Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
File:                     6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer (raw, json)
Hash identifier:          bB4ae081mzphqG9IQ9Mb8zeqGMN//tkSNrEqUlIA6/I=
Subject key identifier:   E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72
Authority key identifier: 02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50
Certificate issuer:       /CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37
Certificate serial:       010D0C9F43285848DEAC1974703028095063BD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
Manifest:                 rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.mft
caRepository:             rsync://oto.wakuwaku.ne.jp/pki/ha/5/
Notify URL:               https://oto.wakuwaku.ne.jp/pki/oshirase.xml
Certificate not before:   Thu 13 Feb 2025 14:23:06 +0000
Certificate not after:    Wed 19 May 2027 13:23:06 +0000
Subordinate resources:    AS: 51818
                          AS: 54625
                          AS: 62853
                          IP: 23.133.8.0/24
                          IP: 23.149.232.0/24
                          IP: 149.112.26.0/24
                          IP: 165.140.142.0/24
                          IP: 216.146.28.0/22
                          IP: 2001:503:ff44::/48
                          IP: 2001:504:130::/48
                          IP: 2001:506:33::/48
                          IP: 2602:815:7000::/44
                          IP: 2602:fbf6::/36
                          IP: 2602:fc23::/36
Validation:               Failed, certificate revoked on Wed 26 Feb 2025 16:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:ac:19:74:70:30:28:09:50:63:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37
        Validity
            Not Before: Feb 13 14:23:06 2025 GMT
            Not After : May 19 13:23:06 2027 GMT
        Subject: CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:6e:5d:f9:6f:47:86:32:72:22:5e:86:55:
                    c9:4b:92:99:cc:20:34:fb:18:47:4d:92:c4:39:06:
                    8d:1b:a4:c4:f9:bf:c5:6c:7b:ea:39:f9:fd:df:36:
                    ff:3e:aa:79:c1:82:e7:89:e0:02:d7:a2:41:3a:1a:
                    b4:79:5f:2a:ee:e5:0f:ff:bf:40:a3:62:b2:ac:47:
                    ce:d2:1f:39:2e:b5:40:cb:7e:22:d8:b2:33:63:6b:
                    6d:65:9c:ca:b5:10:f6:ea:89:ef:94:37:f4:1e:b0:
                    65:17:be:f3:6b:07:89:9b:3e:c1:f8:8c:dd:4c:b8:
                    f7:6b:0e:82:f6:04:75:18:9e:e6:19:88:56:0e:8c:
                    69:4e:4c:51:ea:fe:63:de:fa:1d:9c:6a:69:86:be:
                    ef:3f:ef:fc:8e:b6:a8:fd:22:ef:58:2a:d9:5a:dd:
                    d2:76:eb:50:39:18:dd:b5:b6:63:e6:13:45:a8:2f:
                    73:a8:d5:bb:27:46:d5:42:30:b9:74:a3:69:80:95:
                    8e:85:e9:fe:7d:cf:77:f5:d0:10:e3:96:10:da:25:
                    72:5b:c9:78:4c:d4:94:da:f3:e1:24:f0:14:1b:66:
                    53:9e:aa:75:f9:6b:d7:d6:21:0a:aa:6f:c1:19:6f:
                    4a:6a:56:ce:17:b3:d1:6b:23:cf:74:51:e8:af:83:
                    51:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72
            Subject Information Access:
                CA Repository - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/
                RPKI Manifest - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.mft
                RPKI Notify - URI:https://oto.wakuwaku.ne.jp/pki/oshirase.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl

            X509v3 Authority Key Identifier:
                keyid:02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.8.0/24
                  23.149.232.0/24
                  149.112.26.0/24
                  165.140.142.0/24
                  216.146.28.0/22
