Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b389a1138a69ea2455eed40f7bb73ec1d80a8c3e.cer
File:                     6506a66ed0b389a1138a69ea2455eed40f7bb73ec1d80a8c3e.cer (raw, json)
Hash identifier:          S2wnoTG67YP1/Q5lLJi1YkSb9vkCZ4N75WRPqFLFlM8=
Subject key identifier:   4A:B3:4E:9C:C2:A1:82:B5:3E:8A:86:3E:E5:5D:36:1B:F7:82:12:96
Authority key identifier: 02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50
Certificate issuer:       /CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37
Certificate serial:       010D0C9F432858417BD9826FA0D8AA017EB11D20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
Manifest:                 rsync://rpki.august.tw/repo/HYSP/0/4AB34E9CC2A182B53E8A863EE55D361BF7821296.mft
caRepository:             rsync://rpki.august.tw/repo/HYSP/0
Notify URL:               https://rpki.august.tw/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 07:21:00 +0000
Certificate not after:    Fri 11 Jul 2025 07:21:00 +0000
Subordinate resources:    AS: 54625
                          IP: 23.149.232.0/24
                          IP: 149.112.26.0/24
                          IP: 165.140.142.0/24
                          IP: 2602:fc23::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7b:d9:82:6f:a0:d8:aa:01:7e:b1:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37
        Validity
            Not Before: Apr  8 07:21:00 2023 GMT
            Not After : Jul 11 07:21:00 2025 GMT
        Subject: CN=6506a66ed0b389a1138a69ea2455eed40f7bb73ec1d80a8c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:81:cb:d3:fe:9d:6c:2f:58:1c:6f:f6:7e:dc:
                    0e:f3:3f:b4:70:e8:d5:ec:9f:11:52:52:bd:4f:77:
                    01:e6:c1:51:bf:38:78:76:b4:b4:d0:7f:20:de:48:
                    93:b9:62:b7:ae:c4:6d:ac:fc:b8:32:76:8c:a0:1b:
                    80:3f:eb:b0:9b:29:1a:d1:ef:32:60:5c:b1:4b:c2:
                    b8:8b:6d:e4:47:01:6a:2d:36:8c:8a:3e:ef:a8:3d:
                    b3:de:b7:c4:81:fa:89:f0:c0:2b:2f:72:e6:52:2b:
                    c6:95:54:37:6b:e4:70:b2:f7:ee:25:98:29:48:3c:
                    3c:58:ed:54:e2:bb:18:c5:5a:c1:2f:f9:46:7d:0b:
                    27:e4:23:43:4b:1d:01:54:eb:f7:59:ff:09:7b:e9:
                    2c:de:a4:3c:a8:a4:29:15:b0:77:01:01:8b:4e:dc:
                    c3:b2:5e:d7:c0:e8:b3:1b:4b:d5:12:45:95:74:64:
                    db:1e:0d:78:5f:51:87:2c:d7:ce:34:e0:8c:c1:e9:
                    5b:f6:b5:ef:8d:6c:3b:ca:8a:96:8e:c7:11:f2:2b:
                    96:ce:d4:75:26:b6:9f:b4:4c:73:d5:98:83:cb:7c:
                    9f:d1:29:ea:92:ff:49:19:52:ed:c9:f6:18:67:18:
                    4d:b5:63:d8:b7:b8:ad:02:ef:b0:4d:9d:80:9b:58:
                    6a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B3:4E:9C:C2:A1:82:B5:3E:8A:86:3E:E5:5D:36:1B:F7:82:12:96
            Subject Information Access:
                CA Repository - URI:rsync://rpki.august.tw/repo/HYSP/0
                RPKI Manifest - URI:rsync://rpki.august.tw/repo/HYSP/0/4AB34E9CC2A182B53E8A863EE55D361BF7821296.mft
                RPKI Notify - URI:https://rpki.august.tw/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl

            X509v3 Authority Key Identifier:
                keyid:02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.232.0/24
                  149.112.26.0/24
                  165.140.142.0/24
                IPv6:
                  2602:fc23::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54625

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e5:01:94:50:f9:dd:41:13:26:d5:bf:a7:35:dc:c5:6a:4c:
         89:ea:1d:32:df:d8:96:c5:48:51:20:fd:14:59:ce:81:79:62:
         1f:98:79:52:6a:bc:35:6f:85:e1:fd:51:9a:96:a5:d8:d7:10:
         1e:5e:d5:81:0e:29:90:03:8d:75:07:87:f2:b2:3b:cb:7a:29:
         13:d2:43:7a:48:63:a6:e3:0f:9a:52:8a:1d:7a:42:e5:4f:f1:
         78:f3:09:60:c3:4c:c8:2d:38:98:7c:e6:13:7a:d5:d9:51:b2:
         a7:ec:f7:c3:0f:c8:b6:2b:f5:4d:cb:49:aa:72:a3:31:56:46:
         6a:64:bb:40:88:5b:56:f6:c0:db:e5:87:ba:c6:b4:59:e0:c9:
         5f:a6:d5:59:ef:d6:40:62:38:87:dd:b6:0a:d6:2a:03:f6:9c:
         68:59:73:51:5c:da:b2:e6:97:68:23:91:6a:83:f1:0f:44:6d:
         9d:de:7f:5f:c5:d6:a2:36:a4:42:f8:be:01:e4:62:6d:b3:94:
         8b:7a:df:73:19:40:73:6b:a9:97:f3:ba:29:5f:93:9a:14:26:
         11:9d:43:ff:a2:48:bc:df:18:0a:00:5a:b5:4a:15:09:66:01:
         1f:80:91:d8:76:73:a6:39:4e:cf:bd:5c:b9:31:a4:af:57:8f:
         68:79:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:39:54 2023 by rpki-client on console.sobornost.net