Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f.cer
File:                     48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f.cer (raw, json)
Hash identifier:          OrDcSQLGDUrcZlPgut0i5lR6mNilj6BeahxKH16sJOQ=
Subject key identifier:   EF:03:26:8E:6A:12:1B:93:92:28:6E:D6:36:BD:A3:C7:05:B4:C2:38
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583BCB4047ED60A69498D83F8DD8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Nov 2021 13:15:19 +0000
Certificate not after:    Sun 02 Nov 2031 14:15:19 +0000
Subordinate resources:    AS: 10976
                          AS: 13896
                          AS: 14294
                          IP: 162.223.96.0/22
                          IP: 170.76.188.0/22
                          IP: 206.81.176.0/20
                          IP: 2604:3240::/32
                          IP: 2620:f:e000::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:cb:40:47:ed:60:a6:94:98:d8:3f:8d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov  2 13:15:19 2021 GMT
            Not After : Nov  2 14:15:19 2031 GMT
        Subject: CN=48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:cf:d2:fd:9b:d4:df:f0:a2:89:a7:58:5d:
                    49:49:2a:87:8f:14:50:b2:e0:18:16:c7:d1:d6:a9:
                    f6:ef:ed:49:1c:02:6b:00:b7:56:60:2e:31:d8:c1:
                    6e:05:e6:9a:1e:b8:e4:8c:72:fc:84:7d:fb:53:62:
                    48:b4:67:ee:e3:f5:d1:9e:08:e5:86:11:10:df:1e:
                    80:8d:d7:17:2b:75:12:17:ac:3a:3a:68:0c:59:a5:
                    b4:b6:98:51:ce:b7:12:c0:73:60:98:7b:b2:42:b5:
                    14:5c:9c:d5:52:71:96:88:81:4c:e2:f0:eb:1a:7c:
                    f8:99:39:f5:87:60:23:1a:57:d4:ff:60:d6:85:b8:
                    0f:7b:c6:55:69:b7:c4:cb:81:a8:01:4e:d5:fc:bd:
                    c3:ef:7a:4c:97:52:53:28:c2:13:42:a0:bd:45:6a:
                    e4:31:36:fc:4c:78:1c:24:d8:4e:85:89:e9:f6:e7:
                    bb:55:e1:71:ca:ea:62:c4:89:86:cf:71:2a:45:a9:
                    5f:eb:97:02:87:a0:b7:c2:2d:0b:47:fb:5d:29:e1:
                    5b:34:b3:1c:e5:fb:65:e6:b2:92:aa:1d:e3:a0:5c:
                    2c:2d:77:59:08:65:ed:b5:47:a4:3b:00:d6:f0:62:
                    a0:46:c4:b7:c9:77:98:5a:6d:fe:44:ed:61:e2:40:
                    61:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:03:26:8E:6A:12:1B:93:92:28:6E:D6:36:BD:A3:C7:05:B4:C2:38
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f/48fc6e2e-c5fc-40af-bf8f-ca99c4e7923f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.96.0/22
                  170.76.188.0/22
                  206.81.176.0/20
                IPv6:
                  2604:3240::/32
                  2620:f:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10976
