Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13.cer
File:                     1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13.cer (raw, json)
Hash identifier:          JnlKywu/Tu1LRvnyyMqgXVR/6sC5sLoGl2jmA8rHBVA=
Subject key identifier:   DC:DC:33:8C:7E:15:4C:E2:3D:0D:A6:07:DE:19:25:37:B8:1D:7F:FE
Authority key identifier: 85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69
Certificate issuer:       /CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a
Certificate serial:       010D0C9F43285843CD5F4091626C311014FE3500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/DCDC338C7E154CE23D0DA607DE192537B81D7FFE.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 06 Nov 2023 21:44:50 +0000
Certificate not after:    Sun 08 Feb 2026 21:44:50 +0000
Subordinate resources:    IP: 23.145.56.0/23
                          IP: 2602:fab8::/36

Validation:               Failed, certificate revoked on Sun 12 Nov 2023 08:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:cd:5f:40:91:62:6c:31:10:14:fe:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a
        Validity
            Not Before: Nov  6 21:44:50 2023 GMT
            Not After : Feb  8 21:44:50 2026 GMT
        Subject: CN=1822fe9c8a94760625f39a68cc0cb2452e118f941f2e744c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:78:93:7c:c4:35:c2:d5:75:62:76:9f:cf:
                    52:27:01:fd:4a:ff:3c:59:d3:b1:9b:bb:1c:65:58:
                    c3:d9:1d:bb:d5:24:8a:ae:e2:23:2f:a9:b9:d0:f6:
                    05:46:a2:6a:fa:d5:f4:92:3f:cb:a0:dd:10:8f:98:
                    0a:e2:27:e1:e5:d1:9a:52:9b:6d:54:1f:88:26:dc:
                    40:ad:de:a2:2c:fd:06:9a:2a:7c:7a:99:f3:de:64:
                    aa:ff:c5:84:19:3b:69:76:93:73:b6:75:fd:77:d9:
                    74:db:5d:2f:fb:e7:96:e8:5b:6b:5d:6c:9b:af:db:
                    52:9b:96:27:69:e6:a2:e2:4c:13:13:bb:5f:8f:fe:
                    ef:43:d5:a9:93:3c:c4:82:74:cb:e1:f8:23:5c:5a:
                    17:5a:03:7e:bc:f6:60:dd:08:46:5c:7f:36:0a:3c:
                    77:bb:34:4b:be:79:3c:82:d6:9c:01:c0:ba:13:85:
                    3e:4b:96:8d:74:27:cc:09:40:97:eb:1b:9e:e4:57:
                    57:dc:d7:15:f0:71:90:88:6d:8a:e3:76:f9:97:a0:
                    63:81:aa:83:4e:73:3a:35:3f:3b:29:22:25:23:32:
                    ab:ba:41:f9:78:e6:e5:80:96:7e:71:c3:9e:53:42:
                    fd:75:8b:02:04:6e:23:39:9e:8d:d2:83:fe:dc:e1:
                    18:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DC:33:8C:7E:15:4C:E2:3D:0D:A6:07:DE:19:25:37:B8:1D:7F:FE
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/6/DCDC338C7E154CE23D0DA607DE192537B81D7FFE.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl

            X509v3 Authority Key Identifier:
                keyid:85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.56.0/23
                IPv6:
                  2602:fab8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:76:7c:16:02:81:56:e3:3e:94:bc:5c:61:46:d4:8b:e3:fe:
         f9:f4:09:13:d7:9a:86:80:84:62:ac:7c:38:85:8c:37:09:23:
         89:ff:56:e6:1e:ae:0c:5c:a7:ee:ed:54:2d:46:02:d3:bc:b1:
         8a:ff:0c:db:57:4b:1e:97:10:9e:f3:11:73:f3:4a:f6:6a:37:
         24:81:df:2c:d0:e7:55:af:90:80:df:dd:ce:be:55:5f:9c:5d:
         ff:3f:a4:8a:8d:52:ae:a7:8e:72:fe:91:bb:d9:ab:60:9c:74:
         9d:06:91:df:57:1d:c2:57:00:36:36:fe:e5:03:db:c1:02:b1:
         a7:7a:3a:a7:40:07:47:96:ab:66:95:d6:cd:de:61:19:47:39:
         c1:33:3d:6d:ad:36:12:56:c6:ee:67:64:e1:c9:dd:4c:87:7c:
         9d:6a:dd:3e:68:87:91:25:99:68:d3:74:75:40:1d:84:be:df:
         d7:04:1f:1b:c2:64:00:58:db:ad:6c:80:c0:ab:5e:67:bb:c3:
         00:31:f0:33:ed:8f:a7:51:47:16:d3:c9:9e:d8:32:8c:48:d5:
         7c:ad:a5:da:64:19:ee:cb:d6:81:4c:0f:9b:aa:b7:eb:22:b9:
         26:45:7b:eb:0a:a3:9d:e0:b2:47:f4:75:2f:b4:56:4b:88:a5:
         68:8a:3e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org