Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af161c486c9c77f1920be7eda3a6d867adf351fd5798.cer
File:                     62f3d0af161c486c9c77f1920be7eda3a6d867adf351fd5798.cer (raw, json)
Hash identifier:          bQipqq7VVyFtRLZtmjc+5Mjt/eYJ+PVTZrs2ymiBC/E=
Subject key identifier:   66:E3:DF:F6:91:62:45:9A:12:A7:8D:3B:03:E2:E4:26:3C:B9:F7:B7
Authority key identifier: F2:DE:B8:9E:39:0F:18:FF:F6:E9:CB:D1:1E:E3:F1:88:C9:AF:44:1D
Certificate issuer:       /CN=7a054d1e-8326-42a7-b1ad-02b30287b483
Certificate serial:       010D0C9F432858417B645965CB0C3ADC84047000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483.cer
Manifest:                 rsync://rpki.co/repo/HYSP/13/66E3DFF69162459A12A78D3B03E2E4263CB9F7B7.mft
caRepository:             rsync://rpki.co/repo/HYSP/13
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 03:24:57 +0000
Certificate not after:    Fri 11 Jul 2025 03:24:57 +0000
Subordinate resources:    IP: 23.149.152.0/24
                          IP: 2606:b0c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7b:64:59:65:cb:0c:3a:dc:84:04:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a054d1e-8326-42a7-b1ad-02b30287b483
        Validity
            Not Before: Apr  8 03:24:57 2023 GMT
            Not After : Jul 11 03:24:57 2025 GMT
        Subject: CN=62f3d0af161c486c9c77f1920be7eda3a6d867adf351fd5798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:1f:73:c2:2f:ed:48:c4:9d:7f:c3:91:5c:
                    c7:60:0f:32:e4:e4:e2:cd:35:7d:4a:ab:9b:c9:7b:
                    b1:34:13:46:51:7c:49:68:20:b0:7e:f8:32:57:35:
                    2b:ba:b6:35:bd:a3:a0:1a:b6:69:8f:b1:2c:1d:85:
                    a1:ee:91:3c:29:28:bc:db:53:d5:24:aa:d9:cb:b7:
                    0a:5a:f9:14:65:ba:34:ea:8c:df:7c:55:f0:83:e7:
                    31:c1:ca:25:67:24:51:76:14:ee:45:24:85:39:01:
                    1b:7e:27:ca:f7:02:78:5a:73:81:44:e8:16:9a:72:
                    36:f0:2e:7e:c0:95:1c:00:10:dc:ce:bb:93:6b:7b:
                    cc:5b:34:29:35:65:06:81:39:05:2b:9d:db:a7:d8:
                    0b:a2:0a:ff:f0:68:cb:6a:60:93:b8:dc:9a:08:6a:
                    c1:44:48:83:2d:27:2c:df:f5:3b:9c:ad:9c:10:6e:
                    70:89:20:2b:c5:ed:b0:7f:b6:b6:cc:9d:f6:06:2c:
                    1a:db:fb:ed:93:86:e0:85:c4:cc:d4:6d:a1:78:a3:
                    da:f7:85:c0:c1:31:43:4c:df:79:67:c9:dd:48:8f:
                    e5:dd:60:c7:95:9f:73:b2:51:04:4c:aa:65:36:a3:
                    eb:18:aa:6a:02:4e:b9:2b:44:d2:c1:99:c7:fb:ea:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E3:DF:F6:91:62:45:9A:12:A7:8D:3B:03:E2:E4:26:3C:B9:F7:B7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/13
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/13/66E3DFF69162459A12A78D3B03E2E4263CB9F7B7.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/7a054d1e-8326-42a7-b1ad-02b30287b483.crl

            X509v3 Authority Key Identifier:
                keyid:F2:DE:B8:9E:39:0F:18:FF:F6:E9:CB:D1:1E:E3:F1:88:C9:AF:44:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.152.0/24
                IPv6:
                  2606:b0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:51:72:61:d3:8c:61:31:3f:bb:57:7c:d2:97:5d:89:30:39:
         c7:2b:fd:e3:6d:02:01:a6:0f:8c:9e:dc:a2:6e:07:57:07:68:
         bd:a5:27:52:63:d5:f1:47:b6:53:d1:c6:46:a0:4e:38:7f:44:
         a2:ce:08:91:e5:1f:ca:5c:26:2b:6f:7b:e8:f1:40:41:1c:42:
         84:0a:5f:01:45:18:8d:0d:7e:5e:81:1d:8c:45:d6:01:94:29:
         c2:f8:f2:ae:d4:ed:d1:b5:f8:29:e4:e7:33:94:61:a5:37:4d:
         ac:d5:4d:a5:d1:1b:c6:6c:63:83:99:32:df:1d:fd:0d:5a:45:
         50:25:1c:0a:07:c8:78:05:b5:81:37:64:8c:76:79:dd:35:ff:
         ac:1f:b8:61:b3:6b:7a:ac:1f:72:88:93:70:33:f4:bf:46:bb:
         a1:b4:7e:b4:b4:9a:07:7b:61:b4:f4:72:a1:dd:4d:c9:e3:65:
         56:64:93:0f:f2:57:96:05:a4:7d:6d:f6:66:4d:9d:9b:13:0e:
         b0:72:0a:64:8d:05:04:c1:85:69:a7:c0:a7:f7:55:42:c6:9a:
         0b:32:6d:56:12:75:28:55:db:4f:c4:35:86:2c:3f:d1:55:6c:
         d0:3d:56:7b:00:87:b7:ed:35:5a:81:10:f5:f2:07:fa:c4:d1:
         17:1c:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----