Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9c977fd-e7c6-4227-a8e7-dbc2d910825a.cer
File:                     b9c977fd-e7c6-4227-a8e7-dbc2d910825a.cer (raw, json)
Hash identifier:          Spr1zP1CqWX5/XSX14Bl+RTq69Yr+GZtNUA6my9M6Dw=
Subject key identifier:   75:12:87:DB:92:4A:22:E7:F7:BC:8B:57:39:ED:C5:08:5C:A3:8B:FC
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858404F6A5DC1828726BF997BFC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9c977fd-e7c6-4227-a8e7-dbc2d910825a/b9c977fd-e7c6-4227-a8e7-dbc2d910825a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9c977fd-e7c6-4227-a8e7-dbc2d910825a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Dec 2022 16:34:34 +0000
Certificate not after:    Tue 25 Mar 2025 15:34:34 +0000
Subordinate resources:    AS: 63255
                          IP: 158.146.0.0/17
                          IP: 158.146.144.0 -- 158.146.255.255

Validation:               Failed, certificate revoked on Mon 09 Jan 2023 22:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4f:6a:5d:c1:82:87:26:bf:99:7b:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec 21 16:34:34 2022 GMT
            Not After : Mar 25 15:34:34 2025 GMT
        Subject: CN=b9c977fd-e7c6-4227-a8e7-dbc2d910825a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:70:2e:26:5e:ad:9b:c7:9f:28:46:6a:46:91:
                    b9:69:ed:51:e4:a7:3b:1c:5f:b8:f4:13:92:21:b0:
                    1e:7f:3c:23:c1:91:7a:89:ae:8c:fc:5d:8d:e6:1f:
                    3e:67:57:d1:e1:86:9d:a3:28:c6:3d:8e:04:7d:19:
                    a4:bf:0e:5e:2c:42:58:40:35:b6:01:00:8d:9c:3f:
                    24:55:78:ee:f9:c9:77:aa:93:6f:2d:17:b7:34:a4:
                    7c:00:18:d3:93:1c:d7:62:41:fe:92:9c:f0:88:99:
                    94:e2:0d:8c:52:06:99:f3:35:2f:7f:f0:b1:1b:e6:
                    04:18:5a:b5:8d:03:af:d4:62:59:ae:87:18:81:2c:
                    1b:1a:27:a1:ac:8d:d7:a9:ee:2d:bd:79:fb:c6:22:
                    c1:06:0e:74:0d:07:f5:f0:b4:14:61:0d:30:6d:b4:
                    bf:53:42:90:04:e5:62:0f:f4:45:d5:32:69:8e:c7:
                    e1:a5:ff:20:8c:4c:d9:00:eb:fd:bf:32:eb:f2:60:
                    b7:e1:2d:09:03:83:48:b7:bf:4d:33:47:d2:c3:ab:
                    e6:07:b6:99:7a:df:6f:6e:4a:70:b6:a6:29:e8:90:
                    63:d2:65:cc:58:b7:97:91:e4:76:33:da:f6:bb:79:
                    99:8a:07:a4:e9:bd:09:1e:8c:b5:ec:26:42:6f:df:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:12:87:DB:92:4A:22:E7:F7:BC:8B:57:39:ED:C5:08:5C:A3:8B:FC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9c977fd-e7c6-4227-a8e7-dbc2d910825a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9c977fd-e7c6-4227-a8e7-dbc2d910825a/b9c977fd-e7c6-4227-a8e7-dbc2d910825a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.146.0.0/17
                  158.146.144.0-158.146.255.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8e:66:7b:8b:d9:5b:69:ad:5a:d7:7b:d3:9b:ea:89:ce:51:
         9b:a1:41:85:87:a7:85:a7:d3:aa:d9:0a:d1:2e:30:d9:79:e2:
         39:cb:1a:e3:eb:98:11:4d:9b:18:95:ef:ad:d3:32:58:ab:12:
         23:51:08:3f:d6:41:c9:ab:8e:f9:4c:f4:1f:39:8d:d7:19:3e:
         d2:ab:ec:a0:7b:69:2f:e4:80:5f:db:dc:c2:1c:6c:eb:f8:3b:
         9a:21:75:e6:1b:8f:b9:eb:93:08:5e:4a:c9:e3:f0:5b:d0:e4:
         11:3b:e6:48:9d:a4:7f:9d:e2:fc:3c:97:8c:c9:88:55:f5:d7:
         f9:f8:82:17:eb:fc:d0:89:26:22:b0:50:22:ef:fa:0c:3a:0d:
         e1:b5:a4:d7:7e:b5:80:72:05:0f:e8:1f:91:03:37:85:ab:07:
         e9:e8:82:22:50:c8:b1:ff:1f:45:05:99:cd:50:ab:43:17:d3:
         eb:89:8c:a5:54:a6:3f:0f:36:e3:2b:20:66:d0:f7:ae:fb:ba:
         8e:19:65:2b:0b:0f:d2:76:c6:ed:96:60:48:fa:bd:18:7f:f7:
         ea:04:8a:a8:0d:03:ae:e0:26:cb:d1:56:ce:7d:23:03:f9:c4:
         a1:0a:b0:51:c1:ef:5a:44:84:a7:ae:cf:89:cc:06:f2:63:71:
         0d:d1:fb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:14 2024 by rpki-client on console-fra.rpki-client.org