Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e1760fc0-47b4-425d-8a71-8092d62044f9.cer
File:                     e1760fc0-47b4-425d-8a71-8092d62044f9.cer (raw, json)
Hash identifier:          UJdVyB0cZBqQ0R7ASAN7vsWDN6h8eq82r6OU6Korhf0=
Subject key identifier:   44:3C:91:F0:43:7E:41:65:48:C3:B7:69:53:3B:42:D8:04:49:5E:AA
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E483294FAB03F945E1F17B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e1760fc0-47b4-425d-8a71-8092d62044f9/e1760fc0-47b4-425d-8a71-8092d62044f9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e1760fc0-47b4-425d-8a71-8092d62044f9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Wed 23 Oct 2024 19:06:39 +0000
Subordinate resources:    IP: 45.42.252.0/22
                          IP: 104.245.228.0/22
                          IP: 170.39.88.0/24
                          IP: 173.249.168.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:29:4f:ab:03:f9:45:e1:f1:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Oct 23 19:06:39 2024 GMT
        Subject: CN=e1760fc0-47b4-425d-8a71-8092d62044f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:58:39:e1:f2:ad:60:9c:7b:bd:3f:53:e6:6e:
                    f1:19:ee:f6:bb:1b:87:a2:71:c1:7e:30:48:b5:7c:
                    5c:06:69:f9:42:fb:54:85:fc:34:da:18:02:a5:7a:
                    48:9f:50:1a:3c:b6:00:09:a3:4a:ed:d1:79:d1:2b:
                    41:03:0b:01:9e:19:a5:73:29:ca:a4:ed:f4:3b:12:
                    44:bf:64:33:9e:e4:4a:d3:7c:c4:47:d0:f5:7e:86:
                    62:9a:99:73:36:15:8b:6b:05:1d:5e:88:9d:3b:d9:
                    5d:b2:62:5c:9e:50:a3:44:34:23:1a:22:43:7b:a3:
                    e5:0a:4d:ed:d5:72:0f:14:bf:83:8f:0e:aa:65:e3:
                    33:16:13:93:a4:07:24:dd:06:c7:12:a0:91:c9:1f:
                    86:83:db:b5:e9:cb:59:95:d4:af:f8:bd:58:ae:35:
                    d6:fa:66:db:82:17:c8:fa:da:2c:c3:8f:f1:70:a0:
                    d1:30:97:16:30:ea:13:ea:32:4c:0c:e6:48:57:b9:
                    13:7b:c0:39:58:a7:56:aa:cb:d0:9a:b6:74:42:03:
                    4c:93:83:9b:f4:35:e6:6f:96:1d:f5:75:d1:ed:66:
                    f8:cc:2e:df:65:06:56:df:6c:3b:7a:c4:eb:b3:94:
                    a0:67:03:89:40:9a:dc:dd:43:21:f3:6b:4c:21:0d:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3C:91:F0:43:7E:41:65:48:C3:B7:69:53:3B:42:D8:04:49:5E:AA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e1760fc0-47b4-425d-8a71-8092d62044f9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e1760fc0-47b4-425d-8a71-8092d62044f9/e1760fc0-47b4-425d-8a71-8092d62044f9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.252.0/22
