Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16b3fc0a5b4e10372b0129ef67728f4d7cf7e1da7b.cer
File:                     62f3d0af16b3fc0a5b4e10372b0129ef67728f4d7cf7e1da7b.cer (raw, json)
Hash identifier:          xj4TMoOJh9XbDRso7W6l4l6t5xq/ZaND5aaDFnn3Lhg=
Subject key identifier:   C7:4C:5B:6B:2B:BD:D1:36:E7:AD:78:8E:94:58:CD:FA:B0:66:03:0A
Authority key identifier: F2:DE:B8:9E:39:0F:18:FF:F6:E9:CB:D1:1E:E3:F1:88:C9:AF:44:1D
Certificate issuer:       /CN=7a054d1e-8326-42a7-b1ad-02b30287b483
Certificate serial:       010D0C9F432858417C564AD54E15B5AE128B1D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483.cer
Manifest:                 rsync://rpki.co/repo/HYSP/13/C74C5B6B2BBDD136E7AD788E9458CDFAB066030A.mft
caRepository:             rsync://rpki.co/repo/HYSP/13
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:32:26 +0000
Certificate not after:    Fri 11 Jul 2025 11:32:26 +0000
Subordinate resources:    IP: 23.149.152.0/24
                          IP: 2606:b0c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7c:56:4a:d5:4e:15:b5:ae:12:8b:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a054d1e-8326-42a7-b1ad-02b30287b483
        Validity
            Not Before: Apr  8 11:32:26 2023 GMT
            Not After : Jul 11 11:32:26 2025 GMT
        Subject: CN=62f3d0af16b3fc0a5b4e10372b0129ef67728f4d7cf7e1da7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:12:7c:7a:7c:7a:7a:aa:76:d9:2f:3d:31:
                    45:96:c6:62:bf:46:eb:55:e7:48:cf:0f:37:89:33:
                    36:b1:a9:97:ed:43:5d:16:52:f8:73:e8:c2:c0:41:
                    15:ed:bc:b5:ea:5a:c7:50:17:ab:38:02:83:83:71:
                    77:03:6c:ab:ad:d4:2e:af:35:fa:ae:f7:67:0c:b7:
                    23:11:c3:75:5b:62:04:b2:00:6c:da:02:38:a0:5c:
                    a4:3d:b6:b3:af:d3:f4:b6:53:42:b9:72:ca:be:23:
                    c8:eb:52:0e:cd:51:17:30:f0:b4:d3:1c:0b:16:c5:
                    ca:02:96:b4:5f:e9:29:bf:58:3c:fe:a6:5c:04:3c:
                    56:01:da:3d:ee:2a:38:48:0a:26:8a:ab:12:4e:bf:
                    5c:51:a4:90:b0:c9:c6:d1:f7:6e:8d:2b:0a:00:a0:
                    e2:0c:fb:10:25:d5:a4:4d:48:2e:9b:a8:3f:f8:f9:
                    e1:50:15:a6:8a:7c:4c:f8:2a:6a:ed:d4:83:67:7a:
                    a8:66:a4:b8:b0:f7:30:7d:a4:11:1b:87:ab:ca:ab:
                    8e:a4:e3:ff:67:90:51:e2:a2:99:52:28:cf:58:2d:
                    2c:ce:8f:f8:ef:85:42:9e:8c:6c:18:16:47:05:7b:
                    bb:be:54:a1:54:35:99:00:6c:94:7e:b7:f3:6d:c0:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4C:5B:6B:2B:BD:D1:36:E7:AD:78:8E:94:58:CD:FA:B0:66:03:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/13
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/13/C74C5B6B2BBDD136E7AD788E9458CDFAB066030A.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/7a054d1e-8326-42a7-b1ad-02b30287b483.crl

            X509v3 Authority Key Identifier:
                keyid:F2:DE:B8:9E:39:0F:18:FF:F6:E9:CB:D1:1E:E3:F1:88:C9:AF:44:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.152.0/24
