Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5066e0f3-3ace-469c-b5bc-e2430048991d.cer
File:                     5066e0f3-3ace-469c-b5bc-e2430048991d.cer (raw, json)
Hash identifier:          P5K5WQkmitKmrKu01/Zr0ZPjm3/ffr72FDclEP5Ipds=
Subject key identifier:   43:C6:7F:21:5B:32:00:1C:A9:1B:3F:E3:A5:D1:E7:51:07:AC:E3:32
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848EF75B3CCB5629D69B4C74F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5066e0f3-3ace-469c-b5bc-e2430048991d/5066e0f3-3ace-469c-b5bc-e2430048991d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5066e0f3-3ace-469c-b5bc-e2430048991d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 19 Feb 2025 14:42:14 +0000
Certificate not after:    Tue 25 May 2027 13:42:14 +0000
Subordinate resources:    AS: 14090
Validation:               Failed, certificate revoked on Mon 10 Mar 2025 14:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:75:b3:cc:b5:62:9d:69:b4:c7:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Feb 19 14:42:14 2025 GMT
            Not After : May 25 13:42:14 2027 GMT
        Subject: CN=5066e0f3-3ace-469c-b5bc-e2430048991d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:63:27:24:9d:00:81:12:ec:8a:d1:4e:b4:
                    2f:f7:b3:00:fa:cb:f3:e8:3f:b7:af:61:5b:53:13:
                    72:25:f7:e1:ae:76:2f:34:08:60:a5:d6:da:57:f6:
                    78:e1:1d:77:25:09:48:fa:76:b7:06:48:a5:97:38:
                    28:fb:99:81:b5:49:2b:c1:bb:0b:5d:4a:39:c4:11:
                    1b:ce:8a:d1:77:3e:d7:be:8d:e8:7e:24:c1:04:de:
                    81:cb:1a:3d:64:0f:b7:ca:48:d8:8f:2c:fd:cd:a4:
                    fd:9a:b1:57:9f:c5:0f:a8:d8:7a:7f:6a:f8:31:d9:
                    6f:d7:68:fa:46:ab:ba:dd:e4:17:94:70:1c:ad:fc:
                    9f:f5:8b:ac:69:95:f9:5e:12:6f:c0:4c:e6:4d:56:
                    39:89:cb:a5:3d:b8:6c:29:83:ff:74:42:aa:b1:86:
                    a2:43:02:6a:c0:24:03:df:f6:2c:d0:04:3f:65:de:
                    95:09:57:9e:4e:d4:e8:26:8c:de:86:bf:6f:86:79:
                    f6:f5:76:98:e5:4e:73:86:ab:45:be:50:14:eb:21:
                    18:d8:ef:f9:d2:b8:0a:b1:8d:5e:ca:e7:58:dc:68:
                    b6:b6:1f:ff:e8:bc:8f:9a:01:da:e8:7a:3f:7e:d4:
                    f3:2c:0f:2c:ba:70:dd:3f:11:57:d8:f0:f8:8c:3e:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C6:7F:21:5B:32:00:1C:A9:1B:3F:E3:A5:D1:E7:51:07:AC:E3:32
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5066e0f3-3ace-469c-b5bc-e2430048991d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5066e0f3-3ace-469c-b5bc-e2430048991d/5066e0f3-3ace-469c-b5bc-e2430048991d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14090

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:56:82:af:21:cf:5a:75:6d:93:ff:f6:9d:40:3d:15:55:d8:
         02:2e:b3:54:09:38:7c:cd:4f:ac:96:ab:1c:73:d9:c0:3a:02:
         33:b8:73:59:bd:a8:4c:1e:fe:ef:02:17:d7:e2:21:99:84:a7:
         d8:03:8b:b4:5f:2f:87:51:7c:cb:ca:30:87:24:89:77:45:0e:
         fb:03:59:73:f7:e9:05:02:43:30:f4:65:f6:3c:6f:e6:24:1f:
         03:3d:d8:3f:77:4f:38:d4:82:7b:07:15:5f:cc:95:b7:29:e5:
         55:02:f1:ee:6a:5a:49:5a:21:79:2b:94:65:2e:29:00:94:a0:
         9d:c8:f0:cb:d0:bd:9c:71:2d:b1:7c:9b:87:12:92:fb:80:82:
         e3:e9:fc:d8:10:61:e6:57:53:9a:9e:a4:57:ac:40:e7:a9:6c:
         bb:82:0f:72:c1:38:e7:5a:a8:42:40:9a:80:dd:84:58:06:80:
         e5:86:cc:2c:f8:12:86:39:aa:ac:de:15:e0:7b:50:49:34:91:
         8d:17:f5:6b:76:80:d8:b7:13:4f:a4:38:47:00:dd:4c:15:34:
         54:10:f2:d9:fe:02:40:1d:a3:cc:f6:89:b5:c3:b7:15:fc:51:
         f6:ba:24:96:68:f8:ad:1a:17:60:43:f7:73:b3:41:00:09:98:
         39:3b:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:23:00 2025 by rpki-client