Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer
File:                     c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer (raw, json)
Hash identifier:          L6SpmX1fW4hUVphl9LpZFJ2YoHzXISkbRI6jFvBhCU4=
Subject key identifier:   0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841BD53B0D274AD835130D34A40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 01 May 2023 18:14:44 +0000
Certificate not after:    Sun 03 Aug 2025 18:14:44 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked on Thu 04 May 2023 14:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bd:53:b0:d2:74:ad:83:51:30:d3:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May  1 18:14:44 2023 GMT
            Not After : Aug  3 18:14:44 2025 GMT
        Subject: CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0e:6f:e7:a9:44:d1:62:f4:c7:a9:13:03:d6:
                    59:27:7b:05:f0:3d:fb:71:0c:40:3d:fa:7b:27:5b:
                    16:4f:7c:d5:6f:9c:b9:09:08:8d:9f:c6:88:02:c4:
                    4d:b8:46:6c:86:a9:20:6f:17:62:ca:63:30:e2:1d:
                    88:73:1d:45:d6:98:e1:d0:b7:77:29:e1:96:d8:ca:
                    f1:1c:77:01:03:fb:97:f0:25:da:6e:df:53:56:e3:
                    c3:5c:47:db:4f:42:1f:9e:f5:b3:d1:ce:95:35:99:
                    24:7e:3c:4e:6a:ff:0f:35:f4:45:5e:df:e6:a0:c0:
                    13:61:6d:8b:25:5c:cb:ab:85:70:5b:8f:cc:12:dd:
                    fd:9a:fc:2a:b7:f0:28:05:d4:86:35:e4:12:3d:73:
                    57:1f:df:86:18:a9:da:41:8c:15:5e:ab:c6:67:de:
                    95:06:4c:02:d4:1a:2a:ed:91:9c:e0:8e:64:bd:83:
                    af:2b:3e:b8:1c:bb:f4:35:93:1e:ff:73:a2:98:b6:
                    59:e2:cc:9d:f1:e3:1c:e4:2c:15:63:07:da:cc:70:
                    33:51:5c:55:63:56:c9:a9:d4:64:fb:c8:03:df:b2:
                    2f:d2:19:1a:fe:e7:d9:3a:97:06:7d:30:e7:1d:82:
                    d0:5e:14:60:70:ad:56:33:0a:6e:1b:d1:ba:33:99:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:53:77:8c:82:8e:96:7c:1a:f3:c5:b2:60:b9:4b:b7:93:20:
         d2:ab:5d:24:18:f8:98:e1:49:78:38:c1:a6:d2:16:95:a4:cb:
         1f:f1:d9:e7:ae:a4:52:5a:d4:99:56:73:29:39:9a:2f:f2:eb:
         6c:86:c5:bb:b6:28:2a:b6:71:3c:81:c9:58:a8:e8:11:0b:d7:
         f1:16:86:64:f6:e0:b8:fe:9e:30:86:1e:62:11:a3:dc:72:8d:
         22:98:50:ec:f4:fc:58:cd:a1:01:fc:89:ab:d5:0c:26:cb:f5:
         6b:53:90:51:28:fe:ed:1a:d6:a6:a2:78:2c:a9:6e:88:db:e0:
         04:58:c2:a4:41:7f:c9:ce:55:9f:a0:36:fd:46:3c:14:f4:8d:
         bd:61:2a:05:27:b1:44:9b:b2:c4:25:99:66:b4:d6:9e:65:47:
         46:06:57:c2:a8:a5:dd:d9:3a:94:0b:2e:50:8d:b9:82:60:82:
         24:0c:6d:96:7f:8b:17:7b:8c:5c:de:9a:56:4d:6c:67:d0:41:
         c4:60:64:a2:d7:c8:60:73:53:47:06:bf:b8:e0:46:21:f0:b0:
         f0:1b:03:61:73:1e:3c:fe:9e:04:66:ad:a7:0d:04:a6:af:1d:
         5c:d2:6b:bc:8c:9c:02:45:f9:3d:da:90:f4:22:a0:c5:7c:09:
         1c:64:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org