Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6847ce42-ffcb-47b8-8303-585be67ce116.cer
File:                     6847ce42-ffcb-47b8-8303-585be67ce116.cer (raw, json)
Hash identifier:          JuwD8Dn1MZlcVWYfKRwuM+DEdmylWOFXCHVQded+MoM=
Subject key identifier:   5C:34:10:A0:82:B7:44:C6:F6:EA:99:B6:4D:37:ED:39:CA:7C:FA:E6
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584436CBB348A0F3005A35BB8640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6847ce42-ffcb-47b8-8303-585be67ce116/6847ce42-ffcb-47b8-8303-585be67ce116.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6847ce42-ffcb-47b8-8303-585be67ce116/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Dec 2023 16:03:13 +0000
Certificate not after:    Wed 18 Mar 2026 14:59:24 +0000
Subordinate resources:    IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:36:cb:b3:48:a0:f3:00:5a:35:bb:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec 14 16:03:13 2023 GMT
            Not After : Mar 18 14:59:24 2026 GMT
        Subject: CN=6847ce42-ffcb-47b8-8303-585be67ce116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:58:ff:81:5c:b2:00:ff:3a:63:65:f6:29:07:
                    0e:f5:21:a5:b8:f0:81:0c:f6:a9:ea:b6:5b:dd:54:
                    63:0f:6f:03:e0:ce:cf:29:c5:e0:6d:a4:88:48:e5:
                    03:ea:f1:c3:a0:ce:e7:e9:d7:b5:e0:bb:0a:23:24:
                    20:4f:9a:94:57:eb:0e:20:e4:4f:b6:2d:10:07:14:
                    b3:c6:19:46:16:28:4e:2e:9e:ac:02:d3:29:7b:e2:
                    a6:db:a0:8e:b5:96:2c:fc:b2:2e:31:a0:ed:b7:11:
                    5b:86:06:14:ce:80:6f:2a:71:99:81:0f:f4:1f:ea:
                    c1:0d:ed:70:e6:0c:dc:f9:32:4d:78:0d:0b:dc:f3:
                    4c:53:50:e5:41:c0:31:a1:58:57:23:d7:e5:15:be:
                    60:64:7e:50:63:3d:bb:53:1d:b1:18:e2:2d:fa:b7:
                    b3:d3:67:fc:10:b6:8c:7f:04:b4:03:9b:fc:28:10:
                    00:29:22:53:15:40:04:71:38:e8:3b:17:7c:f5:c1:
                    44:2c:b1:63:46:03:71:a6:72:2c:5a:1a:5d:fc:97:
                    95:84:45:c2:ac:91:fe:d4:13:e6:79:0f:ae:f2:71:
                    9f:be:a8:1a:fe:60:d1:6c:07:0a:48:61:ee:c4:e0:
                    b5:c8:a7:01:1d:69:2c:44:85:da:15:40:3a:0b:e1:
                    9a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:34:10:A0:82:B7:44:C6:F6:EA:99:B6:4D:37:ED:39:CA:7C:FA:E6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6847ce42-ffcb-47b8-8303-585be67ce116/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6847ce42-ffcb-47b8-8303-585be67ce116/6847ce42-ffcb-47b8-8303-585be67ce116.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:12:95:d0:5b:dc:a8:0f:23:44:82:c7:58:be:10:03:fe:d3:
         04:85:b5:1c:00:e3:01:bb:4c:b9:24:65:18:dc:64:e1:ac:85:
         91:13:73:1d:c9:4f:ed:7c:96:06:f2:33:74:40:a4:92:ce:f9:
         6f:ff:b3:ad:e2:ce:d6:55:af:c4:9f:b8:87:2d:44:4c:3b:02:
         12:2d:31:6e:73:f6:42:a2:b2:62:0e:cb:2f:05:06:eb:62:41:
         2b:84:cb:76:6d:7c:58:e9:22:a9:3d:eb:f3:af:a9:50:41:a4:
         e0:ec:95:23:a0:0e:e4:2b:f2:4d:2b:4b:a4:d9:8d:af:64:59:
         b6:d8:55:6d:e0:03:04:05:47:88:5e:af:50:4e:ce:6f:ac:02:
         62:64:49:d8:94:d0:70:de:de:bf:30:e2:ff:53:4a:11:a8:49:
         37:59:dc:19:f1:cd:37:ae:c9:1b:75:97:db:3b:f9:71:da:d8:
         e4:11:5c:81:ff:f6:6a:13:50:ca:3b:fb:21:46:8b:c1:91:ca:
         34:25:b7:05:11:1d:6c:e7:95:e1:83:55:29:aa:a9:e1:45:90:
         56:6c:df:78:40:69:2b:e2:42:30:1a:47:cb:40:1a:f4:c0:6e:
         8b:8c:5f:54:10:46:55:1b:a3:60:9e:17:48:96:80:f0:ba:3b:
         b3:dd:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:00 2023 by rpki-client on console.sobornost.net