Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9eb478eb-4b47-41cf-bc22-79794ca0d4b8.cer
File:                     9eb478eb-4b47-41cf-bc22-79794ca0d4b8.cer (raw, json)
Hash identifier:          ru/sEkwrH9hnB94FvJI7Vx7rmwILOXuWopg8B6XqTgc=
Subject key identifier:   20:08:C0:E5:6D:0B:E5:DC:60:A1:33:75:A9:B3:42:D6:68:30:1C:D5
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583E027D5A892CB5B59498D96840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9eb478eb-4b47-41cf-bc22-79794ca0d4b8/9eb478eb-4b47-41cf-bc22-79794ca0d4b8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9eb478eb-4b47-41cf-bc22-79794ca0d4b8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 24 May 2022 17:41:42 +0000
Certificate not after:    Mon 26 Aug 2024 17:41:42 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:02:7d:5a:89:2c:b5:b5:94:98:d9:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 24 17:41:42 2022 GMT
            Not After : Aug 26 17:41:42 2024 GMT
        Subject: CN=9eb478eb-4b47-41cf-bc22-79794ca0d4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:c6:8f:f9:e8:c5:c8:be:bc:f4:06:1c:8e:
                    73:40:6c:da:d6:31:6e:4d:17:be:ed:36:2c:12:e1:
                    0a:22:de:ce:5b:5d:15:b6:a4:d9:a6:61:84:c4:12:
                    de:c0:dc:89:6d:26:48:d0:ad:5e:0d:37:fb:9c:ab:
                    60:39:4a:cc:8e:54:d8:40:45:f4:76:27:e8:b5:b8:
                    b0:4d:f7:09:a2:d6:21:b2:e6:cc:8f:0a:36:00:63:
                    46:93:a5:fb:1c:79:98:a9:43:41:ca:5a:2b:43:49:
                    e2:97:7a:f6:5e:3a:c1:61:b8:b4:6f:0c:8f:0e:c5:
                    36:a5:9b:b7:f8:9e:34:36:69:a0:bf:58:7a:20:c6:
                    23:02:70:5c:8e:b8:62:30:f7:93:33:3d:4d:23:4c:
                    5b:27:e9:67:1a:ce:a4:58:03:6e:2f:f1:e2:2e:98:
                    d2:46:cb:8e:0e:a3:23:2d:8f:6e:95:69:26:4d:4e:
                    cc:f9:1e:cb:e7:ab:ea:55:30:da:be:c0:23:46:b8:
                    68:dc:5d:42:87:32:50:ea:24:cd:21:84:fa:72:a6:
                    6f:1b:24:40:8c:86:30:f6:8e:0f:c7:fc:8c:f2:c7:
                    ad:83:df:46:e8:55:ff:9d:b0:88:45:e4:6a:18:2b:
                    9f:d9:e1:a2:e3:78:c1:55:5b:cc:34:7f:bf:a2:c0:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:08:C0:E5:6D:0B:E5:DC:60:A1:33:75:A9:B3:42:D6:68:30:1C:D5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9eb478eb-4b47-41cf-bc22-79794ca0d4b8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9eb478eb-4b47-41cf-bc22-79794ca0d4b8/9eb478eb-4b47-41cf-bc22-79794ca0d4b8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b2:02:d5:99:0f:81:79:38:21:ba:99:7a:92:c8:ec:91:ec:
         f5:61:44:50:2e:d6:03:24:d4:94:89:c0:a3:c7:73:7f:9b:f2:
         0b:2d:3d:f5:60:76:7a:e5:82:ed:da:f7:5b:8f:86:da:1a:82:
         82:1c:63:a4:e7:c6:f3:b9:8d:6a:6f:2e:6d:4e:cb:ca:58:4b:
         fc:3c:e6:aa:c8:a8:62:45:d9:fa:43:16:e3:30:9d:7a:0a:c6:
         52:b8:7c:81:2d:d0:74:c7:63:36:5e:82:66:66:70:ae:d8:d4:
         c9:82:d4:a1:48:33:37:8f:e4:3a:46:c6:57:6e:f5:2f:54:bb:
         a6:68:b7:69:90:ee:90:43:d2:04:86:6f:95:d3:2a:3a:8d:47:
         25:5d:50:29:ad:44:ce:a8:9b:f1:29:60:e6:75:27:79:40:77:
         00:a8:04:dc:73:a6:83:a9:79:d8:b0:45:88:da:5f:e4:d3:23:
         6b:90:b4:f0:c4:cb:8e:68:b0:dd:92:7b:ac:b0:00:7d:9c:7e:
         30:35:2b:d2:09:7c:2b:2f:9b:6a:13:94:2b:10:77:15:1f:3e:
         09:bd:72:96:7b:ff:a3:88:43:e9:26:90:c9:38:f4:8f:a2:8b:
         5b:a0:6b:c6:ad:4b:45:57:4e:8b:b4:e6:1c:ad:a3:e7:ca:db:
         1e:9d:05:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:39 2023 by rpki-client on console-ams.rpki-client.org