Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b.cer
File:                     8eaae964-4641-4ed7-82e7-85ca167b427b.cer (raw, json)
Hash identifier:          Ox9l2n5lrtnlHzqnpin98gVRJfXLyOJRX2xsZAJGCU8=
Subject key identifier:   FF:7A:03:68:19:DF:9E:EB:E2:C1:D9:9A:9B:C4:2E:7B:77:F3:5A:DB
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858433C8D4830C4FDBBD63542F900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/8eaae964-4641-4ed7-82e7-85ca167b427b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 16 Sep 2023 00:45:22 +0000
Certificate not after:    Fri 19 Dec 2025 01:45:22 +0000
Subordinate resources:    AS: 53717
                          IP: 199.192.12.0/22
                          IP: 2606:f00::/32

Validation:               Failed, certificate revoked on Wed 18 Oct 2023 16:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:3c:8d:48:30:c4:fd:bb:d6:35:42:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Sep 16 00:45:22 2023 GMT
            Not After : Dec 19 01:45:22 2025 GMT
        Subject: CN=8eaae964-4641-4ed7-82e7-85ca167b427b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:a9:2d:64:ae:c7:8b:64:51:0e:4a:da:e4:
                    92:00:8e:79:d7:93:5a:c5:bc:95:8e:d3:94:37:38:
                    a2:03:6a:49:20:69:07:95:12:44:8e:f9:24:0f:33:
                    82:31:de:ac:da:fd:17:ff:d5:8b:33:46:8a:78:ed:
                    03:e2:6f:7a:58:01:5c:6e:75:e6:6c:f7:76:65:90:
                    59:64:1c:c7:49:c0:a5:03:3a:83:6e:c3:cd:98:d7:
                    98:44:7c:46:05:1b:89:bc:23:4f:65:99:38:d6:9f:
                    97:c9:9e:b7:59:c7:60:3a:3d:60:00:d6:ec:9d:47:
                    8d:db:5d:85:92:de:84:8c:bf:0a:de:5c:34:14:00:
                    64:01:90:e8:fa:d8:9a:57:ba:2b:3b:57:f0:01:e0:
                    68:40:a4:70:5b:59:c8:5c:18:e5:dc:e1:d4:d5:bc:
                    37:31:7f:78:2a:30:87:25:9f:d2:8b:bc:83:ec:63:
                    eb:08:35:b6:46:4e:0e:43:12:b2:d1:95:6a:2b:90:
                    8d:99:8a:5b:65:49:fb:f0:0b:9e:a7:52:18:11:44:
                    ba:c8:d8:98:85:da:1a:ed:be:d3:e3:f5:ba:db:a7:
                    27:bb:44:83:35:16:9a:e4:ce:ec:48:c1:b0:f0:52:
                    c5:56:a5:69:d9:a1:ff:7a:11:8c:3a:dd:24:b1:c0:
                    78:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7A:03:68:19:DF:9E:EB:E2:C1:D9:9A:9B:C4:2E:7B:77:F3:5A:DB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/8eaae964-4641-4ed7-82e7-85ca167b427b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.12.0/22
                IPv6:
                  2606:f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53717

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:24:5b:c8:a8:9b:e7:1f:9f:e9:7e:40:df:7d:e7:e9:67:bb:
         24:34:e6:25:c8:4d:88:cf:14:28:5e:79:f0:9e:ba:f4:e0:c3:
         7f:7d:a6:08:88:c8:96:aa:7b:fc:ff:6b:58:a9:c0:36:a9:38:
         44:16:14:0b:ab:e6:58:01:fc:09:db:47:09:07:69:a7:f2:1c:
         61:6e:6f:42:b3:65:53:c5:24:fc:27:66:ef:cf:4e:ba:2d:44:
         f5:a3:fe:c6:ba:5a:0b:99:4f:5c:68:04:d6:c4:fa:bc:88:78:
         5d:19:03:7b:4d:b5:55:1e:75:14:9c:85:23:1f:d4:70:7a:4d:
         9c:69:5c:c3:7e:a2:6d:91:7f:76:ee:03:d2:13:23:62:c4:b4:
         01:cd:f3:97:6b:8f:ba:03:af:16:52:03:5e:cc:45:92:27:22:
         7c:c8:19:69:ac:3b:03:10:0b:65:87:fd:2a:7c:01:9c:3c:fb:
         b3:3f:f3:c2:94:16:be:d7:af:d6:b5:fe:81:8d:0f:dc:8e:3f:
         f0:e7:1d:a8:e0:3d:6b:e8:85:9b:18:59:28:cd:99:93:4a:a1:
         f6:75:a4:93:d8:f5:77:1d:4c:0e:2d:69:4e:2f:cb:6f:23:0c:
         90:e7:63:f8:da:ed:53:ce:c3:af:26:32:eb:f9:cc:94:76:29:
         32:38:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org