                IPv6:
                  2001:503:ff44::/48
                  2001:504:130::/48
                  2001:506:33::/48
                  2602:815:7000::/44
                  2602:fbf6::/36
                  2602:fc23::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51818
                  54625
                  62853

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:23:51:1c:d5:c8:07:87:9d:23:93:4c:0a:6b:51:3d:4b:64:
         87:e3:38:3c:71:56:2f:f7:28:68:f8:8c:e9:b1:42:0e:03:e4:
         6e:f6:d1:29:e4:2f:54:51:3b:d0:3a:5c:22:18:ae:76:80:af:
         95:3b:8b:20:f6:21:50:14:f6:05:c7:1f:be:92:85:55:30:28:
         59:7a:70:39:54:f0:f2:94:1c:6d:61:98:54:44:3a:ad:8e:e1:
         0a:f5:e5:17:15:c4:5b:60:52:f5:fd:d5:2f:87:b6:54:fb:67:
         fe:68:13:2b:4c:3f:6c:d3:3b:58:35:19:1e:db:8f:50:f1:88:
         43:0b:9b:4d:14:1c:5d:08:c8:bf:92:5e:2d:a3:53:fa:76:c6:
         de:f4:f7:96:5e:f3:da:11:35:01:2e:bd:aa:9a:d0:59:1d:f6:
         a7:05:21:c3:96:71:4c:a5:f7:eb:72:dd:ce:64:4d:69:03:d0:
         f7:3f:06:1a:76:17:2a:69:14:d0:3f:77:ea:aa:14:4b:ce:6d:
         d0:b3:3f:39:c2:2a:c0:bb:74:1f:90:62:c5:05:d4:83:7d:28:
         12:9b:0d:49:03:fd:2f:5c:fb:fa:a2:63:85:79:64:e6:54:09:
         35:4b:6a:34:a8:fb:02:a6:88:da:44:28:98:fb:7b:24:56:a6:
         6f:01:e9:e9
-----BEGIN CERTIFICATE-----
MIIG0DCCBbigAwIBAgIUAQ0Mn0MoWEjerBl0cDAoCVBjvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRkNjYz
ZjM3MB4XDTI1MDIxMzE0MjMwNloXDTI3MDUxOTEzMjMwNlowPTE7MDkGA1UEAxMy
NjUwNmE2NmVkMDkzNDdlNGMzZTcxZGRjODIxMmFkYTNjOGEzYzZkOTNhZDMzNmFm
ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD525d+W9HhjJyIl6G
VclLkpnMIDT7GEdNksQ5Bo0bpMT5v8Vse+o5+f3fNv8+qnnBgueJ4ALXokE6GrR5
Xyru5Q//v0CjYrKsR87SHzkutUDLfiLYsjNja21lnMq1EPbqie+UN/QesGUXvvNr
B4mbPsH4jN1MuPdrDoL2BHUYnuYZiFYOjGlOTFHq/mPe+h2cammGvu8/7/yOtqj9
Iu9YKtla3dJ261A5GN21tmPmE0WoL3Oo1bsnRtVCMLl0o2mAlY6F6f59z3f10BDj
lhDaJXJbyXhM1JTa8+Ek8BQbZlOeqnX5a9fWIQqqb8EZb0pqVs4Xs9FrI890Ueiv
g1FzAgMBAAGjggPUMIID0DAdBgNVHQ4EFgQU41PXbKIayX1nvyyRg3xPF4kkQnIw
gdkGCCsGAQUFBwELBIHMMIHJMDAGCCsGAQUFBzAFhiRyc3luYzovL290by53YWt1
d2FrdS5uZS5qcC9wa2kvaGEvNS8wXAYIKwYBBQUHMAqGUHJzeW5jOi8vb3RvLndh
a3V3YWt1Lm5lLmpwL3BraS9oYS81L0UzNTNENzZDQTIxQUM5N0Q2N0JGMkM5MTgz
N0M0RjE3ODkyNDQyNzIubWZ0MDcGCCsGAQUFBzANhitodHRwczovL290by53YWt1
d2FrdS5uZS5qcC9wa2kvb3NoaXJhc2UueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwG
A1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv
c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx
ZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Yx
YWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2M2YzNy9mMWFiOGQ0NS1hMWFl
LTQwOGEtOWU0NS1iMDRmZGQ2NjNmMzcuY3JsMB8GA1UdIwQYMBaAFALoW6tHvtpo
atRAVZSEJlneb6tQMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAw
ga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkv
YXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk
My81MjFlYjMzZi05NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjFhYjhkNDUt
YTFhZS00MDhhLTllNDUtYjA0ZmRkNjYzZjM3LmNlcjBzBggrBgEFBQcBBwEB/wRk
MGIwJAQCAAEwHgMEABeFCAMEABeV6AMEAJVwGgMEAKWMjgMEAtiSHDA6BAIAAjA0
AwcAIAEFA/9EAwcAIAEFBAEwAwcAIAEFBgAzAwcEJgIIFXAAAwYEJgL79gADBgQm
AvwjADAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMAymoCAwDVYQIDAPWFMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBAAYjURzVyAeHnSOTTAprUT1LZIfjODxxVi/3KGj4jOmxQg4D5G720SnkL1RR
O9A6XCIYrnaAr5U7iyD2IVAU9gXHH76ShVUwKFl6cDlU8PKUHG1hmFREOq2O4Qr1
5RcVxFtgUvX91S+HtlT7Z/5oEytMP2zTO1g1GR7bj1DxiEMLm00UHF0IyL+SXi2j
U/p2xt7095Ze89oRNQEuvaqa0Fkd9qcFIcOWcUyl9+ty3c5kTWkD0Pc/Bhp2Fypp
FNA/d+qqFEvObdCzPznCKsC7dB+QYsUF1IN9KBKbDUkD/S9c+/qiY4V5ZOZUCTVL
ajSo+wKmiNpEKJj7eyRWpm8B6ek=
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:43:50 2025 by rpki-client