Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b4415611c8f002e34925fb621ecf702bd114726d1.cer
File:                     724139ef2b4415611c8f002e34925fb621ecf702bd114726d1.cer (raw, json)
Hash identifier:          H9VQUL/EMQQiA7cc9tB9zi4EzMkuaZkQU6MAP9C+dAw=
Subject key identifier:   D9:D9:6A:61:9F:9E:E6:CB:9A:CA:C5:38:C7:5D:CD:05:08:3A:5E:46
Authority key identifier: FC:BB:FA:44:DE:5C:A7:DA:73:E8:8F:76:11:9E:E5:DB:26:A6:B1:F5
Certificate issuer:       /CN=bc942f68-cb33-4a05-a727-3f93e610393e
Certificate serial:       010D0C9F4328584264595AFD2D43C023CF8FCAA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D9D96A619F9EE6CB9ACAC538C75DCD05083A5E46.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 30 Jun 2023 14:06:08 +0000
Certificate not after:    Thu 02 Oct 2025 14:06:08 +0000
Subordinate resources:    IP: 23.148.232.0/24
                          IP: 2602:fa9b::/36

Validation:               Failed, certificate revoked on Fri 19 Jan 2024 12:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:64:59:5a:fd:2d:43:c0:23:cf:8f:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc942f68-cb33-4a05-a727-3f93e610393e
        Validity
            Not Before: Jun 30 14:06:08 2023 GMT
            Not After : Oct  2 14:06:08 2025 GMT
        Subject: CN=724139ef2b4415611c8f002e34925fb621ecf702bd114726d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:48:e0:bc:94:48:20:d8:1f:2a:70:8c:04:4e:
                    10:3b:c6:2a:60:32:f1:53:01:d4:7b:fd:97:1c:7d:
                    23:59:d8:a5:f8:82:58:36:76:93:d8:0a:b7:98:e6:
                    58:6c:b7:03:e9:1a:bc:d5:c1:9d:9c:ac:6f:57:2d:
                    a4:0c:a7:bc:cb:b9:12:16:bc:49:b1:4d:b5:1b:c6:
                    13:79:8a:28:c2:ae:5b:69:63:95:42:e7:38:9c:7d:
                    7b:58:95:c9:39:c1:fc:9d:16:f3:52:8d:58:5d:e0:
                    47:dc:a5:c0:9f:e3:d1:58:8f:8d:2c:a7:15:d4:78:
                    19:5e:09:ef:e5:52:1f:ba:67:b5:54:7c:2b:fc:5b:
                    8e:2c:df:a6:be:52:7f:f9:95:c3:ad:88:37:8d:bc:
                    82:bd:10:e1:d2:7f:bf:93:ca:46:7a:3a:8f:01:82:
                    e8:1c:9e:54:30:50:b2:92:25:4e:d6:c2:34:ab:b4:
                    e4:13:d8:0d:49:a2:47:26:ef:4b:f2:92:be:2e:ac:
                    c8:53:a6:89:c1:9c:d8:a6:d5:b1:da:24:4e:03:61:
                    29:bb:65:9c:b3:8a:f0:09:74:1c:bf:8b:cc:b4:58:
                    3e:4d:1f:5a:5c:10:09:f0:68:10:7e:40:67:3a:6d:
                    b0:fc:85:8a:87:99:db:5f:6b:5c:32:6f:b8:1c:f7:
                    1e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D9:6A:61:9F:9E:E6:CB:9A:CA:C5:38:C7:5D:CD:05:08:3A:5E:46
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D9D96A619F9EE6CB9ACAC538C75DCD05083A5E46.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:BB:FA:44:DE:5C:A7:DA:73:E8:8F:76:11:9E:E5:DB:26:A6:B1:F5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.232.0/24
                IPv6:
                  2602:fa9b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:1b:e6:3f:41:fd:4d:ea:61:90:d8:a0:88:71:e3:07:96:05:
         96:0a:84:14:c5:72:9a:e0:73:d5:7d:de:f9:63:39:e8:65:58:
         6c:07:1b:06:4c:1c:5e:c2:22:b7:3e:81:f4:e0:bc:bc:c7:4b:
         28:7f:ec:ef:45:20:4e:25:c1:22:6c:e9:33:40:0d:16:5b:a5:
         e6:29:7f:34:e1:a4:a5:2e:45:4c:67:70:f7:ad:da:08:14:20:
         e1:d1:73:88:ca:ae:a4:5d:dd:63:82:47:c5:b9:d2:32:57:85:
         44:74:a7:b1:fa:51:a8:f6:b5:7b:5b:ae:61:c6:c4:ca:cc:df:
         80:8d:d0:5d:c7:af:f5:1c:0c:5c:98:64:58:8d:b8:6c:f0:d1:
         14:57:55:96:75:45:1b:67:dc:f6:b4:ef:49:7e:ea:b6:f9:0b:
         7a:90:32:2e:70:98:14:cb:6f:c7:82:27:f9:c8:a9:d2:0e:91:
         77:f6:02:88:81:8a:62:68:c1:22:9e:97:ce:b3:cd:b9:be:2e:
         45:02:ca:d8:50:94:10:c6:7d:87:d7:fd:64:74:29:51:71:b6:
         59:1c:de:9b:38:60:e2:d6:24:b7:4e:70:b2:cd:15:f1:8a:69:
         0e:55:4e:55:dd:9f:5c:ac:21:56:8d:0b:b9:64:22:cd:09:77:
         82:c5:37:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:09 2024 by rpki-client on console.sobornost.net