Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer
File:                     18ccca26-f6c3-490d-aea1-56ccca162855.cer (raw, json)
Hash identifier:          RWJOdkhjOVqCQRqC3CinN7nkuqYVghGFELHAm5c5EmY=
Subject key identifier:   F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583C2A7EF9E5871153BC3FE2A840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/18ccca26-f6c3-490d-aea1-56ccca162855.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 Sep 2021 21:03:16 +0000
Certificate not after:    Sat 13 Sep 2031 21:03:16 +0000
Subordinate resources:    AS: 54625
                          AS: 64199
                          IP: 149.112.26.0/24
                          IP: 165.140.142.0/24
                          IP: 2602:fc23::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:2a:7e:f9:e5:87:11:53:bc:3f:e2:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep 13 21:03:16 2021 GMT
            Not After : Sep 13 21:03:16 2031 GMT
        Subject: CN=18ccca26-f6c3-490d-aea1-56ccca162855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:18:47:38:50:80:86:98:61:9d:e5:35:97:
                    aa:b2:ae:72:68:44:73:59:eb:05:c0:54:af:92:30:
                    98:1c:8d:3c:1c:f9:60:67:d7:e8:59:15:e7:0b:ee:
                    a6:6a:89:2f:06:cb:01:fd:20:e3:34:3e:87:9f:f5:
                    f2:84:32:66:1b:59:71:a9:2b:c1:3f:aa:86:b5:87:
                    0f:ac:64:ab:e9:9b:97:99:54:2c:d0:35:ae:a1:b2:
                    5a:72:83:ba:fc:06:7b:90:2b:62:03:cc:7c:03:17:
                    e0:6f:d6:da:b4:c9:2f:33:08:83:43:7b:dd:8e:60:
                    e6:ad:b7:cc:8b:a7:1b:3a:45:5e:0b:b9:f6:21:fe:
                    36:25:e5:0a:92:c1:6a:01:98:26:cf:5c:56:a2:aa:
                    f1:37:c2:a5:99:e8:b1:de:8f:a9:2f:2a:d8:bd:56:
                    06:22:b9:be:52:56:da:12:91:13:2a:a1:bd:8a:b0:
                    ea:29:80:c1:2f:bb:f6:0e:a9:48:3a:8e:6f:86:41:
                    f7:7a:33:4f:bf:82:9c:3d:95:99:1f:f6:3f:dd:e3:
                    90:86:16:cd:11:ee:e2:23:a4:ff:ba:b5:25:83:5d:
                    68:a0:74:8f:0c:73:4f:7e:a3:59:9f:c9:12:40:0f:
                    df:83:68:e8:fd:bc:dc:05:de:6c:7b:3e:d9:ec:32:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/18ccca26-f6c3-490d-aea1-56ccca162855.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.26.0/24
                  165.140.142.0/24
                IPv6:
                  2602:fc23::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54625
                  64199

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f8:17:c1:09:80:a4:3c:e2:d0:53:ea:38:ec:56:ee:b1:dd:
         59:8d:6a:a0:46:4a:a5:33:b9:35:99:d0:a1:e9:19:0c:e6:7a:
         05:d1:62:9d:c1:64:f0:5b:91:99:c4:6f:2c:1c:54:54:6e:a7:
         9a:8e:49:dc:42:26:e9:6f:ac:e1:f2:47:29:33:2c:6d:9c:0a:
         61:fa:49:2d:73:ce:31:1c:00:50:74:02:68:6c:12:28:53:2e:
         e3:33:b5:dc:dd:5d:ab:aa:9e:97:fc:33:9c:ae:ac:0c:7a:b3:
         eb:01:c3:27:a4:a9:b3:54:bd:2a:a7:4b:3f:7b:90:9d:cd:e6:
         39:20:d8:20:8b:ac:a2:32:f2:10:f4:92:fb:0c:86:c6:69:c0:
         4f:58:59:d6:9a:ff:b9:d5:9e:93:79:3a:33:3a:ca:77:38:89:
         b0:0d:5b:1a:9c:db:cb:3e:34:e5:34:fa:18:bb:42:97:78:7c:
         47:12:26:63:a9:ff:b0:91:cb:25:a4:68:66:3e:05:95:b4:f6:
         2f:4f:be:e1:ac:60:83:b3:40:a8:3b:60:af:40:e1:4b:4d:14:
         3c:bd:15:ba:ad:09:4e:d5:9c:1b:62:d3:f4:29:47:c2:cd:a9:
         73:e1:46:44:92:0b:9b:12:32:79:ff:87:2a:8d:65:df:15:b2:
         77:41:a1:28
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWDwqfvnlhxFTvD/iqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIxMDkxMzIxMDMxNloXDTMxMDkxMzIxMDMxNlowLzEtMCsGA1UEAxMk
MThjY2NhMjYtZjZjMy00OTBkLWFlYTEtNTZjY2NhMTYyODU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVQYRzhQgIaYYZ3lNZeqsq5yaERzWesFwFSv
kjCYHI08HPlgZ9foWRXnC+6maokvBssB/SDjND6Hn/XyhDJmG1lxqSvBP6qGtYcP
rGSr6ZuXmVQs0DWuobJacoO6/AZ7kCtiA8x8Axfgb9batMkvMwiDQ3vdjmDmrbfM
i6cbOkVeC7n2If42JeUKksFqAZgmz1xWoqrxN8Klmeix3o+pLyrYvVYGIrm+Ulba
EpETKqG9irDqKYDBL7v2DqlIOo5vhkH3ejNPv4KcPZWZH/Y/3eOQhhbNEe7iI6T/
urUlg11ooHSPDHNPfqNZn8kSQA/fg2jo/bzcBd5sez7Z7DJE3QIDAQABo4IENjCC
BDIwHQYDVR0OBBYEFPevu94bIHIvlsBPs5L99IjGPupdMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x
OGNjY2EyNi1mNmMzLTQ5MGQtYWVhMS01NmNjY2ExNjI4NTUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzE4Y2NjYTI2LWY2YzMtNDkwZC1h
ZWExLTU2Y2NjYTE2Mjg1NS8xOGNjY2EyNi1mNmMzLTQ5MGQtYWVhMS01NmNjY2Ex
NjI4NTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBACVcBoDBACljI4wDgQCAAIwCAMGBCYC/CMAMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDVYQIDAPrHMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIX4F8EJgKQ8
4tBT6jjsVu6x3VmNaqBGSqUzuTWZ0KHpGQzmegXRYp3BZPBbkZnEbywcVFRup5qO
SdxCJulvrOHyRykzLG2cCmH6SS1zzjEcAFB0AmhsEihTLuMztdzdXauqnpf8M5yu
rAx6s+sBwyekqbNUvSqnSz97kJ3N5jkg2CCLrKIy8hD0kvsMhsZpwE9YWdaa/7nV
npN5OjM6ync4ibANWxqc28s+NOU0+hi7Qpd4fEcSJmOp/7CRyyWkaGY+BZW09i9P
vuGsYIOzQKg7YK9A4UtNFDy9FbqtCU7VnBti0/QpR8LNqXPhRkSSC5sSMnn/hyqN
Zd8VsndBoSg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:30 2023 by rpki-client on console-ams.rpki-client.org