Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/59e66056-68de-497c-8268-aaf99448f9e5.cer
File:                     59e66056-68de-497c-8268-aaf99448f9e5.cer (raw, json)
Hash identifier:          zgyOz1cQ1WcyFaVrkyBEEqXQ3uW5cqOYz9UGhJS2n/8=
Subject key identifier:   8A:C8:DE:A0:F8:D3:88:89:C4:79:0F:6C:23:60:CF:C4:1C:A1:01:EA
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858420FA7E9C83625C14D83E8D200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/59e66056-68de-497c-8268-aaf99448f9e5/59e66056-68de-497c-8268-aaf99448f9e5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/59e66056-68de-497c-8268-aaf99448f9e5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 May 2023 06:00:43 +0000
Certificate not after:    Tue 02 Sep 2025 06:00:43 +0000
Subordinate resources:    AS: 14670
                          IP: 65.181.111.0 -- 65.181.113.255
                          IP: 65.181.116.0/24
                          IP: 65.181.118.0/24
                          IP: 65.181.120.0/21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0f:a7:e9:c8:36:25:c1:4d:83:e8:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 31 06:00:43 2023 GMT
            Not After : Sep  2 06:00:43 2025 GMT
        Subject: CN=59e66056-68de-497c-8268-aaf99448f9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:a7:bf:17:de:95:68:de:d9:8b:7b:05:7e:
                    bb:90:36:c3:4c:85:01:e5:3b:c5:4a:04:88:63:12:
                    83:7e:f4:fc:0e:3e:ea:43:e1:08:6f:d7:c5:00:c0:
                    6b:7e:8e:69:6d:8d:43:ec:fb:6e:92:5d:e6:47:9a:
                    37:6c:fc:5e:2b:aa:de:23:d7:b9:3a:ee:98:71:b9:
                    bd:ef:2a:63:4b:0c:11:e5:18:d6:c9:b4:c9:49:24:
                    ac:b9:92:d0:d9:5c:d0:a8:63:21:40:b9:31:40:a5:
                    1e:67:57:92:ff:ce:24:2d:7c:82:c6:1c:eb:b8:f0:
                    61:6a:bd:3b:3d:e6:a1:d6:77:a9:ea:de:b3:2f:e8:
                    24:9f:91:5e:01:54:d1:f8:9d:29:9f:ca:bb:d3:ba:
                    65:23:f1:9e:db:af:da:1c:cc:be:ec:bb:d8:3a:b5:
                    bf:45:94:01:0d:94:27:f4:62:16:68:b7:1b:79:89:
                    e7:50:12:aa:3d:8b:76:8a:fa:fc:3f:ee:31:3c:ea:
                    e2:bf:eb:79:17:e8:a6:06:2b:c9:ce:88:5a:c4:8f:
                    72:5d:2a:c6:3e:68:f3:e8:be:90:64:20:0d:dd:a2:
                    0a:99:6e:09:f2:10:40:66:d9:bf:33:57:fd:99:b0:
                    82:6c:77:1a:c0:33:dc:e7:a4:c2:d3:17:e1:6e:7b:
                    02:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C8:DE:A0:F8:D3:88:89:C4:79:0F:6C:23:60:CF:C4:1C:A1:01:EA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/59e66056-68de-497c-8268-aaf99448f9e5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/59e66056-68de-497c-8268-aaf99448f9e5/59e66056-68de-497c-8268-aaf99448f9e5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.111.0-65.181.113.255
                  65.181.116.0/24
                  65.181.118.0/24
                  65.181.120.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14670

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:16:c5:3f:0a:eb:a0:37:85:dc:b8:f6:34:02:a5:34:3f:42:
         7f:43:8e:da:db:58:3b:ab:20:7d:3e:8c:80:96:51:fd:9c:6f:
         4b:1b:a5:68:35:de:d8:3d:08:e4:b7:72:db:d1:7e:fc:20:e6:
         aa:09:73:b9:a8:02:01:f6:7b:3f:da:ff:e4:e9:17:00:bb:bb:
         de:39:2b:98:d6:f1:80:86:ff:23:ac:28:1e:31:f4:bb:b8:62:
         1e:b4:41:a4:4b:c7:bb:79:09:1c:2a:4e:b6:26:1e:7d:c3:8d:
         08:1c:e2:2b:0b:64:3d:38:aa:86:35:33:3f:61:ac:6b:55:a8:
         83:b6:fc:9a:07:a4:3e:30:fa:7c:51:44:8b:a7:68:c1:c9:56:
         a4:b2:09:96:ad:cd:9b:b3:e3:d9:3d:3f:51:69:d5:27:59:1f:
         ae:39:4d:7a:56:ea:a1:69:53:cc:08:6a:41:b0:7c:75:ae:a4:
         4a:c2:04:f8:ba:80:a9:53:c5:ca:1f:f7:14:fa:d0:92:34:f2:
         49:49:78:e3:9a:ce:43:5e:e1:cf:7d:eb:3e:32:a6:28:95:1b:
         b0:5a:4b:ec:1a:26:2b:52:5d:76:e7:8f:b9:be:0b:04:9b:29:
         ed:21:44:a2:86:df:23:2b:de:67:f3:be:06:5e:0f:44:9f:de:
         2f:81:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:49 2023 by rpki-client on console-fra.rpki-client.org