Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0a425b4-76cb-4e34-9590-76195516d430.cer
File:                     b0a425b4-76cb-4e34-9590-76195516d430.cer (raw, json)
Hash identifier:          ji5VFKxoVdqIHtNjoG1DZrd9/a4+28s1T9aRVgM4cZI=
Subject key identifier:   52:A9:9E:7E:A0:75:35:BB:CE:07:A2:68:91:B5:B7:87:AD:FE:92:5B
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E1031652
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0a425b4-76cb-4e34-9590-76195516d430/b0a425b4-76cb-4e34-9590-76195516d430.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0a425b4-76cb-4e34-9590-76195516d430/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Jun 2020 11:49:35 +0000
Certificate not after:    Sun 23 Jun 2030 11:49:35 +0000
Subordinate resources:    AS: 54359
                          IP: 104.152.120.0/22
                          IP: 192.64.40.0/22
                          IP: 199.96.88.0/21
                          IP: 2606:f700::/32

Validation:               Failed, certificate revoked on Wed 13 Apr 2022 19:13:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e1:03:16:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jun 23 11:49:35 2020 GMT
            Not After : Jun 23 11:49:35 2030 GMT
        Subject: CN=b0a425b4-76cb-4e34-9590-76195516d430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ce:88:a4:7c:bf:b3:c0:7a:7b:f0:b4:ca:c8:
                    0d:a3:be:13:a1:49:5d:6f:fb:54:81:5f:1f:12:d6:
                    c8:e7:cc:7a:be:04:b0:33:bc:89:de:e3:51:87:2a:
                    9d:ae:da:c6:8c:44:29:21:a3:d8:87:4b:12:fe:d7:
                    b4:15:30:29:c0:26:bf:f8:6c:4b:e9:a9:7f:e0:53:
                    3d:41:f2:a7:e7:6f:89:cf:6c:a5:ac:12:02:53:22:
                    43:e8:90:00:a3:65:a8:d1:b9:90:cd:29:3b:00:5b:
                    aa:1e:ac:6c:89:c1:49:8a:14:f6:2b:ca:ed:89:43:
                    d7:6c:7a:2f:d0:f3:ab:55:76:73:ad:6e:28:35:f2:
                    42:ba:e3:85:da:71:d6:b3:94:79:68:56:2a:d4:87:
                    66:44:27:1d:99:e6:e6:ea:84:0e:2a:d0:25:e8:00:
                    c2:02:f1:5b:aa:5a:0f:90:3c:41:bc:af:e1:01:de:
                    eb:cb:38:03:75:6d:0a:a0:1a:da:67:bd:13:9c:fb:
                    10:1a:ea:53:f2:e1:2f:13:bb:1b:11:61:ba:b6:e9:
                    bf:89:b1:5e:13:a1:10:58:b4:d9:ee:dd:e8:70:39:
                    c6:5e:66:ad:40:dc:32:54:24:fa:7f:44:39:86:f5:
                    e7:a3:c3:1b:3b:96:05:95:83:23:14:14:1f:e4:de:
                    7f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A9:9E:7E:A0:75:35:BB:CE:07:A2:68:91:B5:B7:87:AD:FE:92:5B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0a425b4-76cb-4e34-9590-76195516d430/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0a425b4-76cb-4e34-9590-76195516d430/b0a425b4-76cb-4e34-9590-76195516d430.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.120.0/22
                  192.64.40.0/22
                  199.96.88.0/21
                IPv6:
                  2606:f700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54359

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:80:74:cf:b2:e7:f3:4f:d8:8e:0f:99:a3:59:67:5f:fb:7f:
         cf:59:37:ca:4a:c1:1f:d3:3a:d8:7a:37:93:d8:6b:84:79:7b:
         1f:7a:48:1b:10:1c:02:ad:f6:47:e7:10:9d:8b:72:02:85:de:
         14:b5:66:ff:c8:f3:c8:25:8b:f7:28:c6:76:74:a5:04:84:e8:
         ca:1b:4f:44:ae:07:22:d7:ad:bc:20:36:48:8d:f8:bd:b1:33:
         39:e3:a9:a4:35:6e:36:eb:a5:bf:b5:db:0e:63:90:79:8c:d6:
         d8:2e:fb:14:3b:18:9c:18:4a:80:1d:a3:73:fe:56:f6:60:43:
         d5:2b:14:10:89:85:27:dd:69:62:64:71:6c:1a:f2:27:b0:65:
         e8:d5:11:df:7b:d6:18:82:60:1e:bb:92:50:8c:60:a7:81:6e:
         af:32:47:f5:03:13:79:94:d7:bf:89:a4:15:5b:7a:1b:2c:18:
         a5:f1:d1:12:ef:65:4b:f5:2b:b0:62:1f:d1:05:c2:db:16:5e:
         75:20:e7:a0:12:e2:a4:60:ce:02:ab:24:3b:f9:74:ae:16:92:
         21:53:09:e0:ec:0a:b3:92:22:f8:29:cc:74:7a:50:0f:b0:f4:
         99:eb:fc:bc:a0:1a:2f:31:42:c2:80:9d:f1:f9:b7:29:7b:fd:
         42:69:b6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:47 2024 by rpki-client on console-fra.rpki-client.org