Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec18781cd03ee7f4ddfe405786d7821e2d8a49b667b.cer
File:                     369dbc2ec18781cd03ee7f4ddfe405786d7821e2d8a49b667b.cer (raw, json)
Hash identifier:          3wPl6gFd+rIqWTo63sDJcRDfF3HEumU8W4q4B7U8t3E=
Subject key identifier:   F9:01:7E:91:25:34:85:B7:4D:81:D0:B7:1C:DE:6A:DB:21:71:37:15
Authority key identifier: 4C:AC:44:27:AD:47:97:5D:01:18:A4:B3:04:B0:CF:51:42:25:18:EC
Certificate issuer:       /CN=c576633f-343d-4ac3-a936-98958e5630e6
Certificate serial:       010D0C9F432858497D82F2DD8B7AEC9409721640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/F9017E91253485B74D81D0B71CDE6ADB21713715.mft
caRepository:             rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 11:53:43 +0000
Certificate not after:    Thu 15 Jul 2027 11:53:43 +0000
Subordinate resources:    AS: 11967
                          AS: 63286
                          AS: 397658
                          IP: 23.133.172.0/24
                          IP: 2602:f72e::/40
Validation:               Failed, certificate revoked on Fri 11 Apr 2025 14:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:82:f2:dd:8b:7a:ec:94:09:72:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c576633f-343d-4ac3-a936-98958e5630e6
        Validity
            Not Before: Apr 11 11:53:43 2025 GMT
            Not After : Jul 15 11:53:43 2027 GMT
        Subject: CN=369dbc2ec18781cd03ee7f4ddfe405786d7821e2d8a49b667b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8f:b6:34:2d:dd:a9:f8:06:ec:1e:c7:7c:4c:
                    70:f1:ac:df:c7:54:f3:39:6d:4f:4e:56:f2:0c:fb:
                    90:65:ce:72:37:1f:d6:d0:46:3c:6f:59:fc:41:28:
                    a5:87:18:2d:19:14:38:fa:e3:5a:54:62:84:86:59:
                    74:f5:95:40:3d:df:24:ae:83:de:a1:d3:7d:34:8d:
                    b8:fb:89:12:32:2d:e1:47:0b:01:42:fd:75:57:7d:
                    ee:90:40:07:e1:8c:8e:fe:56:bd:37:e5:fe:b5:e7:
                    c0:f8:a3:83:6c:fc:fa:8f:5d:7d:9b:d2:08:85:45:
                    db:18:05:6e:e0:5e:d8:1f:3d:9c:36:13:92:c5:bb:
                    cf:ec:32:1b:15:64:9d:c3:d2:f5:fa:31:5f:48:6c:
                    d9:69:83:4b:67:33:85:42:30:84:cd:d7:06:a7:bc:
                    82:a0:03:4f:83:ab:57:32:fb:6c:88:97:2f:d9:fc:
                    35:db:82:af:4d:4b:4a:34:ac:74:8a:59:8f:94:f0:
                    9b:e7:b9:30:08:d8:3e:9e:d9:54:ed:ea:52:ab:70:
                    dc:2b:3c:71:dd:59:5b:9f:ea:5a:4f:39:26:ca:04:
                    a1:78:f8:ff:15:94:d4:04:f1:5a:33:e2:aa:bc:ba:
                    25:5f:9e:ee:c7:b8:a0:7a:19:2a:f5:72:e8:95:0f:
                    04:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:01:7E:91:25:34:85:B7:4D:81:D0:B7:1C:DE:6A:DB:21:71:37:15
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/F9017E91253485B74D81D0B71CDE6ADB21713715.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl

            X509v3 Authority Key Identifier:
                keyid:4C:AC:44:27:AD:47:97:5D:01:18:A4:B3:04:B0:CF:51:42:25:18:EC

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.172.0/24
                IPv6:
                  2602:f72e::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11967
                  63286
                  397658

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:46:5a:87:60:60:7c:d7:2c:cf:cd:7c:17:a2:d9:10:83:
         a9:de:91:f7:96:aa:a4:cb:7f:70:35:2f:db:f3:eb:47:7d:97:
         63:eb:e9:49:7b:7b:97:96:54:5e:32:d7:2e:fd:5c:b7:76:7b:
         9d:99:32:22:a9:23:49:fc:e2:f3:9c:a2:94:d5:da:59:86:7a:
         e6:6c:f1:64:47:4a:32:2b:87:18:1d:af:e9:17:2a:68:53:4b:
         73:54:82:21:79:bb:1f:3b:48:52:8e:44:9c:4c:bb:e8:87:27:
         70:9f:8c:36:d3:44:91:75:10:d5:a5:0a:5c:28:e2:46:38:03:
         90:db:8a:df:08:e0:54:d8:5e:aa:d1:2c:42:43:68:50:fe:83:
         f9:0e:0e:52:37:76:d4:9b:70:63:1f:35:9b:7a:02:37:14:eb:
         7a:c1:7f:de:e7:1e:42:11:57:8d:a5:30:f4:b4:f9:fa:64:7a:
         32:b8:3f:bc:be:df:9f:b5:5a:8f:a5:44:1d:24:8f:02:ce:34:
         83:f1:f9:b5:e3:75:ef:09:08:c2:31:36:8c:01:de:e4:2e:ec:
         42:f9:3d:4e:f4:23:07:f9:39:f4:6b:32:23:34:e5:9b:d2:21:
         95:85:1d:c0:54:f0:3e:07:9f:44:fa:12:f2:f0:5f:3e:ea:4f:
         f3:f4:a7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:36:39 2025 by rpki-client