Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a4bfe4df-e9be-48ba-adef-e1b0c039f9a1.cer
File:                     a4bfe4df-e9be-48ba-adef-e1b0c039f9a1.cer (raw, json)
Hash identifier:          kcqfwUYlUTg2JwFkcpRLa4KOSiq8F82JBHCAQuboD9w=
Subject key identifier:   C5:50:F7:F6:8A:AA:ED:A4:F9:2B:C5:F9:45:CB:9F:C3:3D:4B:ED:4E
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583C3355283ED02D3626CB2ED3A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a4bfe4df-e9be-48ba-adef-e1b0c039f9a1/a4bfe4df-e9be-48ba-adef-e1b0c039f9a1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a4bfe4df-e9be-48ba-adef-e1b0c039f9a1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 09 Dec 2021 20:01:27 +0000
Certificate not after:    Tue 09 Dec 2031 20:01:27 +0000
Subordinate resources:    AS: 400261
                          IP: 23.129.56.0/24
                          IP: 2602:fbff::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:33:55:28:3e:d0:2d:36:26:cb:2e:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec  9 20:01:27 2021 GMT
            Not After : Dec  9 20:01:27 2031 GMT
        Subject: CN=a4bfe4df-e9be-48ba-adef-e1b0c039f9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:78:28:77:0b:45:30:fe:58:9e:a8:bc:fe:
                    21:ac:29:ec:8c:d8:cc:3f:95:de:8f:1b:01:3e:7c:
                    06:d7:2e:fc:88:b9:a0:54:35:5f:7d:c1:db:42:78:
                    a1:dc:06:de:19:13:a3:31:a7:bc:a3:d5:5d:05:7d:
                    1e:79:6e:44:1d:db:bd:c0:41:e4:2a:ec:33:01:1a:
                    90:da:3b:57:8e:ba:2c:37:8a:e5:84:94:8a:d0:0b:
                    fd:95:5e:e7:02:fe:e0:2c:54:6a:30:42:46:36:05:
                    99:e8:cf:a6:75:96:c2:10:9b:79:9a:3f:a0:0b:f3:
                    fb:cb:b4:45:19:2b:14:18:5b:ed:d4:2d:f7:49:f9:
                    dd:b2:02:d1:51:e4:c3:81:31:ff:53:ae:45:79:a1:
                    fc:ab:70:42:d1:f9:6e:c9:d7:af:c5:9c:74:03:1c:
                    91:b9:0c:24:79:70:77:b6:e5:83:d0:c7:32:92:e4:
                    99:81:11:84:d0:0a:37:9e:b7:1b:a5:be:d1:19:a4:
                    51:ad:b9:d9:af:66:19:50:b7:2f:f2:a3:14:82:a4:
                    9b:03:a9:af:48:f5:7c:99:23:53:c0:bd:72:c7:d4:
                    4b:a3:69:af:bc:a1:01:66:5f:75:01:42:36:39:4b:
                    6c:8f:ed:ac:bc:4e:99:a8:b4:7f:e0:bd:e5:26:ae:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:50:F7:F6:8A:AA:ED:A4:F9:2B:C5:F9:45:CB:9F:C3:3D:4B:ED:4E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a4bfe4df-e9be-48ba-adef-e1b0c039f9a1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a4bfe4df-e9be-48ba-adef-e1b0c039f9a1/a4bfe4df-e9be-48ba-adef-e1b0c039f9a1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.56.0/24
                IPv6:
                  2602:fbff::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400261

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:85:cc:2a:9c:ec:d1:32:f1:54:37:ec:12:98:7d:11:cf:b1:
         da:ce:b7:9e:50:1f:5b:d4:30:71:2b:98:51:32:a3:83:d8:0f:
         94:74:a8:5c:32:70:86:46:64:58:21:db:e6:c5:cc:9c:cc:48:
         3c:5b:79:aa:d1:90:63:4b:14:17:b5:c1:86:d0:d7:85:fa:bc:
         b4:16:db:62:b0:5e:bf:6f:f8:1d:39:87:08:d6:cb:e8:8e:f8:
         9f:fb:17:75:42:c4:1a:f6:b1:a6:06:46:eb:9b:41:14:25:1d:
         b7:6f:5c:06:9e:8f:3c:86:6d:76:9e:94:4e:61:29:37:2a:87:
         91:ce:8c:c7:1d:98:12:64:10:c1:ef:9a:37:2f:26:51:e6:38:
         ee:1c:58:25:d3:bd:c5:15:06:e2:ce:a3:69:9d:01:42:33:84:
         89:94:15:6c:92:95:07:f8:e0:a2:f5:98:1e:7c:0e:9c:5e:58:
         b9:bd:80:c0:5e:0d:e3:8f:41:c8:5b:aa:9b:e3:0b:51:cb:e6:
         39:da:ed:4f:9f:a1:ec:76:52:4a:34:2f:7d:12:33:64:c4:6f:
         8b:fb:39:da:c6:21:ce:3c:a6:42:4e:4c:47:10:77:3e:b7:2d:
         9e:d2:5d:9f:d9:4a:d8:1a:1a:6f:25:8e:25:af:0a:48:3d:8f:
         c3:58:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:39 2023 by rpki-client on console-ams.rpki-client.org