Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4f9f71c-2fb9-4125-98ac-c798a99cf4f3.cer
File:                     b4f9f71c-2fb9-4125-98ac-c798a99cf4f3.cer (raw, json)
Hash identifier:          3dpfh7Qv/bYGh56AGZuBuzB793JrZ6LBS94tpWfrHUE=
Subject key identifier:   8E:21:24:D0:C7:BA:98:20:68:AF:BE:7C:76:2E:1B:92:45:5B:BB:0A
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328583FB8D30EA05985C022ED2ED000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4f9f71c-2fb9-4125-98ac-c798a99cf4f3/b4f9f71c-2fb9-4125-98ac-c798a99cf4f3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4f9f71c-2fb9-4125-98ac-c798a99cf4f3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Oct 2022 17:58:26 +0000
Certificate not after:    Thu 30 Jan 2025 18:58:26 +0000
Subordinate resources:    AS: 33442
                          IP: 149.23.0.0/16
                          IP: 157.235.0.0/16
                          IP: 2606:b4c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b8:d3:0e:a0:59:85:c0:22:ed:2e:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Oct 28 17:58:26 2022 GMT
            Not After : Jan 30 18:58:26 2025 GMT
        Subject: CN=b4f9f71c-2fb9-4125-98ac-c798a99cf4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:29:61:eb:57:18:e0:08:35:00:75:40:f5:
                    27:6d:90:ca:34:12:1f:b3:f8:b9:e4:0e:47:f1:89:
                    b7:28:51:4b:df:60:55:87:93:47:dc:02:e6:8b:4e:
                    a2:8b:6f:e4:8b:94:e7:f2:2d:c2:39:e6:b5:70:0a:
                    21:78:a1:03:d7:de:f5:de:85:77:78:3b:7c:26:86:
                    1f:da:7b:a8:89:d1:43:63:82:04:91:89:23:b9:89:
                    28:28:0b:dd:f7:d1:6b:c5:42:ab:1f:51:6a:30:34:
                    b2:b9:48:48:d4:0a:2e:20:7b:4e:eb:2c:94:86:78:
                    d3:ff:60:6b:fc:4d:72:d6:ab:98:21:b5:14:4d:38:
                    0d:31:e4:9a:71:c5:17:e2:99:ba:f3:f5:6a:77:07:
                    af:c7:4c:76:2d:93:72:d2:7e:f5:8e:3e:7b:5a:f3:
                    c3:b3:f1:31:92:a7:25:db:97:b0:bc:bd:e3:6d:7a:
                    6a:f6:30:7f:19:bb:6b:86:44:1a:06:23:7b:c7:5c:
                    90:01:6c:fd:9f:6b:44:55:25:a0:d2:8e:1c:09:6b:
                    8c:40:d3:e5:1c:b5:72:70:f4:67:93:25:f4:43:fb:
                    f4:73:1d:14:df:0a:d0:e4:76:de:ae:a6:2a:af:d0:
                    54:df:0b:44:b3:6f:9c:05:d6:37:86:3d:c6:4c:b9:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:21:24:D0:C7:BA:98:20:68:AF:BE:7C:76:2E:1B:92:45:5B:BB:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4f9f71c-2fb9-4125-98ac-c798a99cf4f3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4f9f71c-2fb9-4125-98ac-c798a99cf4f3/b4f9f71c-2fb9-4125-98ac-c798a99cf4f3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.0.0/16
                  157.235.0.0/16
                IPv6:
                  2606:b4c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33442

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:11:f8:1b:03:01:cd:65:e3:28:70:2a:eb:7d:16:5c:8a:5e:
         d2:9d:3c:e5:6e:29:86:0d:c9:50:5b:e9:77:88:84:04:b3:cd:
         7c:ed:92:97:32:d5:ea:7e:18:a9:05:93:1f:80:d3:d3:14:34:
         76:9e:e3:d6:0a:74:d5:dc:78:7c:53:3d:2b:97:3f:1c:fa:12:
         ed:68:e2:c3:2d:4f:29:5f:cc:3d:ac:eb:aa:5c:ca:aa:e9:f1:
         71:7e:3e:38:a4:24:7f:b5:71:f5:0a:1f:fc:6d:5f:c9:8e:ba:
         ed:e1:85:36:92:fe:eb:b5:8f:b9:b8:dc:de:5e:a1:5a:26:f1:
         fb:96:42:38:03:9c:8f:c5:bc:8d:e8:0a:ee:29:a2:ef:63:ab:
         f9:10:94:ff:2c:b0:24:77:bb:1c:ab:00:c5:e6:b6:7e:16:f4:
         48:ca:88:aa:18:a5:da:47:50:8f:1b:cc:db:d1:1b:74:6a:be:
         0d:8c:d6:df:31:69:2e:81:7e:b7:5e:2a:0c:69:ac:94:37:15:
         de:bf:45:31:81:4d:5f:9f:8c:fc:9f:30:ec:b6:8e:98:47:75:
         c0:26:92:23:74:45:52:65:0c:f7:49:dd:16:bc:ce:21:86:b4:
         6a:e9:df:c3:1e:6c:08:52:29:81:5f:86:89:bf:9f:34:76:5f:
         6b:fd:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:21 2023 by rpki-client on console-fra.rpki-client.org