Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a14384cc213fd36f0fec40912777bcdde8085be3f.cer
File:                     1822fe9c8a14384cc213fd36f0fec40912777bcdde8085be3f.cer (raw, json)
Hash identifier:          DTA8VKotbGGPMpej2rqOKC10sDOddK00DgPKn/iJ+No=
Subject key identifier:   FE:4E:6E:1A:C4:B2:81:D5:05:68:A6:B7:10:17:F5:8B:85:E1:4A:BF
Authority key identifier: 85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69
Certificate issuer:       /CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a
Certificate serial:       010D0C9F43285840A381C5D99BAB0446AEC44820
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/4/FE4E6E1AC4B281D50568A6B71017F58B85E14ABF.mft
caRepository:             rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/4
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Fri 20 Jan 2023 19:29:37 +0000
Certificate not after:    Thu 24 Apr 2025 18:29:37 +0000
Subordinate resources:    IP: 23.145.56.0/24
                          IP: 2602:fab8::/36

Validation:               Failed, certificate revoked on Sun 29 Jan 2023 16:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a3:81:c5:d9:9b:ab:04:46:ae:c4:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a
        Validity
            Not Before: Jan 20 19:29:37 2023 GMT
            Not After : Apr 24 18:29:37 2025 GMT
        Subject: CN=1822fe9c8a14384cc213fd36f0fec40912777bcdde8085be3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:7e:33:00:68:0d:de:f8:06:80:c9:ac:b2:
                    67:1a:08:f3:ea:64:d6:0b:32:36:eb:45:08:62:79:
                    95:58:d7:33:0c:cb:5e:b4:a1:e0:c5:d4:2a:71:ab:
                    42:b0:c3:7d:88:f0:4b:61:f1:57:ef:28:34:e6:ff:
                    24:a4:98:ac:4b:05:dd:19:ed:b3:51:24:8c:09:53:
                    13:71:fa:1e:de:3d:80:0d:1a:99:68:c9:45:11:69:
                    9d:93:c2:d5:95:5f:c6:b6:05:01:e4:c7:04:9f:c3:
                    88:a6:4c:18:e7:39:7a:c1:83:47:a8:e4:60:c1:f7:
                    9f:c8:77:bf:6b:7f:f2:5a:26:77:23:23:62:9a:52:
                    7c:ed:2a:e7:6c:6d:a2:a2:d4:73:21:e0:70:00:74:
                    d4:e4:b9:77:bf:9d:1f:80:cb:52:65:2d:a8:74:df:
                    e5:9b:0e:5e:6c:09:45:37:be:e2:0e:b9:31:77:fd:
                    34:d9:5c:fb:e4:58:4f:da:d2:79:63:91:fe:2f:7b:
                    31:23:2a:e1:40:3c:59:3b:ef:8c:dd:41:f7:23:eb:
                    33:1a:c5:f3:f7:a0:8b:b4:b7:5b:e3:8a:bb:da:3e:
                    78:a7:a6:1c:38:fe:13:25:45:73:cb:f7:83:b3:35:
                    40:6c:3b:c3:56:7d:b6:e5:7c:22:1b:cf:5c:a1:5b:
                    88:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4E:6E:1A:C4:B2:81:D5:05:68:A6:B7:10:17:F5:8B:85:E1:4A:BF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/4
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/4/FE4E6E1AC4B281D50568A6B71017F58B85E14ABF.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl

            X509v3 Authority Key Identifier:
                keyid:85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.56.0/24
                IPv6:
                  2602:fab8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:36:28:1e:58:ae:f6:a1:47:09:a1:16:08:dd:1d:cf:cb:
         b3:50:75:94:c6:78:5b:36:42:b9:4d:d4:a3:eb:3e:44:49:dd:
         f6:ed:cc:cb:0c:4c:09:c5:26:24:d5:d3:9d:55:df:1f:0c:be:
         bf:74:5f:2f:f5:6b:5e:bd:d6:cd:d1:eb:09:19:55:e0:74:4a:
         bc:b0:83:ba:06:dd:cf:7a:4c:90:14:93:27:c1:21:8a:44:29:
         ca:0a:fb:63:e5:ef:68:be:a8:a6:d8:65:77:bc:1d:4d:f9:62:
         45:d1:11:d3:b9:06:ad:7f:cb:2e:58:bb:ec:00:79:27:41:84:
         af:1f:64:10:53:5e:03:95:04:28:f1:09:fd:31:7a:02:99:ab:
         af:a5:70:fa:a5:4f:0d:66:f2:f7:51:d8:1f:09:47:74:7c:3a:
         ef:4c:51:22:2c:d4:e5:88:ce:02:da:60:ef:ee:5b:a8:57:f9:
         7b:83:8f:37:ee:4a:d5:ef:a3:e3:23:0d:67:34:b9:c1:ed:4f:
         6c:51:c9:6f:75:d7:99:15:5a:8d:75:5f:a4:b2:e6:da:76:d6:
         27:75:59:98:c1:64:b2:33:7c:5e:3b:ff:4c:26:5c:94:f6:d9:
         59:77:45:34:18:cd:f8:f4:2d:b5:ba:6e:c0:e5:cc:a6:9b:a1:
         24:1b:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:40 2024 by rpki-client on console-ams.rpki-client.org