                  104.245.228.0/22
                  170.39.88.0/24
                  173.249.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d6:ab:2d:50:30:cc:29:f0:5e:98:24:85:5d:2c:db:6b:1b:
         3c:f6:4d:eb:74:e0:4f:38:36:04:99:47:14:b9:1b:42:58:c7:
         7f:2c:ad:b0:c8:10:e3:72:32:84:90:c5:be:bc:83:bd:60:c5:
         50:4b:ba:b0:21:69:c5:f4:ff:a0:b0:80:89:08:90:b1:4b:f6:
         f9:94:03:80:e0:76:4a:0e:0e:20:66:04:eb:40:55:ce:f1:2a:
         81:e0:6c:38:72:64:28:39:ea:fd:63:97:c9:66:18:96:23:c9:
         84:7e:54:00:b1:e0:1a:bd:fb:8c:d2:a1:0f:24:c5:29:20:bf:
         2d:70:87:64:b3:8e:4f:5c:0b:02:9c:dd:0b:85:ce:c1:9e:3c:
         ef:63:d3:b2:bb:70:5a:6e:ac:fa:39:9a:f3:18:21:8e:88:58:
         68:4e:58:1b:b1:3b:2f:20:0c:3d:37:7d:6d:c0:1d:84:28:69:
         f4:36:b3:2f:f9:ec:60:c2:79:61:c5:b6:55:56:2c:9a:28:b9:
         0d:db:c5:37:8d:e8:07:37:d5:bf:67:62:bb:4c:1d:d7:68:39:
         54:13:66:8a:15:cd:ba:ac:0e:bb:29:7a:3a:e0:bd:ba:57:61:
         6c:38:26:94:3b:63:9e:c5:d6:57:6d:fc:a6:f1:1e:9b:bb:21:
         b3:f4:33:1e
-----BEGIN CERTIFICATE-----
MIIG/zCCBeegAwIBAgIUAQ0Mn0MoWEHkgylPqwP5ReHxe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI0MTAyMzE5MDYzOVowLzEtMCsGA1UEAxMk
ZTE3NjBmYzAtNDdiNC00MjVkLThhNzEtODA5MmQ2MjA0NGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVg54fKtYJx7vT9T5m7xGe72uxuHonHBfjBI
tXxcBmn5QvtUhfw02hgCpXpIn1AaPLYACaNK7dF50StBAwsBnhmlcynKpO30OxJE
v2QznuRK03zER9D1foZimplzNhWLawUdXoidO9ldsmJcnlCjRDQjGiJDe6PlCk3t
1XIPFL+Djw6qZeMzFhOTpAck3QbHEqCRyR+Gg9u16ctZldSv+L1YrjXW+mbbghfI
+tosw4/xcKDRMJcWMOoT6jJMDOZIV7kTe8A5WKdWqsvQmrZ0QgNMk4Ob9DXmb5Yd
9XXR7Wb4zC7fZQZW32w7esTrs5SgZwOJQJrc3UMh82tMIQ0PwQIDAQABo4IEETCC
BA0wHQYDVR0OBBYEFEQ8kfBDfkFlSMO3aVM7QtgESV6qMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l
MTc2MGZjMC00N2I0LTQyNWQtOGE3MS04MDkyZDYyMDQ0ZjkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2UxNzYwZmMwLTQ3YjQtNDI1ZC04
YTcxLTgwOTJkNjIwNDRmOS9lMTc2MGZjMC00N2I0LTQyNWQtOGE3MS04MDkyZDYy
MDQ0ZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMQYIKwYBBQUH
AQcBAf8EIjAgMB4EAgABMBgDBAItKvwDBAJo9eQDBACqJ1gDBAKt+agwVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEAFtarLVAwzCnwXpgkhV0s22sbPPZN63TgTzg2BJlHFLkbQljHfyytsMgQ43Iy
hJDFvryDvWDFUEu6sCFpxfT/oLCAiQiQsUv2+ZQDgOB2Sg4OIGYE60BVzvEqgeBs
OHJkKDnq/WOXyWYYliPJhH5UALHgGr37jNKhDyTFKSC/LXCHZLOOT1wLApzdC4XO
wZ4872PTsrtwWm6s+jma8xghjohYaE5YG7E7LyAMPTd9bcAdhChp9DazL/nsYMJ5
YcW2VVYsmii5DdvFN43oBzfVv2diu0wd12g5VBNmihXNuqwOuyl6OuC9uldhbDgm
lDtjnsXWV238pvEem7shs/QzHg==
-----END CERTIFICATE-----
Generated at Tue Sep 5 11:42:35 2023 by rpki-client on console-ams.rpki-client.org