Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7f823fec-f0b6-4578-ae15-4431ee52f44f.cer
File:                     7f823fec-f0b6-4578-ae15-4431ee52f44f.cer (raw, json)
Hash identifier:          gJ9Tb9mnnQoOlsKvrQafQL6vhkzpADBAPrmMmeveL64=
Subject key identifier:   04:4F:7C:14:8C:13:59:65:0E:48:0E:A0:F6:95:BC:8D:3F:52:79:28
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584221A95B8B5F5F8B280A191180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7f823fec-f0b6-4578-ae15-4431ee52f44f/7f823fec-f0b6-4578-ae15-4431ee52f44f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7f823fec-f0b6-4578-ae15-4431ee52f44f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 06 Jun 2023 16:48:10 +0000
Certificate not after:    Mon 08 Sep 2025 16:44:54 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked on Wed 07 Jun 2023 18:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:21:a9:5b:8b:5f:5f:8b:28:0a:19:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jun  6 16:48:10 2023 GMT
            Not After : Sep  8 16:44:54 2025 GMT
        Subject: CN=7f823fec-f0b6-4578-ae15-4431ee52f44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dc:22:91:1e:ce:15:c1:0a:a3:32:9a:02:3a:
                    0a:6f:c4:12:d9:19:ff:cf:6f:09:19:e7:88:3e:c4:
                    e4:24:05:db:14:8f:f7:31:59:bb:c8:bd:67:00:17:
                    6f:0b:cb:f0:e5:d5:82:3d:10:bb:b1:f5:a9:54:5f:
                    f8:9c:8b:65:48:48:a5:bd:0c:d8:c2:c6:1a:f9:90:
                    29:25:6b:72:11:39:fe:ca:be:59:cd:7d:6e:d5:04:
                    01:0a:16:4e:1a:9c:6f:34:68:d8:f5:24:c7:31:f9:
                    06:58:45:5b:2c:4a:11:30:93:f8:47:6f:ee:44:19:
                    36:11:73:8e:93:d0:18:04:27:dc:da:6f:be:46:55:
                    eb:08:79:1c:cf:1a:79:d0:ea:5b:b4:6a:eb:41:2b:
                    59:35:df:a7:89:8f:7e:be:2e:d3:04:0c:31:47:57:
                    be:97:59:8a:a1:ee:75:e1:01:bc:22:2b:c6:d4:11:
                    69:2c:f4:95:26:a0:5b:91:78:04:66:30:4a:64:4e:
                    7f:91:5f:32:27:cb:92:ee:13:e3:6c:01:2b:42:ad:
                    41:1b:5b:06:d0:c4:90:b2:88:a1:51:8d:43:ee:b8:
                    63:82:26:cf:a2:84:39:fb:dc:0a:51:24:cd:01:1c:
                    55:ba:42:aa:9c:ab:72:95:90:c3:59:4a:aa:bf:13:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4F:7C:14:8C:13:59:65:0E:48:0E:A0:F6:95:BC:8D:3F:52:79:28
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7f823fec-f0b6-4578-ae15-4431ee52f44f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7f823fec-f0b6-4578-ae15-4431ee52f44f/7f823fec-f0b6-4578-ae15-4431ee52f44f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:70:c7:65:17:d5:64:bb:88:3a:55:52:25:01:0f:a5:df:0f:
         3a:d8:9e:97:2a:c3:55:5b:8c:ef:1c:cf:53:25:cc:ea:01:cb:
         a5:8a:39:0f:65:2d:8a:5b:98:01:b3:8f:44:ef:d5:c5:74:09:
         80:98:c3:e5:f1:09:53:22:b4:9f:51:64:35:2f:09:0c:69:82:
         7f:f6:1b:71:7b:21:cd:e5:43:19:9f:62:b5:8d:09:42:64:43:
         12:d6:88:40:8a:7e:6b:d3:61:61:ac:b5:f5:e5:8e:f1:ba:40:
         47:15:7e:6f:95:39:7c:b3:6d:d8:2d:a7:cc:ac:e3:66:58:8b:
         a6:c6:99:4d:8a:78:3d:e6:f0:05:9a:bd:db:ef:0a:a7:94:6e:
         03:b1:c8:fe:45:de:d0:2c:13:2c:dc:d7:2f:91:bd:cd:98:2a:
         29:17:64:18:1e:90:3b:06:20:db:8d:53:84:8d:71:2a:44:06:
         04:02:54:4b:61:55:a4:35:01:b2:2f:6a:30:f1:aa:1e:2b:85:
         86:ba:b4:10:20:61:5b:7f:b0:a8:01:cc:61:50:7b:38:fe:48:
         f7:7d:09:b2:00:02:15:23:08:37:bc:4f:2f:5d:c6:bb:46:6f:
         d5:75:31:5c:e4:b9:72:4c:66:e9:c4:a1:fc:5c:78:ab:48:09:
         3f:80:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org