                IPv6:
                  2606:b0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:7a:7a:d9:6d:c5:9a:af:d3:c4:01:86:19:f2:44:ba:ad:26:
         bb:2d:bf:1a:58:25:b9:2c:3a:57:99:d6:9d:97:ee:8e:e2:53:
         b9:bb:6c:2f:5d:75:d3:d4:9e:ad:60:c7:57:88:e5:11:99:6c:
         52:21:7a:46:9f:99:3b:1b:68:78:c9:e3:03:3c:5f:8b:27:ae:
         fc:af:95:da:c0:08:d3:10:01:96:df:ff:1a:10:21:ee:74:de:
         b0:86:ab:f5:35:fe:41:69:f8:ed:38:25:73:a5:8e:40:c0:db:
         1c:46:4e:8a:c6:8d:45:76:51:39:f6:25:3b:8b:18:f5:c5:98:
         c2:6b:31:d9:be:5e:69:51:be:1f:23:b5:0d:3d:3a:f9:2a:23:
         92:b4:1f:d8:a1:a0:99:a5:2e:87:f1:d6:69:aa:b7:b5:c7:10:
         33:e3:40:bc:0e:77:90:94:0a:31:cb:18:5e:a5:7c:86:bc:f3:
         0f:fe:41:06:70:4a:e1:a9:77:d8:e4:38:b7:4f:3c:8e:5c:89:
         79:11:e9:eb:20:a3:26:f7:ca:ea:fd:f2:a8:bf:92:43:e6:f2:
         aa:19:9d:73:00:b7:eb:94:e5:d2:ba:89:f5:e2:5a:c9:6f:d2:
         52:76:ce:50:bf:e2:42:3f:9b:59:ca:0b:f2:09:5b:50:74:25:
         11:cb:70:de
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEF8VkrVThW1rhKLHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwNTRkMWUtODMyNi00MmE3LWIxYWQtMDJiMzAyODdi
NDgzMB4XDTIzMDQwODExMzIyNloXDTI1MDcxMTExMzIyNlowPTE7MDkGA1UEAxMy
NjJmM2QwYWYxNmIzZmMwYTViNGUxMDM3MmIwMTI5ZWY2NzcyOGY0ZDdjZjdlMWRh
N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkURJ8enx6eqp22S89
MUWWxmK/RutV50jPDzeJMzaxqZftQ10WUvhz6MLAQRXtvLXqWsdQF6s4AoODcXcD
bKut1C6vNfqu92cMtyMRw3VbYgSyAGzaAjigXKQ9trOv0/S2U0K5csq+I8jrUg7N
URcw8LTTHAsWxcoClrRf6Sm/WDz+plwEPFYB2j3uKjhICiaKqxJOv1xRpJCwycbR
926NKwoAoOIM+xAl1aRNSC6bqD/4+eFQFaaKfEz4Kmrt1INneqhmpLiw9zB9pBEb
h6vKq46k4/9nkFHioplSKM9YLSzOj/jvhUKejGwYFkcFe7u+VKFUNZkAbJR+t/Nt
wFRbAgMBAAGjggNUMIIDUDAdBgNVHQ4EFgQUx0xbayu90TbnrXiOlFjN+rBmAwow
gcQGCCsGAQUFBwELBIG3MIG0MCgGCCsGAQUFBzAFhhxyc3luYzovL3Jwa2kuY28v
cmVwby9IWVNQLzEzMFUGCCsGAQUFBzAKhklyc3luYzovL3Jwa2kuY28vcmVwby9I
WVNQLzEzL0M3NEM1QjZCMkJCREQxMzZFN0FENzg4RTk0NThDREZBQjA2NjAzMEEu
bWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY28vcnJkcC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3
Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdhMDU0ZDFlLTgzMjYtNDJhNy1iMWFk
LTAyYjMwMjg3YjQ4My83YTA1NGQxZS04MzI2LTQyYTctYjFhZC0wMmIzMDI4N2I0
ODMuY3JsMB8GA1UdIwQYMBaAFPLeuJ45Dxj/9unL0R7j8YjJr0QdMA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDkt
YWNjZS0xMzcyMjdlOTcxYWMvN2EwNTRkMWUtODMyNi00MmE3LWIxYWQtMDJiMzAy
ODdiNDgzLmNlcjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEABeVmDANBAIA
AjAHAwUAJgawwDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB6enrZbcWar9PEAYYZ8kS6rSa7Lb8aWCW5LDpX
mdadl+6O4lO5u2wvXXXT1J6tYMdXiOURmWxSIXpGn5k7G2h4yeMDPF+LJ678r5Xa
wAjTEAGW3/8aECHudN6whqv1Nf5BafjtOCVzpY5AwNscRk6Kxo1FdlE59iU7ixj1
xZjCazHZvl5pUb4fI7UNPTr5KiOStB/YoaCZpS6H8dZpqre1xxAz40C8DneQlAox
yxhepXyGvPMP/kEGcErhqXfY5Di3TzyOXIl5EenrIKMm98rq/fKov5JD5vKqGZ1z
ALfrlOXSuon14lrJb9JSds5Qv+JCP5tZygvyCVtQdCURy3De
-----END CERTIFICATE-----