Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/dd9d9fe5cc7c84f1b6b6ef13bcfc93717a3aefacb2504293b4.cer
File:                     dd9d9fe5cc7c84f1b6b6ef13bcfc93717a3aefacb2504293b4.cer (raw, json)
Hash identifier:          6CUyeeKAq1gGaAGopVQO/rSs1zWMpT1KgFJMwxhb/DY=
Subject key identifier:   22:4F:DC:4B:95:9C:C5:6D:54:B1:AD:6C:1A:96:2A:9C:AB:6F:32:6E
Authority key identifier: 0C:2C:DB:E8:97:EC:93:27:27:20:18:48:1B:6D:3F:C7:C6:39:BE:73
Certificate issuer:       /CN=88c69486-3e14-4f26-9f99-02cf7aaab7bf
Certificate serial:       010D0C9F432858413FC73A29F34D6E341C2DC700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/224FDC4B959CC56D54B1AD6C1A962A9CAB6F326E.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 17 Mar 2023 18:55:40 +0000
Certificate not after:    Thu 19 Jun 2025 18:55:40 +0000
Subordinate resources:    AS: 53427
                          IP: 2602:fa91::/40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:3f:c7:3a:29:f3:4d:6e:34:1c:2d:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88c69486-3e14-4f26-9f99-02cf7aaab7bf
        Validity
            Not Before: Mar 17 18:55:40 2023 GMT
            Not After : Jun 19 18:55:40 2025 GMT
        Subject: CN=dd9d9fe5cc7c84f1b6b6ef13bcfc93717a3aefacb2504293b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:52:1e:64:6e:4b:85:d2:3c:d0:b5:72:5e:
                    b4:7f:54:d0:95:0a:f9:49:90:ec:80:4a:5a:5e:54:
                    73:cd:54:3a:4e:25:7a:bf:74:35:fe:62:3f:62:77:
                    2a:3e:07:08:bf:8c:f1:8a:8d:e3:c5:0b:f4:05:0c:
                    91:e1:c6:b3:11:58:5e:34:b1:d8:5f:ef:53:a8:27:
                    e1:19:11:d6:d2:9d:9c:00:23:64:92:c9:08:63:ce:
                    a6:b3:c2:4a:11:f3:6a:9f:85:dc:8e:81:32:b1:a5:
                    16:55:a7:99:cb:ad:e1:d4:9f:52:ee:83:df:14:85:
                    17:9e:d5:e7:25:1b:6a:3c:ea:40:83:1f:93:55:b0:
                    8b:09:22:64:52:5e:f0:04:4b:fc:aa:3a:29:c0:b3:
                    89:53:b5:fa:9e:f6:2a:f8:19:a7:c9:14:b3:c5:91:
                    c6:d1:a9:bf:34:aa:5d:9e:47:96:a9:df:0a:d4:de:
                    38:24:ff:16:c8:b7:f5:13:b5:ce:30:f8:8d:96:76:
                    11:8c:5f:dc:67:90:a1:54:6f:e6:89:11:d0:e2:44:
                    e5:16:0d:2a:85:db:2d:ca:2d:6a:06:98:b7:0c:66:
                    1d:d8:8e:89:d7:ea:af:bb:2d:a0:b0:c7:33:2b:59:
                    52:d5:52:79:1f:50:45:e0:ca:53:57:04:ba:b2:a1:
                    7d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4F:DC:4B:95:9C:C5:6D:54:B1:AD:6C:1A:96:2A:9C:AB:6F:32:6E
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/224FDC4B959CC56D54B1AD6C1A962A9CAB6F326E.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.crl

            X509v3 Authority Key Identifier:
                keyid:0C:2C:DB:E8:97:EC:93:27:27:20:18:48:1B:6D:3F:C7:C6:39:BE:73

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa91::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53427

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ca:ac:b5:fd:d9:c9:2c:c4:fd:05:ee:10:21:49:16:10:2c:
         b8:f5:67:fd:9d:b8:cc:80:03:95:b5:e3:9f:35:b0:34:4d:ad:
         b1:97:44:bd:01:9a:5c:8e:86:4b:e9:36:90:3b:c3:83:32:a3:
         3b:5c:cd:db:97:c6:07:ca:b7:64:a2:aa:46:21:13:f9:b4:a7:
         13:63:ec:bc:56:a4:ad:3e:00:b8:53:83:dd:d6:ec:b8:79:10:
         8d:62:82:38:7d:5e:0b:0b:52:f8:57:cf:a1:43:19:75:e4:5a:
         c1:20:6c:27:91:03:1a:51:9d:30:be:99:83:a0:2d:5b:1e:ec:
         e9:d8:d5:c0:65:dd:aa:09:16:da:60:66:64:bd:95:78:e5:66:
         ba:47:55:ba:a3:55:d4:86:1d:26:da:20:13:34:55:68:0b:d3:
         aa:91:13:e5:6d:23:d6:ed:f4:8b:ee:43:bf:72:e5:b2:a1:45:
         ee:14:f0:7a:50:7e:88:4e:12:35:93:e8:04:f3:fc:8a:55:42:
         a5:42:a4:b8:93:2b:d3:d4:0c:c4:dd:82:6d:c3:8e:5c:03:43:
         2c:33:1d:13:47:d4:09:d3:c9:b2:1b:d7:37:af:24:e1:7c:a4:
         7c:e9:32:a5:dd:e6:64:38:c6:fd:8f:d5:d1:63:99:a3:f4:fa:
         f6:df:99:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 20:48:05 2023 by rpki-client on console-ams.rpki-client.org