da:56:a3:db:
         34:c3:55:a3:d3:3c:6b:c6:58:9d:7a:15:99:26:7d:0c:07:71:
         b5:0b:e2:15:1a:66:78:67:27:bf:4c:44:db:57:a5:5f:c4:56:
         a6:73:94:a8:26:75:6e:62:4f:fc:0a:d9:36:a9:68:7f:18:7e:
         e0:3d:3e:ff:82:7f:22:55:14:fe:b9:4f:04:7c:c7:e6:ed:51:
         f9:8b:68:f1:8b:28:a6:df:ee:51:ef:52:6b:9c:fa:e8:b3:d4:
         84:19:d7:59
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEE/yGy1C1M8HgE994AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTIzMDMxNzE4NTgwNVoXDTI1MDYxOTE4NTgwNVowLzEtMCsGA1UEAxMk
NDRiZDkwNDktNDc1ZC00YzVlLWI3N2EtMjBkMGFmNGQ3ZGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HYkIMkOdGF0n8Yr+ni9S+kGCupZo4O7VCdm
sHtkDatgDnbi+fu5L1W5T0OeC1ySF786j01ap938+GaDuNDB5N3dBYIMRkTv2Joy
juqiWCUVXLJL9M9KM0lzi3nG0VAhhwiJkx4gUJjcSYVDq0aZR6TEJqNFpOuRY9+G
+mx+UOTr3jXqdy1rNXUOHgd4GEHhYf20JO9wSHtVGgKqMpSSfjqqzi9LJel7OM0Z
zn5bbgJi1XKskuk+ZR1W9ApSRX9m0PCA6v8jHxdCh/+rzAAxwa0vjyFBxb+iylFx
EfL1ZY1eoYF4y2sjclFjvG0T9fhS6o98S8yFuIueLn+nldRnXQIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFCGVoKjIO3NlD6Sw2qaxr/mZZ/LaMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80
NGJkOTA0OS00NzVkLTRjNWUtYjc3YS0yMGQwYWY0ZDdkYTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQ0YmQ5MDQ5LTQ3NWQtNGM1ZS1i
NzdhLTIwZDBhZjRkN2RhOS80NGJkOTA0OS00NzVkLTRjNWUtYjc3YS0yMGQwYWY0
ZDdkYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNgYIKwYBBQUH
AQcBAf8EJzAlMBIEAgABMAwDBAHMwt4DBALYudAwDwQCAAIwCQMHACYgAJjAADAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgIuIjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOZguGcIykyLc3u9yR
9nfS8aHaKJSo7rPN/cEIqrzoSacund0/QRebBpaUy1T+pi2tumAMwuk9YWo5Nojl
V3o/yi5CL8/KbDtwOywV4yQVtYf6Bh+wGIPb6hhwvoH/NuSLTS50SfAI56nXMnTz
7GjM1EHbMfZxHNlTySHdb9oUtQvC3BOtKCP8DihPC4WvA49itcotq3u8+fAn+cYb
rNpWo9s0w1Wj0zxrxlidehWZJn0MB3G1C+IVGmZ4Zye/TETbV6VfxFamc5SoJnVu
Yk/8Ctk2qWh/GH7gPT7/gn8iVRT+uU8EfMfm7VH5i2jxiyim3+5R71JrnPros9SE
GddZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:39 2024 by rpki-client on console-ams.rpki-client.org