Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f102651b-cc87-453f-82a5-56bf50091721.cer
File:                     f102651b-cc87-453f-82a5-56bf50091721.cer (raw, json)
Hash identifier:          kwXOxKly1z7sPdNSCNrSJ7eT7ABLIAnMiTr4TSZWy1M=
Subject key identifier:   F9:07:6D:59:72:73:80:65:68:F1:EF:65:BD:CC:29:5C:E3:0C:41:15
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583B7DDD5308DDA7DEB9B1C9E380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f102651b-cc87-453f-82a5-56bf50091721/f102651b-cc87-453f-82a5-56bf50091721.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f102651b-cc87-453f-82a5-56bf50091721/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Aug 2021 14:03:54 +0000
Certificate not after:    Mon 04 Aug 2031 14:03:54 +0000
Subordinate resources:    AS: 399904
                          IP: 23.186.48.0/24
                          IP: 165.140.216.0/22
                          IP: 2602:fc45::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:7d:dd:53:08:dd:a7:de:b9:b1:c9:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug  4 14:03:54 2021 GMT
            Not After : Aug  4 14:03:54 2031 GMT
        Subject: CN=f102651b-cc87-453f-82a5-56bf50091721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:c7:a6:92:7e:27:42:b2:f3:24:42:9e:4c:
                    14:1c:3e:11:32:90:df:9d:d4:a2:f5:fe:71:7d:63:
                    0a:40:8c:5e:34:fc:c1:5e:20:58:f6:64:d5:50:93:
                    3a:77:67:bb:e4:75:02:c0:3a:5e:fc:d6:eb:d4:51:
                    f2:5d:7b:54:56:61:38:f7:93:f0:cd:89:c5:8c:97:
                    cc:8a:c7:bf:98:58:78:d0:58:84:98:a3:7e:c0:ea:
                    2f:28:22:f9:4f:e3:0b:d2:5d:ee:a5:23:4a:d8:d5:
                    7d:08:fa:fc:83:bc:a8:f1:c1:cd:b8:fd:77:2c:1b:
                    1c:05:fd:47:65:3b:11:2a:52:06:eb:7c:ad:f0:cd:
                    30:39:5c:af:7e:97:a9:ba:04:a3:a6:8c:01:51:b1:
                    f0:ce:1b:d6:85:76:aa:db:19:5c:a5:93:d6:0a:e2:
                    89:35:05:fb:e1:32:a9:1a:92:f4:0c:90:6c:7a:56:
                    8c:5f:3a:0b:21:33:0c:b5:18:52:54:aa:42:e1:c7:
                    9d:eb:ca:71:c8:56:f9:a3:b0:c4:49:96:e1:41:a3:
                    ca:03:68:36:89:ed:47:9f:17:65:5a:e3:95:a9:9d:
                    b9:4a:93:ae:2b:cb:5e:90:59:45:03:e5:23:a9:f8:
                    9a:c2:6b:11:9b:e1:cf:c7:e8:3f:03:b6:87:d0:e0:
                    e1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:07:6D:59:72:73:80:65:68:F1:EF:65:BD:CC:29:5C:E3:0C:41:15
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f102651b-cc87-453f-82a5-56bf50091721/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f102651b-cc87-453f-82a5-56bf50091721/f102651b-cc87-453f-82a5-56bf50091721.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.48.0/24
                  165.140.216.0/22
                IPv6:
                  2602:fc45::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399904

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:52:a0:37:eb:ea:e7:18:90:d9:88:c9:e5:49:4a:44:67:
         cb:02:c3:1b:18:64:d5:b6:e7:29:5b:fc:96:38:dd:b8:bd:f7:
         01:3c:0d:34:3e:3c:a6:d3:5d:d7:36:d9:6c:8e:bd:e2:1e:db:
         74:03:dc:78:fb:12:ad:7e:31:1c:21:01:57:d5:d0:1c:49:a7:
         ee:78:ab:3c:17:d1:d7:85:d2:44:98:f6:1b:b5:44:0a:11:a5:
         00:6c:6d:40:6c:ee:e5:93:e6:27:c8:7e:c6:86:90:21:6e:a4:
         e8:cd:85:61:f7:2d:d6:22:97:3e:6e:71:44:70:99:56:15:af:
         5f:e1:cb:42:d5:d0:f1:2e:6a:3f:3f:1e:97:35:a4:56:76:41:
         ee:d4:8a:f9:d1:09:7f:9c:5a:f2:01:1b:ca:d1:7c:13:10:48:
         24:d5:1c:7d:49:06:57:af:0e:db:89:90:c0:52:5b:c6:c3:6b:
         fb:2d:3d:d0:ab:0d:03:4b:bb:93:6f:ac:89:dd:88:93:c4:f1:
         f3:30:e4:1b:1f:39:21:0c:e7:ae:58:0c:c5:b1:04:03:76:2d:
         56:bc:ab:64:26:38:ac:26:d7:f7:1c:42:b9:f8:f9:79:02:cf:
         88:bb:14:ef:7d:7e:4e:a0:ff:8f:4f:7b:15:7a:42:20:88:c9:
         c3:a1:a1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:44 2023 by rpki-client on console-ams.rpki-client.org