Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1e7abe9-45b8-4439-9659-7af5c83bc1cc.cer
File:                     d1e7abe9-45b8-4439-9659-7af5c83bc1cc.cer (raw, json)
Hash identifier:          1r8GgmEoeBTOZaMrIMk+nsNjFcy+fLoNwKD2BvYY1v0=
Subject key identifier:   B4:FF:D2:34:D3:A3:FD:4D:07:17:6D:82:B4:A8:61:0C:C6:04:4D:09
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328583B7DDDC5A842E3E47261491C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1e7abe9-45b8-4439-9659-7af5c83bc1cc/d1e7abe9-45b8-4439-9659-7af5c83bc1cc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1e7abe9-45b8-4439-9659-7af5c83bc1cc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 03 Jan 2020 20:05:46 +0000
Certificate not after:    Thu 03 Jan 2030 20:05:46 +0000
Subordinate resources:    AS: 26695
                          IP: 23.138.208.0/24
                          IP: 142.202.252.0/22
                          IP: 165.140.196.0/22
                          IP: 2605:8bc0::/32

Validation:               Failed, certificate revoked on Tue 06 Dec 2022 12:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:7d:dd:c5:a8:42:e3:e4:72:61:49:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jan  3 20:05:46 2020 GMT
            Not After : Jan  3 20:05:46 2030 GMT
        Subject: CN=d1e7abe9-45b8-4439-9659-7af5c83bc1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:4a:7c:9b:12:25:ed:9c:1a:ed:6c:ed:f0:
                    aa:12:8f:16:65:75:2f:13:c1:80:b2:f6:22:00:8b:
                    3c:7f:26:7e:e5:06:6c:bf:22:ef:b8:ce:43:e5:34:
                    3c:da:88:db:45:ad:f6:4a:bf:2a:8f:a6:26:8b:d9:
                    f6:80:34:1c:69:f8:fd:de:71:73:ed:77:74:7d:ef:
                    4c:25:4c:c0:d1:ad:29:03:65:c8:35:6c:3f:a2:10:
                    61:ce:06:e7:b8:19:57:fa:e4:93:ec:b7:6a:2f:0c:
                    96:4a:bb:a0:e1:f3:05:53:40:fc:84:91:69:e1:7a:
                    ea:0d:3d:e9:db:0f:b6:26:f9:ee:5f:8e:44:30:24:
                    c0:6f:d5:0c:8c:fe:42:2d:78:6b:fe:1d:2b:18:da:
                    77:e5:72:0b:c5:31:5c:ff:2a:aa:d4:b2:d2:fc:d3:
                    72:bb:f4:85:3f:53:a4:81:3d:80:04:b3:6d:e1:c9:
                    49:ca:90:37:ed:b9:5c:73:87:68:f0:7d:47:3e:40:
                    c2:72:89:32:ae:8f:21:da:47:fd:b0:5a:4b:b6:ae:
                    0f:c1:2f:31:20:17:71:5d:12:85:e1:3e:3c:65:63:
                    95:9c:f1:ec:33:66:51:03:eb:3b:27:a9:bc:bc:9a:
                    4f:7e:95:a9:ac:95:f5:78:4f:ea:75:7a:d9:c0:84:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FF:D2:34:D3:A3:FD:4D:07:17:6D:82:B4:A8:61:0C:C6:04:4D:09
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1e7abe9-45b8-4439-9659-7af5c83bc1cc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1e7abe9-45b8-4439-9659-7af5c83bc1cc/d1e7abe9-45b8-4439-9659-7af5c83bc1cc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.208.0/24
                  142.202.252.0/22
                  165.140.196.0/22
                IPv6:
                  2605:8bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26695

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ba:f6:8d:7e:06:7c:5f:c0:03:9f:0e:7d:63:e1:de:dc:9e:
         ae:e3:01:a6:6a:0f:b7:28:91:fe:f5:45:ea:7b:a4:19:c8:d5:
         b0:e7:a6:15:04:8b:2a:c1:e6:45:2b:2c:5d:b3:91:0f:5b:b2:
         64:d4:4d:f9:75:04:02:29:6b:29:b1:71:3f:d6:5b:ef:26:2b:
         27:01:dc:88:a0:26:00:90:c5:3b:f7:52:ed:1b:4b:b8:a0:b8:
         36:96:c7:2d:77:f9:a4:7a:ae:a1:b0:21:5a:fd:6e:2e:9b:34:
         a5:aa:80:1a:fa:20:a6:7e:0a:2d:89:4c:3b:b0:e1:bd:cf:8f:
         b4:9a:f6:b3:ba:6a:97:62:72:4f:10:af:a1:f2:40:4a:c6:6e:
         6e:fe:80:45:e3:3e:39:31:db:79:12:68:e7:c6:b7:08:df:8f:
         00:fc:1c:41:ce:c0:23:3d:9c:fc:43:b2:0a:92:57:cd:35:95:
         64:5f:88:9c:3a:63:52:e4:d5:78:a7:5b:de:ee:e7:e8:be:90:
         7b:d3:21:3b:e3:30:92:14:c0:01:83:7d:2a:69:3e:4f:d2:e9:
         81:0c:76:4c:b4:5e:0c:d6:7a:38:34:e8:f1:ac:38:fe:ca:81:
         3b:9d:19:af:96:ad:16:08:61:c4:c7:25:e5:a2:cb:5f:bc:bc:
         cc:c8:0e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org