Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566a5b282cb20fe3cfb47305689ee449ce63ca183f57.cer
File:                     a3d7c4566a5b282cb20fe3cfb47305689ee449ce63ca183f57.cer (raw, json)
Hash identifier:          2Or1GoPzesP3NvOS3iLM7qowPlHxzFoGQ6BzSlz/8xE=
Subject key identifier:   0C:C0:2D:0A:35:A6:DE:0D:22:89:8D:98:68:D6:A5:B3:E9:3A:39:FE
Authority key identifier: 83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8
Certificate issuer:       /CN=d8ea1081-bccb-41d5-b0fe-1b9724cced3f
Certificate serial:       010D0C9F432858417C0E66F570D987C5E6F81700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer
Manifest:                 rsync://rpki.co/repo/HYSP/17/0CC02D0A35A6DE0D22898D9868D6A5B3E93A39FE.mft
caRepository:             rsync://rpki.co/repo/HYSP/17
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:07:35 +0000
Certificate not after:    Fri 11 Jul 2025 09:07:35 +0000
Subordinate resources:    IP: 23.149.248.0/24
                          IP: 149.112.53.0/24
                          IP: 2602:fa90::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7c:0e:66:f5:70:d9:87:c5:e6:f8:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ea1081-bccb-41d5-b0fe-1b9724cced3f
        Validity
            Not Before: Apr  8 09:07:35 2023 GMT
            Not After : Jul 11 09:07:35 2025 GMT
        Subject: CN=a3d7c4566a5b282cb20fe3cfb47305689ee449ce63ca183f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:d2:b2:ae:28:e0:2f:d9:68:c6:ea:36:c9:
                    cf:8d:de:89:d2:41:9f:df:03:82:ba:bf:90:ea:88:
                    f4:bb:3f:1d:77:b5:7c:ad:52:a7:fc:14:e9:05:2e:
                    70:38:26:7b:e0:31:9e:6e:20:99:7d:8d:99:f8:e7:
                    ed:87:b2:8d:fe:03:a8:3c:97:a8:9c:1f:03:d2:9f:
                    41:06:3e:1f:9a:f4:3f:c9:45:23:83:4f:a7:82:2d:
                    ae:3a:d6:08:4d:00:cd:95:e8:60:b4:43:61:ee:fa:
                    6a:c7:b3:1e:a7:6f:05:9a:32:c4:06:db:ee:a7:3d:
                    1f:da:1f:70:cb:4f:28:01:e0:b5:86:ad:a5:a4:2a:
                    a7:38:3e:d6:56:91:00:c2:35:17:ad:86:4b:fc:88:
                    1e:aa:f4:79:46:7e:d4:b8:83:ba:47:7a:ae:97:16:
                    a5:94:04:85:f1:d4:9e:6c:e2:51:9a:b9:ac:a1:f6:
                    63:b3:80:93:25:90:13:da:9c:49:61:e4:a2:9f:7b:
                    6b:ed:16:8c:89:8b:d6:37:3c:6f:4c:c3:2a:0d:59:
                    df:ee:09:ec:58:2e:cc:5f:1a:fb:7b:a4:87:cc:2c:
                    07:52:a9:e2:01:44:48:28:e1:61:7e:1b:52:ac:d3:
                    3d:f9:f9:22:ab:c5:c7:a8:9f:7b:d1:88:b4:3c:ef:
                    81:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C0:2D:0A:35:A6:DE:0D:22:89:8D:98:68:D6:A5:B3:E9:3A:39:FE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/17
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/17/0CC02D0A35A6DE0D22898D9868D6A5B3E93A39FE.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.crl

            X509v3 Authority Key Identifier:
                keyid:83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.248.0/24
                  149.112.53.0/24
                IPv6:
                  2602:fa90::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c1:56:d6:d4:13:7f:76:69:94:a2:57:13:6b:b4:9d:e4:a3:
         dc:e1:c7:b1:c1:1d:f3:1c:05:ea:ec:ad:29:eb:b2:0a:e9:f9:
         23:9d:df:5c:95:bf:d1:57:ba:79:8d:c1:96:8f:64:fe:3a:08:
         72:3e:10:52:2d:95:1f:7e:f1:ae:30:6c:8c:c6:3f:4d:cf:d6:
         b8:d3:5a:3b:1d:78:cc:63:4e:fc:7b:81:d6:54:31:56:23:7e:
         a1:2a:ca:92:e6:bc:91:63:7e:fc:6e:49:46:00:7d:80:3b:e6:
         b3:b9:21:f0:43:38:f4:c8:b4:5c:75:51:74:0a:7b:23:1b:64:
         28:24:fe:24:08:2a:4a:4d:ba:9a:ab:4e:1a:48:b8:43:ef:62:
         0f:83:bd:6f:24:8a:14:98:1e:10:2a:4f:b9:8b:43:1a:bd:f6:
         fd:ff:0a:c1:df:ef:a3:09:3b:7e:a4:d4:15:bf:2b:f6:14:29:
         67:cc:c5:c6:87:80:12:b5:92:33:92:6c:6e:43:e8:13:6e:17:
         23:55:5e:59:9b:f6:dc:6a:d5:41:c0:d1:08:21:9f:10:54:e0:
         b5:66:ed:98:e0:64:9a:c3:16:dc:aa:7e:5f:36:78:c9:ec:d0:
         ec:36:fd:1c:84:2a:5c:de:a6:49:8e:c5:07:f0:a5:57:d3:ee:
         f2:3f:30:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:51 2023 by rpki-client on console-fra.rpki-client.org