Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b7ee25bf-07ad-498c-82af-bf23e21b045b.cer
File:                     b7ee25bf-07ad-498c-82af-bf23e21b045b.cer (raw, json)
Hash identifier:          4a0sKUYJHAFDYGmD+FFF21iGoV+OVjR63rdJU6ZnGF0=
Subject key identifier:   DB:8D:18:46:7F:E3:9E:7B:A6:90:9D:0A:31:D2:E1:78:87:A7:BF:46
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285842BC21C52CF65F155287CF8800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b7ee25bf-07ad-498c-82af-bf23e21b045b/b7ee25bf-07ad-498c-82af-bf23e21b045b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b7ee25bf-07ad-498c-82af-bf23e21b045b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 01 Aug 2023 00:45:16 +0000
Certificate not after:    Mon 03 Nov 2025 01:45:16 +0000
Subordinate resources:    AS: 40174
                          AS: 398337
                          IP: 23.163.48.0/24
                          IP: 69.41.80.0/20
                          IP: 72.34.176.0/20
                          IP: 74.81.183.0/24
                          IP: 161.38.218.0/23
                          IP: 204.238.54.0/24
                          IP: 2602:fd4d::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:bc:21:c5:2c:f6:5f:15:52:87:cf:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Aug  1 00:45:16 2023 GMT
            Not After : Nov  3 01:45:16 2025 GMT
        Subject: CN=b7ee25bf-07ad-498c-82af-bf23e21b045b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:a9:03:b2:6e:b1:38:2f:e5:3a:56:83:d2:
                    dd:cc:55:7c:a1:49:40:5f:9c:47:10:d9:af:f3:aa:
                    8e:d3:7f:11:c9:e4:21:52:08:11:f5:a1:59:a9:f2:
                    77:86:78:c2:9d:d2:8e:a5:ba:1c:db:1d:19:ca:fa:
                    e5:da:46:55:ce:81:a3:36:a7:c3:c8:0d:a2:5a:20:
                    e3:e5:09:21:46:8a:af:e2:22:38:2b:f3:75:38:61:
                    9d:b6:4a:db:98:b3:96:f3:eb:4b:3a:52:88:63:d4:
                    7d:09:1e:7a:bc:98:cc:c8:e2:6f:89:a1:dd:ce:c4:
                    91:98:62:99:45:f8:0c:03:43:38:a7:90:af:0f:48:
                    98:b7:9e:92:2c:bf:f9:af:f5:d2:3b:f9:f9:6b:91:
                    c1:41:b6:6b:13:6e:5a:e5:c4:25:ba:51:1d:e5:f2:
                    73:ab:9e:35:85:af:c9:59:9c:dc:d3:67:fb:11:af:
                    79:1c:d0:10:1a:56:8c:06:a8:e4:7d:58:e8:a8:ff:
                    3a:6b:22:51:a1:92:44:41:c3:1d:31:22:62:d6:7c:
                    2b:5c:34:59:89:e7:fc:56:da:92:7b:72:3c:2a:38:
                    3f:bb:21:61:a9:96:ec:29:90:9c:c2:22:bf:be:ec:
                    8f:b3:c1:16:07:a1:89:d6:da:32:5c:2d:26:cd:e9:
                    cc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8D:18:46:7F:E3:9E:7B:A6:90:9D:0A:31:D2:E1:78:87:A7:BF:46
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b7ee25bf-07ad-498c-82af-bf23e21b045b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b7ee25bf-07ad-498c-82af-bf23e21b045b/b7ee25bf-07ad-498c-82af-bf23e21b045b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.48.0/24
                  69.41.80.0/20
                  72.34.176.0/20
                  74.81.183.0/24
                  161.38.218.0/23
                  204.238.54.0/24
                IPv6:
                  2602:fd4d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40174
                  398337

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:8a:96:a0:bf:3a:9e:88:00:37:10:63:02:d9:8f:aa:54:62:
         7b:57:2c:8d:bb:1f:fc:46:7a:03:7d:e0:02:13:63:ef:71:6e:
         94:ea:2f:62:82:21:05:84:ee:45:f8:2c:da:16:eb:83:29:e5:
         2a:02:7e:ae:2a:ed:fe:fc:25:59:5f:b8:91:05:13:43:31:82:
         e4:70:bb:1d:45:f2:b4:1e:e1:bf:c8:01:49:b4:33:7b:6a:bd:
         04:b6:f3:64:d2:84:0b:f4:1d:69:6d:ae:83:df:0c:e0:24:b9:
         d2:9d:d7:e9:92:a0:29:61:31:db:02:cf:39:48:38:66:9b:fa:
         a2:e6:8e:2a:fd:07:f3:f1:4d:06:56:7f:48:f6:35:6e:79:51:
         be:99:d4:33:d6:77:b8:2d:6b:35:c6:ff:07:b8:36:27:e3:d3:
         91:f3:d7:1f:d5:16:08:68:10:0e:84:87:8f:9e:b7:69:e0:fc:
         f4:14:0e:59:d0:cb:78:33:87:ec:68:c0:17:8e:a8:ca:bf:9a:
         8b:2d:7c:4e:fd:3c:39:97:9c:f0:72:11:be:13:72:f6:0c:26:
         42:39:b8:4b:ea:ef:6f:e2:d8:e4:d2:bb:10:d7:74:3f:39:18:
         bb:c8:50:c6:82:37:4c:6a:34:0c:68:df:d0:25:a2:d8:bc:32:
         3f:db:11:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 19:44:31 2023 by rpki-client on console-fra.rpki-client.org