Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5.cer
File:                     6eaf8e46-1c3c-40d4-8479-327c364c3dd5.cer (raw, json)
Hash identifier:          NU/BNPPBDgctAQiE28rmfIe/46v9zepBcL9g+3Zw4U0=
Subject key identifier:   F4:CF:FE:67:40:8E:6F:BA:7E:84:02:B0:2E:F3:0D:26:6D:2A:E7:76
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285842282B8520DE65984336A2B880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5/6eaf8e46-1c3c-40d4-8479-327c364c3dd5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 09 Jun 2023 00:45:17 +0000
Certificate not after:    Thu 11 Sep 2025 00:45:17 +0000
Subordinate resources:    AS: 23133
                          IP: 204.14.72.0/21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:28:2b:85:20:de:65:98:43:36:a2:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jun  9 00:45:17 2023 GMT
            Not After : Sep 11 00:45:17 2025 GMT
        Subject: CN=6eaf8e46-1c3c-40d4-8479-327c364c3dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:dd:64:60:c5:c1:83:b0:97:c2:e6:bd:7b:57:
                    5d:b1:ae:2f:73:f5:4c:fe:30:58:73:7e:87:71:a5:
                    1b:bb:ba:58:c5:43:2c:5a:e9:2c:3d:43:72:fc:e1:
                    8c:a8:bd:f5:3d:46:62:1d:e0:91:ce:13:a7:69:db:
                    74:b8:a2:e9:60:eb:5d:11:4b:72:f5:f5:27:8d:ce:
                    a2:2b:ae:f4:6f:3c:1f:ff:ba:4f:31:14:5f:f6:1b:
                    f0:ea:c9:85:82:7d:47:24:c9:fd:55:12:b0:8e:4d:
                    27:8c:37:69:e9:c8:b3:b4:27:02:18:42:5c:2f:c9:
                    b9:b8:42:9e:49:8c:f7:e5:8d:d7:7d:6c:ee:0c:5a:
                    6c:bf:ff:4d:fb:60:91:c8:af:6c:f2:cc:3e:b1:2a:
                    75:86:de:87:19:8e:13:a7:e0:8c:e4:be:5a:7e:ad:
                    47:b4:89:9a:e9:42:e9:c3:59:6f:9e:d5:44:2b:3c:
                    18:cf:b7:4e:02:e4:04:b0:f8:ac:52:8c:08:15:bc:
                    c8:75:52:77:86:8d:d6:38:dc:17:47:a5:2d:db:dc:
                    34:fa:05:22:8d:4b:69:f8:b1:c1:f1:5f:9b:79:69:
                    c4:94:a9:50:7b:b4:fc:5c:34:3f:d8:0a:f7:2f:92:
                    31:bf:62:10:b1:b6:42:03:ba:d5:23:50:17:be:26:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CF:FE:67:40:8E:6F:BA:7E:84:02:B0:2E:F3:0D:26:6D:2A:E7:76
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5/6eaf8e46-1c3c-40d4-8479-327c364c3dd5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.72.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23133

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:6b:19:cd:04:15:7e:bb:28:a5:4d:8f:cb:90:ae:16:cd:33:
         48:7d:a3:94:f7:1c:90:02:4d:3e:aa:40:18:30:72:8d:e5:39:
         72:f4:dc:cc:ff:f9:59:ea:ce:54:88:e8:7d:24:bb:87:ee:c3:
         d5:00:01:24:17:a8:f1:3d:ff:6a:f5:92:a7:5b:54:18:2f:27:
         04:30:3e:a3:42:65:19:f7:e5:04:ab:6a:9b:f7:c9:c4:04:ad:
         63:af:15:b4:41:32:44:47:e6:90:d5:21:39:9d:bb:d9:37:ea:
         36:00:d2:71:03:77:73:a2:20:eb:63:ef:47:98:fe:5b:4e:56:
         1a:35:17:6a:9d:ab:2d:55:93:3b:8f:fd:d9:65:e0:46:59:f4:
         e9:30:20:5b:30:a8:e5:2e:54:c8:f2:92:e7:6f:e9:4d:21:ff:
         c4:53:c9:a2:c9:8e:40:90:5d:fc:f8:71:71:a8:04:64:68:27:
         69:48:af:35:70:ba:9a:ed:df:f9:45:8a:0e:5a:1d:06:d2:09:
         70:30:51:4e:35:c2:dc:9f:31:b3:2c:77:b1:3d:66:ef:3a:eb:
         ab:ec:6b:9b:2f:e0:e7:7e:c6:2d:1c:42:92:b7:ce:d3:66:03:
         a2:0a:7b:dd:38:3a:94:ab:38:18:9a:99:5d:e3:94:73:bb:13:
         66:d8:d3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 12:51:54 2023 by rpki-client on console-ams.rpki-client.org