                  13896
                  14294

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:99:95:ce:8a:a2:3d:18:84:79:6e:0b:2f:b6:eb:b4:ad:90:
         b4:e8:92:4b:9b:3a:19:ee:18:10:ca:5d:c4:c3:13:e8:eb:4d:
         36:b4:cc:dc:f5:10:44:1f:51:bf:a5:80:81:ac:d3:36:11:da:
         69:b9:4d:37:60:ac:6b:e5:eb:f5:24:78:ba:d9:ec:8a:f0:ef:
         ca:f9:4f:53:32:fd:b6:05:ee:c1:d9:d8:9c:46:88:e4:5e:b6:
         9b:51:42:40:5d:d0:ab:01:e8:73:9b:6d:72:e9:e0:21:32:ac:
         fc:d7:59:50:41:fc:2e:00:1d:8f:e2:1f:3b:e9:d2:f8:88:93:
         90:c6:03:eb:b5:7b:8b:48:85:a8:e6:78:0b:e9:46:1f:61:dc:
         36:a5:ef:55:ef:6f:0b:24:14:7a:06:50:89:e6:d1:34:4c:ce:
         3a:c1:f4:fb:30:4c:13:83:01:14:e1:bc:8b:17:14:7d:b6:2e:
         49:9f:8e:e9:a8:8e:7c:ab:d3:15:56:a9:70:5e:5a:8d:8d:6f:
         09:1a:3c:b0:45:76:44:62:37:0d:5b:df:03:93:b2:08:3b:39:
         3f:87:fa:dc:72:eb:68:7a:ea:2d:60:00:c1:3e:82:07:41:f9:
         40:29:06:92:1b:59:a4:d8:dc:86:1a:01:2a:1f:65:4c:8c:3a:
         8e:74:6f:9c
-----BEGIN CERTIFICATE-----
MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWDvLQEftYKaUmNg/jdgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIxMTEwMjEzMTUxOVoXDTMxMTEwMjE0MTUxOVowLzEtMCsGA1UEAxMk
NDhmYzZlMmUtYzVmYy00MGFmLWJmOGYtY2E5OWM0ZTc5MjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuLP0v2b1N/woomnWF1JSSqHjxRQsuAYFsfR
1qn27+1JHAJrALdWYC4x2MFuBeaaHrjkjHL8hH37U2JItGfu4/XRngjlhhEQ3x6A
jdcXK3USF6w6OmgMWaW0tphRzrcSwHNgmHuyQrUUXJzVUnGWiIFM4vDrGnz4mTn1
h2AjGlfU/2DWhbgPe8ZVabfEy4GoAU7V/L3D73pMl1JTKMITQqC9RWrkMTb8THgc
JNhOhYnp9ue7VeFxyupixImGz3EqRalf65cCh6C3wi0LR/tdKeFbNLMc5ftl5rKS
qh3joFwsLXdZCGXttUekOwDW8GKgRsS3yXeYWm3+RO1h4kBhVQIDAQABo4IERjCC
BEIwHQYDVR0OBBYEFO8DJo5qEhuTkihu1ja9o8cFtMI4MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80
OGZjNmUyZS1jNWZjLTQwYWYtYmY4Zi1jYTk5YzRlNzkyM2YvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ4ZmM2ZTJlLWM1ZmMtNDBhZi1i
ZjhmLWNhOTljNGU3OTIzZi80OGZjNmUyZS1jNWZjLTQwYWYtYmY4Zi1jYTk5YzRl
NzkyM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQwYIKwYBBQUH
AQcBAf8ENDAyMBgEAgABMBIDBAKi32ADBAKqTLwDBATOUbAwFgQCAAIwEAMFACYE
MkADBwAmIAAP4AAwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICKuACAjZIAgI31jBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCZmZXOiqI9GIR5bgsvtuu0rZC06JJLmzoZ7hgQyl3EwxPo6002tMzc
9RBEH1G/pYCBrNM2EdppuU03YKxr5ev1JHi62eyK8O/K+U9TMv22Be7B2dicRojk
XrabUUJAXdCrAehzm21y6eAhMqz811lQQfwuAB2P4h876dL4iJOQxgPrtXuLSIWo
5ngL6UYfYdw2pe9V728LJBR6BlCJ5tE0TM46wfT7MEwTgwEU4byLFxR9ti5Jn47p
qI58q9MVVqlwXlqNjW8JGjywRXZEYjcNW98Dk7IIOzk/h/rccutoeuotYADBPoIH
QflAKQaSG1mk2NyGGgEqH2VMjDqOdG+c
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:32 2023 by rpki-client on console-ams.rpki-client.org