Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278891f4-ef3c-4348-a376-2201e5a6a957.cer
File:                     278891f4-ef3c-4348-a376-2201e5a6a957.cer (raw, json)
Hash identifier:          uja/3vHj9EjEWwbKIgcZMzwqhq7DEI7yAlf6QHjT6VA=
Subject key identifier:   2D:6D:50:D2:34:93:03:D3:CD:A9:8A:C1:92:A4:C4:D8:23:69:96:1C
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285837FA45ED871D271EC4CEC28C30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278891f4-ef3c-4348-a376-2201e5a6a957/278891f4-ef3c-4348-a376-2201e5a6a957.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278891f4-ef3c-4348-a376-2201e5a6a957/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Nov 2020 14:21:56 +0000
Certificate not after:    Sun 17 Nov 2030 14:21:56 +0000
Subordinate resources:    AS: 3634
                          IP: 144.96.0.0/16
                          IP: 192.70.161.0/24

Validation:               Failed, certificate revoked on Mon 13 Feb 2023 15:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:fa:45:ed:87:1d:27:1e:c4:ce:c2:8c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov 17 14:21:56 2020 GMT
            Not After : Nov 17 14:21:56 2030 GMT
        Subject: CN=278891f4-ef3c-4348-a376-2201e5a6a957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c2:c1:06:df:64:cd:9d:b7:97:6d:e9:bb:d2:
                    3f:7e:3a:16:5b:71:94:ec:12:66:0b:af:f4:19:e6:
                    a3:1b:09:4b:ea:88:42:17:27:7d:27:d9:a1:b5:36:
                    35:0c:84:c1:21:19:71:12:9c:d8:72:5a:22:45:6a:
                    6e:ea:4a:b2:69:d9:de:43:e9:b0:6d:56:8e:41:fe:
                    21:a4:57:5a:b5:11:0d:16:f1:a4:fa:72:83:bd:2e:
                    19:ab:33:af:d5:49:6c:69:00:b8:6b:65:89:b7:2f:
                    28:87:e5:10:11:42:b9:78:79:37:3d:e0:91:e4:3e:
                    21:c1:46:d8:d0:e1:e1:91:37:1a:26:e3:36:fe:5b:
                    1c:85:2a:c7:96:48:7d:ff:40:fd:3b:16:c7:ae:9b:
                    f4:8c:b8:be:77:a7:23:bb:93:41:e0:35:8f:a3:a4:
                    f8:89:e2:be:ea:3e:11:2a:29:4a:e5:55:7b:e8:62:
                    28:96:2d:cb:df:18:cd:e2:4b:95:48:ca:98:9c:d8:
                    a6:9d:16:4a:08:67:df:15:e1:67:91:25:d0:af:83:
                    03:1d:96:67:87:87:00:96:cc:f7:4a:05:ba:df:1c:
                    26:7e:fd:4f:02:5a:41:6e:b9:84:67:b9:8d:ac:f7:
                    6d:a0:1b:93:18:d9:07:ca:e3:fb:0d:c6:ed:ad:a5:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6D:50:D2:34:93:03:D3:CD:A9:8A:C1:92:A4:C4:D8:23:69:96:1C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278891f4-ef3c-4348-a376-2201e5a6a957/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278891f4-ef3c-4348-a376-2201e5a6a957/278891f4-ef3c-4348-a376-2201e5a6a957.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.96.0.0/16
                  192.70.161.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3634

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d3:f9:e6:e5:3b:54:79:e9:45:7c:9f:1b:e6:c0:9f:91:da:
         1e:18:10:ac:51:0c:f7:47:3c:a3:4c:4f:a6:f1:0f:1b:ac:5c:
         97:de:f3:f5:83:df:6b:cd:d4:cf:5e:eb:06:a6:bd:22:91:1f:
         77:6e:3e:b0:a8:6a:1d:7d:e0:a2:03:e5:d3:20:88:a4:48:fc:
         02:b3:b9:5a:1c:4f:d3:6f:ed:46:7a:10:cf:44:68:8d:d7:34:
         e6:8c:cc:e4:40:cc:bf:92:29:84:00:cf:99:89:4d:51:b8:bf:
         62:39:b2:54:82:33:1e:a0:9f:a9:93:eb:36:e8:0f:6e:9a:48:
         69:81:f0:db:73:02:9f:f2:d4:31:21:10:ac:4a:cc:c0:a2:8a:
         44:38:01:58:d3:f2:d1:ef:30:86:82:ac:cd:8e:e1:ea:3a:1b:
         59:74:6f:65:a4:50:ea:53:64:1b:63:30:bc:08:7e:51:82:85:
         84:eb:95:ea:e3:e1:27:0a:e7:a8:d6:ef:92:15:4a:ac:d1:63:
         55:4c:43:3b:05:77:8b:91:da:e0:c6:7e:90:c3:53:e8:09:c4:
         0e:b2:dd:cc:b8:82:0f:56:72:e2:86:1c:c0:6e:a9:dd:42:e2:
         c9:9f:ce:81:d5:35:c2:1d:b3:68:78:f6:51:0d:d2:7e:62:43:
         d1:57:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org