Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de1c9310-de24-4e8b-b4de-b5afc999a401.cer
File:                     de1c9310-de24-4e8b-b4de-b5afc999a401.cer (raw, json)
Hash identifier:          sd8Vrs2koQsHC6/ANeMRJttgFp0Ozy27nCPQ1hI0A9E=
Subject key identifier:   A0:8D:8B:61:7A:87:07:0C:23:17:C4:6D:8F:75:A2:4C:94:E8:8B:A7
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328583DE0BA5B3B7E4947AB15519200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de1c9310-de24-4e8b-b4de-b5afc999a401/de1c9310-de24-4e8b-b4de-b5afc999a401.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de1c9310-de24-4e8b-b4de-b5afc999a401/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 May 2022 15:27:08 +0000
Certificate not after:    Sun 21 Apr 2030 17:19:57 +0000
Subordinate resources:    AS: 64252
                          IP: 2607:e280::/32

Validation:               Failed, certificate revoked on Tue 09 May 2023 11:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:e0:ba:5b:3b:7e:49:47:ab:15:51:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 12 15:27:08 2022 GMT
            Not After : Apr 21 17:19:57 2030 GMT
        Subject: CN=de1c9310-de24-4e8b-b4de-b5afc999a401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:2a:1b:5a:98:55:73:4a:fe:a8:be:ca:08:
                    8c:a2:d5:8a:48:b9:8b:e5:ed:d4:7b:de:ef:6f:22:
                    5a:25:2c:86:dc:5c:fb:69:95:c5:d7:3f:4a:6c:df:
                    bd:9c:ea:93:b3:85:20:ae:c5:64:91:d4:a4:0a:69:
                    ac:69:e0:fd:61:4c:22:ca:0d:24:4a:80:58:ed:05:
                    65:42:d8:9d:e8:0b:c7:97:8b:c8:99:f8:78:05:58:
                    30:f3:15:b5:86:15:19:e0:14:1a:0c:07:2f:5a:09:
                    ad:65:78:af:e9:b5:bd:ab:b5:9a:6c:16:04:c5:3c:
                    03:72:9f:6b:cf:b8:38:e2:66:c5:b6:63:ad:bc:ab:
                    3e:54:c4:f4:5a:41:ce:d1:dd:85:42:74:47:5f:22:
                    fc:71:2a:a0:3c:49:b1:65:7d:f2:f0:6c:f5:a1:8a:
                    8d:cb:47:fa:c5:4b:eb:c1:ee:b9:af:c4:23:7e:5e:
                    82:a6:6a:22:69:26:05:8f:e5:4e:ce:c4:6a:00:bb:
                    6f:f5:85:20:aa:24:76:52:dc:b5:bf:b5:b9:fe:a9:
                    0d:24:af:3e:47:e1:00:11:0b:59:48:c0:77:8c:1a:
                    a5:47:bd:ad:48:77:66:9b:37:ae:3b:6c:d9:01:c0:
                    f8:c5:60:dc:18:27:6e:cd:c2:c1:5b:79:8c:ab:16:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8D:8B:61:7A:87:07:0C:23:17:C4:6D:8F:75:A2:4C:94:E8:8B:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de1c9310-de24-4e8b-b4de-b5afc999a401/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de1c9310-de24-4e8b-b4de-b5afc999a401/de1c9310-de24-4e8b-b4de-b5afc999a401.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64252

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:fd:1c:be:2a:a0:23:27:84:af:23:be:ee:52:b1:1d:0c:2e:
         81:eb:8e:cf:1a:8e:48:72:68:ec:7e:27:04:d6:39:cb:b2:04:
         d8:f7:dd:ac:7c:ac:d4:6c:85:34:78:86:a4:87:21:4c:9b:c7:
         8d:a5:d7:26:fc:4f:36:14:54:1a:26:91:c6:51:81:33:68:4b:
         8a:8b:64:d7:90:d6:aa:9d:05:7c:39:c6:2e:73:76:68:70:ef:
         70:5c:46:b1:c8:c2:db:89:82:e6:6c:d2:1d:4e:94:b9:ea:22:
         47:33:7a:be:1f:bf:a5:0a:76:37:8d:6c:f2:7f:4f:7b:98:f3:
         a6:d4:37:85:33:f1:c1:68:6c:0e:c3:1c:15:52:de:86:ec:19:
         79:01:05:3a:db:cd:c9:6a:60:6b:38:77:26:7d:eb:53:34:5f:
         98:79:9b:bf:95:d0:e4:a6:d8:e5:9c:b2:da:73:10:1b:99:4c:
         88:82:ed:23:3a:2b:39:fc:6b:af:cc:6b:64:72:12:f5:0b:b9:
         89:07:43:be:56:bb:07:28:e3:cd:51:91:ce:3c:8d:51:71:f9:
         4d:ed:50:38:d6:3c:15:d8:4e:14:bf:8c:1f:7c:9a:de:e8:1d:
         56:f6:d7:ef:09:f3:e9:84:64:1c:6b:ca:9c:56:73:15:e5:53:
         e0:24:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org