Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c023a197-c405-43fa-8d81-66810eef1d1a.cer
File:                     c023a197-c405-43fa-8d81-66810eef1d1a.cer (raw, json)
Hash identifier:          mxk3gbeB853yA93d834fqMV0KwxhkzoOC5bT9kJ1hRc=
Subject key identifier:   8A:01:67:D0:B2:D8:AE:F7:D4:30:81:46:0B:9E:2D:3E:C6:18:57:53
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858404A12616115954708B94496A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c023a197-c405-43fa-8d81-66810eef1d1a/c023a197-c405-43fa-8d81-66810eef1d1a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c023a197-c405-43fa-8d81-66810eef1d1a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 19 Dec 2022 18:38:14 +0000
Certificate not after:    Sun 23 Mar 2025 17:38:14 +0000
Subordinate resources:    IP: 198.204.8.0/21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4a:12:61:61:15:95:47:08:b9:44:96:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec 19 18:38:14 2022 GMT
            Not After : Mar 23 17:38:14 2025 GMT
        Subject: CN=c023a197-c405-43fa-8d81-66810eef1d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:ea:f1:b1:2c:f5:f1:8f:9f:0f:cc:dd:6f:
                    01:d0:40:16:bb:79:f2:6e:20:01:0c:fd:48:f3:ba:
                    15:cd:8a:9d:3a:f4:05:7a:c0:a5:1d:32:2f:3e:29:
                    fa:b9:8a:8f:45:23:2b:db:f7:b2:a3:8a:91:82:73:
                    7c:db:9a:f9:74:aa:3a:13:b2:83:d7:6b:44:d8:23:
                    d7:46:b6:f5:77:fa:ab:49:56:bd:5e:77:1e:a8:7c:
                    58:ac:d6:fb:24:2e:7f:6e:23:80:34:e9:92:34:07:
                    5e:f7:42:f2:66:44:72:12:3e:52:8e:e3:82:f7:95:
                    6d:44:cf:96:e8:9d:85:7c:63:f0:04:fc:1b:48:e7:
                    c8:c2:5e:01:49:30:b8:62:01:6d:4e:61:f9:68:22:
                    3c:3f:ec:24:a5:0f:f2:27:68:26:38:65:ed:f6:0c:
                    3a:ec:61:36:0e:49:0b:b9:f4:c3:fc:01:3c:01:6f:
                    9d:64:c2:41:99:27:38:bf:2c:45:49:a3:bc:23:f5:
                    99:0c:f0:17:81:86:b2:94:10:a7:e8:89:65:d2:b2:
                    b3:d7:1e:2b:9a:de:a1:b6:0d:cc:42:de:c8:c4:58:
                    29:85:b0:b4:cf:d0:ee:4c:b6:4b:87:be:50:4a:db:
                    19:1a:7a:6b:22:da:d2:0a:0b:d0:08:a3:3b:56:a2:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:01:67:D0:B2:D8:AE:F7:D4:30:81:46:0B:9E:2D:3E:C6:18:57:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c023a197-c405-43fa-8d81-66810eef1d1a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c023a197-c405-43fa-8d81-66810eef1d1a/c023a197-c405-43fa-8d81-66810eef1d1a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:17:69:7d:04:e9:a0:cc:6a:2c:29:6c:87:98:3b:53:0a:83:
         24:ea:4a:9a:5a:61:9c:fa:54:52:c7:fe:4a:09:f6:2e:57:fe:
         a8:a3:6f:62:72:5c:3d:ad:00:3a:5c:fa:93:38:54:5c:b5:62:
         0a:93:39:3c:f5:00:b6:26:ce:86:b9:aa:c1:18:0d:73:01:9c:
         40:6a:79:64:79:c1:d4:a3:ad:ac:b3:15:81:5c:4f:92:cf:ce:
         c7:5b:a5:9d:7d:9a:68:86:23:3e:35:0a:dd:dd:04:e8:0a:6c:
         05:3d:f7:1d:1b:b5:65:f8:e5:73:0d:00:84:d1:4e:a3:17:a8:
         a1:fd:93:55:20:40:96:dc:33:5c:b3:74:4b:9f:e2:07:4b:89:
         8d:38:31:99:33:b1:9f:a2:83:87:71:91:78:36:84:33:d3:19:
         af:cb:55:9c:75:71:5d:5a:f6:a4:d0:de:1e:5d:d9:ff:ef:42:
         29:89:c8:f6:ff:89:7b:ad:c9:33:bf:2f:3c:da:99:d0:af:cc:
         98:2c:01:0b:e2:44:79:50:e6:47:f9:5d:cb:67:c7:1c:69:b1:
         85:c4:02:21:5d:c7:a0:37:7b:fc:47:b3:74:db:7f:22:f8:8e:
         57:31:f1:64:af:1f:93:df:40:e3:db:8d:ce:65:89:3d:f1:3a:
         15:83:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:47 2023 by rpki-client on console-ams.rpki-client.org