Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8890db1b-0402-4ca6-93ec-2dc8eca0139f.cer
File:                     8890db1b-0402-4ca6-93ec-2dc8eca0139f.cer (raw, json)
Hash identifier:          OrSkypPqtI4OQSggGU4pt2jiFQ1na8C9DGgN1OplFGQ=
Subject key identifier:   D4:6D:19:3E:10:07:5E:AB:D9:1B:29:B7:A3:96:27:18:23:DF:6C:79
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328583E6C5AFA310CD3AC07C397ED80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8890db1b-0402-4ca6-93ec-2dc8eca0139f/8890db1b-0402-4ca6-93ec-2dc8eca0139f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8890db1b-0402-4ca6-93ec-2dc8eca0139f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 01 Jul 2022 15:48:07 +0000
Certificate not after:    Wed 31 Oct 2029 12:21:35 +0000
Subordinate resources:    AS: 397952
                          IP: 23.135.240.0/24
                          IP: 158.51.107.0/24
                          IP: 199.116.52.0/22
                          IP: 2605:3dc0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:5a:fa:31:0c:d3:ac:07:c3:97:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jul  1 15:48:07 2022 GMT
            Not After : Oct 31 12:21:35 2029 GMT
        Subject: CN=8890db1b-0402-4ca6-93ec-2dc8eca0139f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:ea:ae:25:86:aa:e8:ca:59:40:41:1e:7b:
                    46:7d:d6:db:2f:b2:19:46:58:16:d3:ac:22:28:0c:
                    ea:7f:a0:9a:b3:4a:c9:05:73:5d:99:4e:6b:ff:13:
                    73:00:62:04:49:d9:c0:de:67:25:25:13:50:c5:cf:
                    f2:0a:cb:b1:22:84:a1:b2:31:e7:bc:c1:0b:66:47:
                    e2:5a:70:31:a1:33:17:00:91:b1:a4:82:bd:0e:34:
                    f1:d8:74:b5:f0:c1:98:42:89:b7:6e:2b:4c:f5:e2:
                    3f:88:64:b7:6b:ee:c7:ea:47:6a:d6:5a:a2:74:d7:
                    24:15:66:7f:a2:58:ce:98:15:d2:78:21:7a:23:8e:
                    87:d0:dd:f3:ea:df:8b:f3:6c:f9:d8:00:92:a3:d5:
                    3a:b0:03:97:54:95:1f:6a:e0:76:c6:6d:2a:01:2a:
                    3d:6e:e9:a0:bf:29:6a:68:1d:10:29:cb:7f:e1:24:
                    12:65:79:eb:05:97:77:14:80:68:da:18:12:3d:a0:
                    d4:95:b6:94:16:00:d7:ca:0f:0d:52:46:a0:7c:f4:
                    12:ee:5c:73:ac:31:1f:03:7c:22:75:75:5a:22:45:
                    aa:90:97:81:b0:52:4b:8a:34:56:08:26:f3:a8:94:
                    aa:9f:e6:ac:dd:48:80:6e:2a:17:b3:0b:cf:48:b1:
                    92:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6D:19:3E:10:07:5E:AB:D9:1B:29:B7:A3:96:27:18:23:DF:6C:79
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8890db1b-0402-4ca6-93ec-2dc8eca0139f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8890db1b-0402-4ca6-93ec-2dc8eca0139f/8890db1b-0402-4ca6-93ec-2dc8eca0139f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.240.0/24
                  158.51.107.0/24
                  199.116.52.0/22
                IPv6:
                  2605:3dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397952

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ac:93:93:81:8e:7e:44:37:79:b9:a1:0a:2c:da:67:bc:df:
         53:2f:ba:a6:0a:1b:01:ff:85:3b:5a:6b:ea:f3:35:2d:47:5e:
         b6:ef:de:fc:f4:03:46:8e:0e:27:78:1c:e3:b7:29:1c:be:3d:
         ef:55:c5:0e:a5:d6:9d:92:e4:27:4e:0e:6a:c8:6c:d6:12:7d:
         49:80:4a:70:e3:4b:aa:11:3a:7d:8e:37:93:b2:1b:e5:50:53:
         8d:2f:56:32:4a:5b:2c:90:77:d3:92:97:a3:3c:18:ec:88:a2:
         f4:e3:d7:ad:5e:0a:87:30:14:2e:52:e5:80:6f:31:1f:9d:90:
         62:1a:5e:27:63:6d:37:48:ce:40:f8:0a:a5:a3:ec:11:6f:00:
         7a:26:23:11:a1:10:52:d2:f6:37:76:ae:74:e7:c2:5f:05:15:
         ce:e3:10:0a:78:3b:53:b0:8c:3c:24:2f:5b:09:48:5b:12:b6:
         47:82:84:9c:69:e7:11:d8:69:35:f4:16:a5:6a:3b:bc:5d:06:
         d7:a7:59:0b:be:9e:53:8d:6a:fd:6e:11:da:95:b1:a6:c1:eb:
         8c:b1:f6:b7:fe:e8:85:3f:86:85:79:b0:a9:b6:80:a5:85:5f:
         c4:8d:41:77:7d:0f:63:39:f9:0b:09:19:48:4e:0c:79:6d:01:
         a3:aa:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-ams.rpki-client.org