Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03476b9d-b235-4ff6-a276-445db9e28906.cer
File:                     03476b9d-b235-4ff6-a276-445db9e28906.cer (raw, json)
Hash identifier:          z28EdJO8dOqaz2eS9zXgQdEg5Xbf5USAmXUqNuTzq1s=
Subject key identifier:   51:B3:4C:30:A1:4E:C4:86:14:3F:12:A3:88:69:54:AA:5A:E8:6A:A6
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328583D931F8351617B90B1C022A100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03476b9d-b235-4ff6-a276-445db9e28906/03476b9d-b235-4ff6-a276-445db9e28906.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03476b9d-b235-4ff6-a276-445db9e28906/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Apr 2022 20:17:54 +0000
Certificate not after:    Wed 14 Apr 2032 20:17:54 +0000
Subordinate resources:    AS: 397438
                          IP: 23.141.240.0/24
                          IP: 216.170.108.0/23
                          IP: 2602:fdad::/36

Validation:               Failed, certificate revoked on Mon 12 Sep 2022 20:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:93:1f:83:51:61:7b:90:b1:c0:22:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Apr 14 20:17:54 2022 GMT
            Not After : Apr 14 20:17:54 2032 GMT
        Subject: CN=03476b9d-b235-4ff6-a276-445db9e28906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1c:08:ca:6f:da:f2:ba:4f:d2:2b:8a:17:6f:
                    8a:4e:2a:4b:78:a8:83:90:c8:e9:b9:87:81:4c:31:
                    45:e0:cc:1c:31:4c:23:41:95:4f:b0:eb:84:ec:9b:
                    2c:e6:08:9a:69:19:9d:63:dd:9f:34:5b:9b:14:cf:
                    ec:71:7e:f7:4a:d7:b3:cc:b7:bf:3e:bd:ce:8e:92:
                    b3:3f:16:ac:33:26:0e:cd:02:fe:55:97:94:de:25:
                    de:8d:24:6c:32:a4:ed:95:fe:c8:3c:7b:14:1d:4a:
                    6b:ce:6f:93:b8:1c:07:9e:05:b5:44:cd:4b:09:c5:
                    99:0e:a5:72:62:ad:72:50:7c:06:59:db:c2:bf:53:
                    b0:d9:b8:e0:93:ab:c5:f9:34:6f:11:b7:13:d0:fc:
                    fb:99:c3:3a:31:e6:c3:f1:0c:47:f8:50:f9:c0:84:
                    ff:54:ab:4c:25:6c:c6:5e:fa:13:a7:71:d9:c3:99:
                    64:c2:16:02:b2:e1:83:3e:db:0c:a0:d3:61:b7:38:
                    b5:64:22:4c:e3:72:0b:89:63:f8:82:02:a7:d7:c8:
                    57:44:b6:e3:c2:b5:be:87:9f:7c:5f:51:05:86:5e:
                    14:b3:58:02:7d:02:fa:ed:fd:c5:82:66:5c:b8:09:
                    1e:62:db:63:ca:79:5a:8c:d3:e0:03:f6:d7:0b:9a:
                    89:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B3:4C:30:A1:4E:C4:86:14:3F:12:A3:88:69:54:AA:5A:E8:6A:A6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03476b9d-b235-4ff6-a276-445db9e28906/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03476b9d-b235-4ff6-a276-445db9e28906/03476b9d-b235-4ff6-a276-445db9e28906.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.240.0/24
                  216.170.108.0/23
                IPv6:
                  2602:fdad::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397438

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:eb:05:76:42:1f:cb:08:dc:1d:a7:a4:47:66:44:f0:ed:
         88:0c:20:cf:5e:da:67:10:68:65:cc:b6:e1:b4:86:0e:fa:8e:
         5a:4b:b8:9e:c9:7b:c6:df:45:27:f4:4a:29:81:f3:3d:bd:11:
         77:d2:4b:2c:0e:7d:3e:f3:da:24:de:8a:3b:99:3c:e6:51:8f:
         2a:47:fe:63:93:70:36:1b:f8:dd:59:3f:dc:f8:59:80:b4:c7:
         fa:05:9b:da:bd:a4:26:8a:f7:3c:16:46:da:09:ef:56:69:96:
         0c:ba:21:57:9d:60:7c:2c:2a:73:5c:23:8e:45:1e:d0:a2:04:
         0e:13:e6:86:c1:aa:6c:c4:20:28:ab:6a:d1:a6:bf:b6:68:64:
         7a:96:4c:9f:a3:85:c3:0c:07:27:89:2a:2a:20:89:3a:4b:28:
         eb:de:94:b4:43:c6:87:7b:c3:0e:64:d4:e9:f3:dd:7e:6a:1c:
         9a:19:89:29:c3:73:aa:fd:2a:2b:6b:2d:24:cf:68:33:b8:cc:
         3a:1a:3d:81:a1:4e:cd:b6:2f:ff:d4:c1:74:80:11:f8:9a:14:
         0c:28:61:60:9d:74:46:89:46:c9:dc:61:f5:f0:8a:0f:d4:9a:
         6c:9c:ac:9e:05:7d:c5:6e:05:07:42:0d:73:02:b5:95:13:e9:
         ff:e9:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:46 2024 by rpki-client on console-ams.rpki-client.org