Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd.cer
File:                     c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd.cer (raw, json)
Hash identifier:          XEO4lDgcmuKZACfuIrAqZ9C1vaV+wlErPHGgph1wVGw=
Subject key identifier:   C4:59:A6:8F:10:6E:BB:7F:D6:78:E7:9A:83:0E:85:F9:31:AA:1A:81
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843A60859D0453F6FF2C74D2380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Oct 2023 19:33:13 +0000
Certificate not after:    Thu 22 Jan 2026 14:17:10 +0000
Subordinate resources:    IP: 23.164.72.0/24
                          IP: 2607:7640::/32

Validation:               Failed, certificate revoked on Wed 10 Jan 2024 16:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a6:08:59:d0:45:3f:6f:f2:c7:4d:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 23 19:33:13 2023 GMT
            Not After : Jan 22 14:17:10 2026 GMT
        Subject: CN=c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:52:e9:96:e9:96:1d:bb:2b:e1:19:66:86:
                    08:38:4f:96:53:7e:4f:1a:23:bb:0e:f6:6e:96:40:
                    c8:b0:8e:aa:94:21:24:db:06:86:ee:9b:60:2d:11:
                    2b:6a:20:59:d2:c6:8b:b3:56:57:6d:d3:b6:dd:c2:
                    e9:96:41:fe:4d:32:3c:b7:a7:4e:cd:7b:bb:1a:22:
                    d2:51:ee:b3:2c:16:67:c3:47:ae:0b:86:0a:9e:5e:
                    b5:30:86:66:d2:38:77:1f:a0:13:9b:b9:ec:c5:c3:
                    80:62:52:d1:2b:ec:1c:2e:8c:8d:c0:a5:e4:ff:f8:
                    81:61:64:48:f5:f8:24:8f:c9:13:71:81:a5:06:fb:
                    a4:4c:61:10:68:d0:eb:24:11:74:3b:3f:e3:a8:ad:
                    c5:66:f2:e3:e7:18:ad:14:91:c7:7b:d5:3d:4a:87:
                    d9:98:99:a9:b0:fb:c8:c5:79:bf:05:b9:b5:0e:8a:
                    f5:d2:11:fb:7e:cc:ab:d9:7e:84:b8:ba:34:eb:99:
                    c9:54:59:b0:f4:82:a4:54:86:61:83:6e:01:c1:1d:
                    53:2b:f5:ac:28:bb:d1:c0:ff:4b:46:d0:fe:f6:43:
                    e5:d9:ba:1e:3c:09:ac:5d:2b:2c:42:d3:17:c0:08:
                    a0:98:35:04:0d:b6:ad:9f:27:ca:10:1f:01:25:81:
                    ad:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:59:A6:8F:10:6E:BB:7F:D6:78:E7:9A:83:0E:85:F9:31:AA:1A:81
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.72.0/24
                IPv6:
                  2607:7640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:68:5c:0f:51:37:cf:6b:9c:b7:15:81:4f:22:3c:88:11:3f:
         e5:71:0b:43:8e:b5:2a:56:b2:a6:87:23:1c:42:75:c9:3d:40:
         b1:6f:54:27:20:ee:50:e9:ed:68:c3:7f:80:fd:4a:8e:81:4c:
         1b:45:81:28:27:af:22:71:2e:54:69:4b:27:86:a9:b4:5f:39:
         87:51:df:15:86:06:6b:25:11:0e:e6:cc:7f:28:a7:62:aa:fa:
         99:5b:fe:2b:29:4f:23:58:fc:ca:59:c6:b9:d5:0b:4c:f5:b2:
         ed:c6:5c:14:e7:cd:08:00:b0:c1:e8:a5:ef:54:da:f3:fa:2a:
         62:e4:3a:de:91:37:af:26:f9:1f:cd:2f:0f:75:04:ba:62:21:
         3e:0f:65:d8:35:d2:50:d6:b0:10:72:43:20:2e:cb:60:ef:5e:
         3b:a7:33:57:b7:f9:96:87:e4:9e:c9:de:f3:28:bf:28:49:5b:
         7f:65:2c:33:82:53:b1:c4:a4:6e:28:62:e7:66:3e:d9:2c:51:
         4d:4f:fc:43:e0:0b:23:9b:ad:17:ea:57:73:39:e5:7b:1e:b8:
         9c:7e:b6:fd:82:ca:f3:3e:9c:7e:c9:34:1e:2d:57:81:2b:06:
         b5:ed:05:6b:35:b5:90:40:92:ee:72:10:80:61:a0:82:93:e8:
         0b:2c:e1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:09 2024 by rpki-client on console.sobornost.net