Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479190fe76b5d04eca6f3ff465c62efbbca8592d2f6f1.cer
File:                     eebda479190fe76b5d04eca6f3ff465c62efbbca8592d2f6f1.cer (raw, json)
Hash identifier:          OlRBbFsjrc9+4e/ku0jOPN0TP6R7e8/FqMJyn1i/jqs=
Subject key identifier:   F1:E9:1E:4B:C3:D4:63:77:AA:DC:6F:12:2D:5F:15:7E:13:30:7D:AB
Authority key identifier: 3E:C5:21:1F:79:C0:6E:DC:01:87:6D:D9:E7:F2:CD:2B:A5:24:7D:A5
Certificate issuer:       /CN=54c0abe8-0a04-4316-aff2-9cdff0522fbd
Certificate serial:       010D0C9F432858417B648360EE155A7FF9F94500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
Manifest:                 rsync://rpki.co/repo/HYSP/9/F1E91E4BC3D46377AADC6F122D5F157E13307DAB.mft
caRepository:             rsync://rpki.co/repo/HYSP/9
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 03:25:16 +0000
Certificate not after:    Fri 11 Jul 2025 03:25:16 +0000
Subordinate resources:    AS: 945
                          AS: 62853
                          IP: 23.133.8.0/24
                          IP: 216.146.28.0/22
                          IP: 2602:fbf6::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7b:64:83:60:ee:15:5a:7f:f9:f9:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54c0abe8-0a04-4316-aff2-9cdff0522fbd
        Validity
            Not Before: Apr  8 03:25:16 2023 GMT
            Not After : Jul 11 03:25:16 2025 GMT
        Subject: CN=eebda479190fe76b5d04eca6f3ff465c62efbbca8592d2f6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:48:89:09:79:42:5a:02:5e:a5:64:8f:1b:
                    9f:15:7c:20:a1:2c:52:02:26:a4:55:2a:4c:1f:6d:
                    55:fb:80:13:6a:7d:fd:fc:09:86:0a:c8:dd:39:46:
                    ae:eb:ca:19:8d:c7:28:57:8b:97:f2:46:52:8b:6a:
                    a7:f0:f0:49:44:45:ce:a3:a7:a4:ca:e1:9c:3c:d5:
                    3a:d9:66:1a:cf:10:65:c8:0f:b0:8f:15:be:02:11:
                    9f:bd:53:8f:7f:b3:9e:af:b1:5b:9e:6a:0d:ec:e3:
                    cd:65:83:a0:b5:0d:65:13:93:08:c4:f4:c4:ac:50:
                    f7:a5:d6:ed:2c:0c:fb:5a:00:48:fc:fc:3e:79:9a:
                    19:1c:01:bf:2b:a6:90:10:23:80:bc:07:f9:49:55:
                    9b:09:57:1e:c2:53:44:1d:93:4c:61:52:74:d9:40:
                    86:2e:58:3e:a5:cd:c0:dd:5b:93:58:17:a5:60:92:
                    91:44:8c:43:79:90:d5:72:af:f8:c5:2c:ba:57:68:
                    1c:a0:82:66:67:d7:7a:5c:07:7f:81:c8:3b:81:bd:
                    9f:b0:b8:9e:2d:bc:1b:ea:8b:d7:46:80:3e:8e:c0:
                    50:f8:e1:02:29:00:5f:13:5b:1a:43:f2:97:12:ae:
                    98:b5:2e:7c:d9:90:f0:a9:55:1b:ba:5f:4d:99:10:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E9:1E:4B:C3:D4:63:77:AA:DC:6F:12:2D:5F:15:7E:13:30:7D:AB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/9
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/9/F1E91E4BC3D46377AADC6F122D5F157E13307DAB.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C5:21:1F:79:C0:6E:DC:01:87:6D:D9:E7:F2:CD:2B:A5:24:7D:A5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.8.0/24
                  216.146.28.0/22
                IPv6:
                  2602:fbf6::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  945
                  62853

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ac:ed:a1:d3:31:45:1d:b2:af:9f:60:61:ca:d0:99:39:4a:
         51:be:5d:e2:24:b7:2e:44:0b:52:ca:bc:42:3f:2f:58:a2:41:
         17:e3:80:39:2d:54:a3:40:73:b3:44:cb:5b:a8:5f:3e:d1:55:
         4b:79:05:e7:c5:35:8d:8d:fb:58:96:97:10:ce:3f:6a:eb:dc:
         7f:5d:a0:05:80:d5:5e:0c:dd:3e:a0:ae:e3:48:67:a7:a7:a4:
         b8:6f:aa:88:0a:2c:9e:14:44:7d:86:12:d9:2f:69:d3:99:4c:
         40:51:bc:70:2d:83:ca:b6:e1:80:47:c8:62:37:26:ca:93:1c:
         f9:ec:01:84:25:63:1b:4a:c6:33:f2:e8:b4:cf:54:ed:44:2b:
         c2:89:3d:4a:4b:27:98:77:c8:ae:65:62:0c:c2:32:6f:7d:8a:
         3b:4f:80:99:1c:86:5e:8d:d8:78:dd:53:53:a6:32:5b:96:d7:
         12:25:85:45:53:81:9d:02:b9:b3:81:d6:2a:6b:c8:84:bf:e9:
         1b:84:3b:36:3a:b4:ba:8e:3e:ba:9e:b7:57:f6:19:49:57:5b:
         12:ba:7f:f8:2a:5c:34:0a:6a:d4:db:22:03:12:22:b6:80:f2:
         4e:d6:c1:68:48:3b:6b:67:61:e9:be:31:ca:68:5d:d9:f1:de:
         ac:45:3b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:39 2023 by rpki-client on console-fra.rpki-client.org