Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee73475c-9298-4a7c-a11f-0f724d3e90c4.cer
File:                     ee73475c-9298-4a7c-a11f-0f724d3e90c4.cer (raw, json)
Hash identifier:          24kMdSm5waIqTgmiPO/kPxEmXpsTrzPZhUeUyvn7rfs=
Subject key identifier:   2A:05:73:81:9A:60:5F:7B:B0:27:31:0A:71:46:EC:53:3E:59:3C:ED
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285840D621A02FB47618DC2FB30800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee73475c-9298-4a7c-a11f-0f724d3e90c4/ee73475c-9298-4a7c-a11f-0f724d3e90c4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee73475c-9298-4a7c-a11f-0f724d3e90c4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 07 Feb 2023 22:42:08 +0000
Certificate not after:    Sun 11 May 2025 13:37:58 +0000
Subordinate resources:    IP: 23.147.120.0/24
                          IP: 2602:faa8::/40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d6:21:a0:2f:b4:76:18:dc:2f:b3:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb  7 22:42:08 2023 GMT
            Not After : May 11 13:37:58 2025 GMT
        Subject: CN=ee73475c-9298-4a7c-a11f-0f724d3e90c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:a0:9e:3d:30:0c:e7:9f:26:d2:5b:aa:16:
                    fa:4c:43:98:da:42:7e:32:12:b4:11:32:d1:ea:9f:
                    0f:9a:79:c5:5c:d3:10:40:9f:0b:66:61:b7:94:db:
                    24:e5:1b:69:22:60:3f:75:07:cf:49:47:80:6f:0a:
                    bd:58:d4:6b:c2:17:3c:07:08:e1:f4:5b:3e:e7:30:
                    f1:d1:80:36:df:4a:18:f1:4c:49:00:50:12:12:d4:
                    30:d2:b8:b8:fe:56:35:ad:03:5a:65:73:b5:99:74:
                    14:05:a9:7f:46:c5:19:1a:3e:6d:31:44:19:89:d3:
                    5e:67:41:65:16:aa:66:3c:6a:4d:ac:f8:ad:0c:05:
                    84:38:47:f3:da:63:92:c8:57:b6:c3:cf:8a:da:87:
                    9c:4d:68:ff:5a:de:84:4c:b6:5d:b3:3f:56:56:1e:
                    20:69:ff:90:46:7b:4b:a8:ec:2d:6c:11:32:96:24:
                    f4:7f:04:09:00:49:cb:00:75:51:84:21:e9:51:0b:
                    b6:b2:06:22:40:88:ca:f3:53:cf:ab:1b:ef:11:18:
                    ae:07:3f:76:d2:75:f4:cc:5f:18:3a:eb:d4:41:60:
                    38:0c:89:47:8c:8f:ea:56:42:a3:bd:10:7f:f8:f0:
                    d2:dd:c4:5c:2e:2f:e7:9b:5e:c3:4c:90:98:e6:08:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:05:73:81:9A:60:5F:7B:B0:27:31:0A:71:46:EC:53:3E:59:3C:ED
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee73475c-9298-4a7c-a11f-0f724d3e90c4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee73475c-9298-4a7c-a11f-0f724d3e90c4/ee73475c-9298-4a7c-a11f-0f724d3e90c4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.120.0/24
                IPv6:
                  2602:faa8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a6:86:c9:ba:3a:35:7c:b7:77:06:8b:6d:2f:34:cc:3a:80:
         00:76:17:ae:03:32:13:bd:b4:f4:1d:5a:f8:df:1f:97:63:2c:
         e1:f0:da:f0:17:1b:fc:13:7d:4e:70:50:33:a9:1b:ed:0a:e9:
         ae:14:65:2f:2a:b2:db:76:a5:03:33:bb:09:66:0f:e8:e4:fe:
         ed:d7:6e:ee:68:c2:c4:a8:c7:8a:8d:38:81:13:e5:3b:48:1c:
         2c:59:21:64:d6:46:2f:11:9c:b9:57:99:df:57:c3:d1:9e:df:
         d9:45:c3:96:78:98:e3:28:45:9b:46:fe:f4:21:4a:1c:a6:c5:
         e4:d2:43:56:85:52:91:f6:ca:4d:d9:a1:9d:e0:9a:ce:d0:ba:
         10:f1:07:26:3b:a4:a6:b6:53:11:4c:cb:dd:d7:32:79:d2:72:
         b3:81:67:5b:b0:86:dd:f7:7c:90:08:3d:b3:99:4a:7a:d9:5b:
         41:b8:44:a1:27:f5:8c:8b:fc:66:d7:23:13:3e:a9:e1:f0:78:
         9c:e2:f7:a9:07:3d:60:5d:1e:1e:e5:26:e2:15:59:eb:5a:2c:
         ff:b4:cb:55:dc:95:4b:ae:05:08:2c:da:e7:47:c4:a9:f8:e1:
         e9:59:03:9f:6c:66:a6:6f:6e:a8:60:b7:2f:57:ac:57:d7:72:
         f9:d4:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:51 2023 by rpki-client on console-fra.rpki-client.org