Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/734c00cc-4578-4851-a80c-0e65325139a6.cer
File:                     734c00cc-4578-4851-a80c-0e65325139a6.cer (raw, json)
Hash identifier:          77zVhrt8ecBGVnAmrzJ9+0VTKN3oBEeZIDAdm1/gYlc=
Subject key identifier:   36:0E:C3:01:7A:76:23:2E:C9:50:AA:B4:37:BD:90:15:62:00:9F:02
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285842D541F6C3C9F4A98FB38C5100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/734c00cc-4578-4851-a80c-0e65325139a6/734c00cc-4578-4851-a80c-0e65325139a6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/734c00cc-4578-4851-a80c-0e65325139a6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 10 Aug 2023 00:45:21 +0000
Certificate not after:    Wed 12 Nov 2025 01:45:21 +0000
Subordinate resources:    AS: 29770
                          IP: 23.146.232.0/24
                          IP: 2602:faae::/40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d5:41:f6:c3:c9:f4:a9:8f:b3:8c:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 10 00:45:21 2023 GMT
            Not After : Nov 12 01:45:21 2025 GMT
        Subject: CN=734c00cc-4578-4851-a80c-0e65325139a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:c0:2f:be:26:e8:01:bc:d3:66:f9:e3:3f:
                    dc:3b:16:1f:c8:94:50:e6:41:11:e5:36:c0:e4:36:
                    83:b2:92:a2:ea:c3:47:f8:04:56:dd:42:77:cf:20:
                    62:8b:bc:87:9d:ce:3c:93:ec:f2:58:e8:3a:cc:ee:
                    dd:72:44:62:5e:b9:7c:60:3d:99:8d:85:55:8b:0a:
                    32:db:76:a4:c0:32:62:37:43:35:cc:8a:64:c8:ed:
                    ce:58:0f:60:b3:56:b6:d0:2c:02:0d:1d:9a:0e:d8:
                    ef:d7:5f:96:c6:e2:bf:78:64:d4:8a:89:1b:e0:8f:
                    cc:63:92:bf:2d:6f:e1:83:93:fc:55:8f:65:64:cd:
                    e6:ab:10:c8:f6:40:d7:23:13:11:e6:aa:89:8a:13:
                    26:f2:db:45:5e:b0:07:14:7b:3f:30:dd:f4:76:f2:
                    6a:04:f2:8f:9f:39:ce:de:5f:2e:78:b8:ac:da:d3:
                    65:b2:f1:3e:a4:a3:89:8b:cb:e1:56:7e:29:4f:3a:
                    7a:e6:a3:c8:6d:9c:73:bd:f7:b3:d2:08:fd:ec:87:
                    90:d8:d7:9d:11:20:a8:6f:b7:37:e1:8e:b6:0b:f3:
                    3e:bd:45:08:d0:b9:f2:5e:fa:af:5d:53:29:3b:31:
                    d5:ee:a3:30:e8:1a:02:c6:4c:cf:cb:77:22:94:43:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0E:C3:01:7A:76:23:2E:C9:50:AA:B4:37:BD:90:15:62:00:9F:02
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/734c00cc-4578-4851-a80c-0e65325139a6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/734c00cc-4578-4851-a80c-0e65325139a6/734c00cc-4578-4851-a80c-0e65325139a6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.232.0/24
                IPv6:
                  2602:faae::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29770

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:0b:bb:de:cc:b3:02:23:52:f1:0d:cf:ca:00:65:06:d8:96:
         ae:22:c9:d0:76:72:b0:ce:00:16:c1:e6:f7:05:5f:25:04:fe:
         a6:91:c0:68:ff:2a:4f:7b:10:b2:7d:1e:97:f7:2b:9a:38:fb:
         68:d6:92:7a:58:0a:4a:85:2a:06:25:ad:df:29:2a:e6:40:be:
         e2:a0:b9:33:b4:5f:f0:e9:ce:ed:6f:11:48:71:ee:9a:b2:c2:
         55:4a:48:65:dc:52:9b:ed:b9:42:79:e8:60:c6:e8:64:7d:93:
         c2:21:f9:b3:43:53:b4:7a:03:c9:4e:20:42:b7:51:a6:0f:8f:
         82:f7:24:85:8f:4e:10:00:25:62:97:72:4f:55:33:ed:27:c7:
         43:7d:38:6c:16:79:b8:fd:e1:ff:52:21:f9:18:78:c0:db:52:
         94:2a:52:ab:9d:d8:15:2f:94:f4:ef:0f:33:26:1e:ea:55:0d:
         3e:e1:8d:30:24:8b:e3:44:81:67:dc:4f:50:8c:1f:49:7c:76:
         73:cd:81:6f:c4:f9:77:63:1a:cc:77:31:6a:6f:85:ce:19:d5:
         94:19:00:fa:6a:7c:d1:39:a8:08:82:c6:e4:dd:bb:b0:42:ac:
         bb:5b:9e:d2:7c:3a:a5:cf:87:d8:37:dd:3e:91:c9:d4:d5:a7:
         eb:d4:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 16:26:18 2023 by rpki-client on console-fra.rpki-client.org