Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8ad18c7e45cc43956a3d4c18c88a58a993fb8af0ea.cer
File:                     1822fe9c8ad18c7e45cc43956a3d4c18c88a58a993fb8af0ea.cer (raw, json)
Hash identifier:          s//cNMThbjQui3wEPHHaxqbNsFZepSYr07TvqJ7uRKE=
Subject key identifier:   C9:B9:58:A1:C3:97:34:37:4D:5F:A4:5E:C8:A6:A7:2E:B9:AA:41:4B
Authority key identifier: 85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69
Certificate issuer:       /CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a
Certificate serial:       010D0C9F43285843DD3BFB5647B1CA58EF92D600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/C9B958A1C39734374D5FA45EC8A6A72EB9AA414B.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 12 Nov 2023 14:06:42 +0000
Certificate not after:    Sat 14 Feb 2026 14:06:42 +0000
Subordinate resources:    IP: 23.145.56.0/23
                          IP: 2602:fab8::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:dd:3b:fb:56:47:b1:ca:58:ef:92:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a
        Validity
            Not Before: Nov 12 14:06:42 2023 GMT
            Not After : Feb 14 14:06:42 2026 GMT
        Subject: CN=1822fe9c8ad18c7e45cc43956a3d4c18c88a58a993fb8af0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:52:e3:5f:e6:1d:26:cb:b4:fc:aa:c7:b1:
                    77:3e:30:17:a2:22:ce:9c:66:66:bc:25:83:14:25:
                    c6:03:03:d5:35:28:37:1e:46:12:74:58:91:75:d7:
                    77:23:ab:8c:a6:3f:a8:3f:78:6d:96:33:ba:5f:61:
                    4a:51:47:5f:ca:3c:96:43:54:fc:a1:bd:27:b6:57:
                    4f:e0:dc:94:b9:76:84:da:2c:bf:ed:3e:9f:22:35:
                    1e:c7:0b:3b:32:2e:ec:77:6e:7d:30:b3:f0:3d:b1:
                    f7:78:22:5d:cc:c8:b9:a2:0b:2b:20:03:24:ee:46:
                    c1:44:bf:72:f1:c1:55:5e:19:7d:aa:b8:2e:4f:bf:
                    74:ea:d7:88:7c:12:ff:8f:3b:f6:df:90:62:45:9d:
                    4d:c3:d8:1a:d0:69:95:ed:97:6d:6c:23:e0:dd:c7:
                    12:ff:d3:e2:82:78:a9:3c:02:25:2c:5f:c9:46:43:
                    dd:27:6c:3a:12:a4:bd:3c:b0:e3:74:e6:4f:2f:73:
                    c4:6b:40:84:ed:75:11:02:f8:68:4c:9a:e3:d1:a9:
                    f1:c5:20:78:7c:bc:3a:51:8a:79:6f:41:02:80:0c:
                    07:bf:06:63:5c:18:2e:6e:15:8b:39:8c:9d:b4:80:
                    8b:e5:c5:af:4f:74:64:ba:58:6d:0a:c2:de:8b:be:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B9:58:A1:C3:97:34:37:4D:5F:A4:5E:C8:A6:A7:2E:B9:AA:41:4B
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/C9B958A1C39734374D5FA45EC8A6A72EB9AA414B.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl

            X509v3 Authority Key Identifier:
                keyid:85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.56.0/23
                IPv6:
                  2602:fab8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e6:3c:42:9d:53:55:67:f9:42:ef:0a:25:85:fc:03:d9:54:
         80:3d:6e:ff:32:2a:48:79:df:13:52:d8:14:54:3a:37:21:a7:
         d7:32:d8:fc:24:51:20:7c:71:8a:76:3d:e9:77:ec:7f:09:24:
         ae:9f:7c:d4:13:46:d2:47:3f:ba:fd:b1:0c:6a:26:8b:d9:e5:
         15:b6:29:3a:20:5d:2b:66:b5:1d:18:8c:8a:b2:a2:1a:b9:6c:
         93:8b:7c:de:fa:e3:0b:8e:91:c0:46:3b:6b:74:9e:4b:6c:8e:
         6a:88:b4:a9:31:89:1d:36:9f:b9:7a:29:53:b0:e6:97:c0:1e:
         17:9e:a5:48:5c:02:d4:a2:2c:39:e5:b9:6b:bc:2b:eb:a6:ba:
         ea:0c:87:a3:e1:52:33:7c:ba:a1:7b:24:d8:d2:7e:5c:5c:8b:
         cd:ee:e7:f2:02:ed:95:31:04:24:95:4d:27:21:6d:08:b4:5a:
         08:30:dc:65:dc:5b:c0:83:8f:cf:25:91:64:69:62:87:d0:98:
         11:a4:5d:2c:81:cb:6b:f8:b3:f0:40:a9:4a:ad:e3:1a:ee:d4:
         49:2f:9c:7d:2f:34:5f:da:e6:36:33:79:ff:79:ea:bb:b7:9d:
         05:16:8f:7d:5d:f7:1c:14:30:c9:56:25:90:ba:b4:dd:02:32:
         ee:3f:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 12 16:11:57 2023 by rpki-client on console-fra.rpki-client.org