Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27.cer
File:                     6cf82a88-daad-4851-a26a-7cc5a47f0a27.cer (raw, json)
Hash identifier:          1VIxxGRl6tlgCGdg4zwvE5zEjhdUgAFrUrFg+/rk0vM=
Subject key identifier:   57:DE:AF:19:10:B7:70:6F:A4:3F:E3:92:57:E4:F2:C8:36:E1:67:BD
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584104B83A24E035F5F9C2789F40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27/6cf82a88-daad-4851-a26a-7cc5a47f0a27.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 24 Feb 2023 15:12:45 +0000
Certificate not after:    Thu 29 May 2025 14:12:45 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:04:b8:3a:24:e0:35:f5:f9:c2:78:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb 24 15:12:45 2023 GMT
            Not After : May 29 14:12:45 2025 GMT
        Subject: CN=6cf82a88-daad-4851-a26a-7cc5a47f0a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a3:12:3e:62:13:da:17:ab:88:73:c2:b9:70:
                    16:39:63:40:c6:f7:a9:27:1b:d0:d2:eb:e9:c9:7c:
                    77:c2:ea:cc:fb:6e:53:15:1e:5b:26:b7:4a:07:cd:
                    b6:f9:33:40:dc:0a:45:1c:65:60:56:44:14:57:c0:
                    ac:d4:44:81:35:74:38:1e:88:9b:16:63:15:6b:51:
                    c4:bc:55:a9:0d:8b:1b:b4:9e:c6:15:8a:7f:d3:00:
                    81:64:15:bc:f1:1d:b5:51:89:5b:dd:5e:ae:bf:5b:
                    87:53:cd:ed:3a:f2:db:83:67:51:e3:2c:57:6e:2b:
                    2f:e5:00:ff:f4:59:ca:51:eb:c5:59:29:a3:4f:64:
                    b7:1a:58:b0:d7:f3:4a:cf:48:d8:9e:f3:0f:3e:4a:
                    06:12:8a:fe:ad:21:aa:f2:a2:da:73:c0:55:00:6b:
                    d3:79:87:f4:c5:78:aa:32:3e:98:7d:a0:8f:be:9b:
                    93:86:00:cd:b3:29:06:02:75:74:b1:84:92:91:75:
                    ec:21:a8:44:24:a9:1b:4c:af:ac:aa:dc:ed:79:2f:
                    69:1d:a2:9c:8a:fc:16:87:cb:23:05:f4:75:9a:77:
                    7d:e6:c1:3c:53:74:df:98:72:14:43:dc:5d:16:34:
                    0b:b0:b0:b8:5a:c6:b9:1a:46:40:5e:f3:fa:a3:db:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DE:AF:19:10:B7:70:6F:A4:3F:E3:92:57:E4:F2:C8:36:E1:67:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27/6cf82a88-daad-4851-a26a-7cc5a47f0a27.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:5b:94:5a:f1:c6:2a:79:0f:29:bd:8c:3d:8e:50:69:f4:b1:
         52:81:e5:95:62:ef:64:15:d8:8c:69:37:25:0b:3e:af:f7:62:
         40:9f:8f:00:ca:21:95:60:31:c0:b3:d8:57:c8:53:ca:76:a6:
         78:0b:bd:0a:3f:87:97:d7:b6:2e:64:09:da:0a:1c:9a:0f:3f:
         48:21:24:11:77:27:d0:7f:15:93:5a:dc:2c:83:ae:24:e5:e7:
         49:f7:8f:04:b2:fd:ed:b7:da:f1:e7:20:32:94:18:74:7c:5d:
         95:9a:a4:5b:5e:50:23:e2:06:13:da:88:13:fe:d8:f1:54:24:
         78:3b:4a:bb:30:61:c8:46:b8:4a:18:79:50:ac:27:c4:01:24:
         b9:13:21:37:40:89:c2:f9:f5:a0:f4:9a:b8:43:e6:9f:41:95:
         70:d7:bc:ca:c7:6c:35:9b:58:70:ed:63:36:1c:c2:b8:d4:08:
         93:96:9b:73:b2:65:7e:e5:2f:0a:4f:bd:04:cb:70:e3:15:f8:
         c9:0a:6b:9a:01:72:39:ef:18:d5:03:9a:6a:1c:28:5c:b5:7b:
         46:d8:ec:42:ed:b7:e7:8c:2e:d1:e2:fd:2d:6f:9d:5c:d5:c2:
         01:04:65:60:9a:eb:16:6e:ae:43:1a:40:8c:29:27:ec:c5:6a:
         33:55:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:45 2023 by rpki-client on console-ams.rpki-client.org