Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64.cer
File:                     61c2a35c-ce3c-44d8-a070-b55253715f64.cer (raw, json)
Hash identifier:          K3F1tHZClCtCw9MvlIgq6Kyn4sbRnhnv0TFecPr4nQw=
Subject key identifier:   47:7B:9B:91:93:4E:F2:8B:81:9E:1D:A0:EB:2F:23:8A:12:20:9D:04
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328576D51CC73C042CFC17117AA5B53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64/61c2a35c-ce3c-44d8-a070-b55253715f64.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Nov 2019 12:41:53 +0000
Certificate not after:    Wed 07 Nov 2029 12:41:53 +0000
Subordinate resources:    AS: 30456
                          IP: 23.145.208.0/24
                          IP: 23.156.128.0/24
                          IP: 185.199.92.0/22
                          IP: 2605:7940::/32

Validation:               Failed, certificate revoked on Tue 29 Nov 2022 19:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:17:aa:5b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov  7 12:41:53 2019 GMT
            Not After : Nov  7 12:41:53 2029 GMT
        Subject: CN=61c2a35c-ce3c-44d8-a070-b55253715f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b4:86:08:41:4b:c2:51:c0:a6:40:b9:44:7e:
                    28:37:5c:9f:65:4e:06:08:f6:72:02:bd:f2:b0:df:
                    e1:34:68:21:d6:77:7e:54:e0:52:10:ed:98:d1:77:
                    fd:e6:c7:9a:5a:0b:5d:90:f0:fe:e0:15:2c:0a:f7:
                    7d:58:59:54:60:91:91:d3:75:66:ad:c4:8d:2b:bd:
                    65:af:47:ca:2c:c0:bc:be:4a:53:c7:5f:23:21:48:
                    2d:b3:84:a0:58:26:b4:96:37:87:24:f3:ad:23:ba:
                    49:9a:43:12:7d:a9:35:9a:f8:33:03:07:0a:a9:6d:
                    59:f2:15:68:1e:b2:d4:4a:73:88:7d:50:36:6a:8a:
                    c3:1d:77:fc:a9:57:c3:c9:b9:91:55:8a:24:a2:a7:
                    96:d0:b1:f3:bc:5b:9e:66:63:08:a1:2f:93:20:24:
                    e2:e4:df:34:53:0a:36:41:34:c4:41:c0:bd:60:89:
                    a3:8a:3a:01:48:8b:b0:e6:b3:a8:86:87:55:bf:89:
                    87:96:1b:5b:70:70:61:16:15:62:1f:2a:ff:0c:46:
                    f1:82:82:3c:fa:a5:96:60:48:a7:73:56:4b:1e:ad:
                    ab:fc:eb:a1:ac:88:c8:97:d1:bd:4f:7b:19:7f:9f:
                    d8:61:8b:08:09:1f:04:b5:b1:f9:3e:3c:f6:8a:22:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7B:9B:91:93:4E:F2:8B:81:9E:1D:A0:EB:2F:23:8A:12:20:9D:04
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64/61c2a35c-ce3c-44d8-a070-b55253715f64.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.208.0/24
                  23.156.128.0/24
                  185.199.92.0/22
                IPv6:
                  2605:7940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30456

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:94:76:a5:7c:2f:d8:8a:10:c7:c2:57:ae:75:21:ca:f9:ec:
         37:54:de:90:19:71:ed:d7:45:8d:69:76:a5:c4:a7:b6:53:9d:
         b9:55:f7:f3:05:db:f5:fc:39:5f:26:a5:c6:b8:6c:5b:87:f5:
         7b:53:ab:24:15:ba:c1:6c:2f:49:f8:3b:db:f4:83:ff:9e:c5:
         d0:25:51:08:83:50:63:fe:8c:bd:bd:fc:bc:01:ee:c0:d1:dd:
         0c:f3:62:36:83:7b:ce:65:30:2e:8c:7f:2e:c7:1a:bc:01:b7:
         c6:c8:22:d5:52:76:5c:2c:27:4f:8e:35:ef:22:fb:6f:99:52:
         0e:f9:df:46:3e:34:84:58:50:5d:b9:c4:f4:7c:6a:2e:8e:b6:
         d0:0e:53:ea:f2:81:e0:ba:f0:25:76:82:de:50:81:20:c6:f2:
         e8:26:50:b4:7f:57:b5:a7:4a:05:35:3f:b9:5c:4b:7c:f4:1c:
         a7:d0:85:bd:7d:df:e1:a4:0e:3a:06:f3:93:1e:21:29:4c:de:
         cd:0a:fb:b2:2b:01:8a:05:04:92:5b:1a:34:fb:a5:be:d9:51:
         7e:57:84:aa:ee:ea:01:c3:32:23:d7:77:30:f2:f4:80:7a:ce:
         c1:3a:d0:5b:61:5e:ee:00:76:55:85:f1:ca:73:00:7d:f7:c6:
         75:4e:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:25 2024 by rpki-client on console-ams.rpki-client.org