Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a41a80c8-b1bd-48cb-aa18-a2f60893b52b.cer
File:                     a41a80c8-b1bd-48cb-aa18-a2f60893b52b.cer (raw, json)
Hash identifier:          aaa5dIYrrkB+Q6M0xiASA5JXPg8aJHf4hw0nCnKqaZI=
Subject key identifier:   B2:33:45:60:CB:3D:69:62:0B:FF:89:CD:1B:D8:8D:11:89:79:51:48
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584201276701CBA08998B32F1540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a41a80c8-b1bd-48cb-aa18-a2f60893b52b/a41a80c8-b1bd-48cb-aa18-a2f60893b52b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a41a80c8-b1bd-48cb-aa18-a2f60893b52b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 May 2023 01:20:28 +0000
Certificate not after:    Thu 28 Aug 2025 01:20:28 +0000
Subordinate resources:    AS: 20303
                          IP: 23.149.160.0/24
                          IP: 66.252.192.0/21
                          IP: 104.238.252.0/22
                          IP: 144.208.110.0/23
                          IP: 192.86.122.0/24
                          IP: 204.9.16.0/21
                          IP: 2605:ed80::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:01:27:67:01:cb:a0:89:98:b3:2f:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 26 01:20:28 2023 GMT
            Not After : Aug 28 01:20:28 2025 GMT
        Subject: CN=a41a80c8-b1bd-48cb-aa18-a2f60893b52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1a:9a:1d:b0:87:9d:a1:01:68:63:6b:f4:c2:
                    38:e6:e4:de:6a:7b:4e:ca:79:31:42:c7:60:fc:69:
                    3b:e8:72:e9:db:f0:03:36:94:bb:f3:09:55:c0:d9:
                    c5:c8:28:52:47:b2:c2:8b:a1:bd:59:d4:3d:ad:1a:
                    27:1a:97:40:de:99:c2:85:0b:3e:60:59:c5:b6:d7:
                    7d:32:17:4f:b8:c5:8e:6b:6c:3d:e1:e3:6f:34:bf:
                    c8:53:6d:af:a5:95:80:24:33:46:1e:71:2c:20:df:
                    c6:2c:cd:bb:07:1a:7c:e3:ef:33:ee:18:0b:33:ac:
                    bc:88:81:79:02:0e:56:3a:2d:39:d8:f5:f4:6d:2f:
                    67:05:af:fc:c3:95:68:ee:98:ec:ca:10:cd:6f:d3:
                    cc:34:ff:14:8c:4a:2c:1b:2a:a6:3c:6d:6e:bd:a7:
                    0a:b4:4a:52:a9:25:41:78:c0:35:0e:fe:b0:dd:f0:
                    b9:2f:81:48:47:03:ec:4e:d4:33:86:c4:e1:0c:93:
                    f7:50:64:3a:e5:03:f3:45:4e:c3:83:21:d8:5b:b1:
                    5f:d0:aa:1b:91:56:03:2b:3f:8d:99:ac:78:fe:36:
                    09:e1:17:18:7a:6b:ae:fe:ea:f6:4d:03:69:32:69:
                    b7:84:7d:d3:ec:44:ff:d2:a8:e6:2b:4a:69:48:e7:
                    44:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:33:45:60:CB:3D:69:62:0B:FF:89:CD:1B:D8:8D:11:89:79:51:48
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a41a80c8-b1bd-48cb-aa18-a2f60893b52b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a41a80c8-b1bd-48cb-aa18-a2f60893b52b/a41a80c8-b1bd-48cb-aa18-a2f60893b52b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.160.0/24
                  66.252.192.0/21
                  104.238.252.0/22
                  144.208.110.0/23
                  192.86.122.0/24
                  204.9.16.0/21
                IPv6:
                  2605:ed80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20303

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:49:1b:02:42:43:91:c9:18:a6:7d:73:2f:51:3b:77:7d:2e:
         6c:aa:36:1b:af:c6:31:30:2d:d2:37:8e:e7:63:f1:8c:04:f1:
         5f:77:a1:c1:9e:60:ab:56:75:46:2f:03:5c:e2:29:d1:2c:6a:
         70:c4:6e:b4:cf:bd:80:bf:84:47:27:e4:cb:c1:21:41:b1:98:
         3f:cd:e6:d4:00:71:2a:88:0f:77:12:19:32:2e:da:da:4a:d0:
         7e:e6:93:9c:80:ef:86:3a:33:e8:c3:e9:9b:e8:3a:ef:9d:1c:
         cf:57:a8:ab:33:3c:b3:0e:9e:26:d2:61:a6:4f:da:7b:2c:34:
         0e:8b:88:2e:f4:4d:c0:aa:53:e9:2b:a4:e2:3b:2e:fc:88:2e:
         cd:5f:3a:0c:c2:15:e2:d9:bd:4a:af:0a:67:07:2b:2f:4d:0c:
         fc:f0:99:67:4e:5a:75:46:0e:4b:d5:60:b8:95:ad:85:22:67:
         84:3f:3b:8d:5f:88:f9:bc:7f:a3:6c:e9:31:18:fa:e5:30:4b:
         60:9f:a1:a3:90:73:c1:4a:90:9a:5d:0b:16:59:f8:20:7a:c0:
         a8:3c:38:78:3c:ea:14:33:97:d2:a3:88:81:4f:b4:84:68:09:
         ad:e5:4f:2f:7a:35:7b:2f:49:9c:c1:0a:2f:49:58:de:86:fe:
         2e:f8:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:50 2023 by rpki-client on console-fra.rpki-client.org