Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63.cer
File:                     968407b3-e2a9-4ec2-9f39-e02d0486ee63.cer (raw, json)
Hash identifier:          48GaJFdkKprZBoMjkdQGfdr402lCx/hgopzomMROfvE=
Subject key identifier:   67:F0:FD:54:48:16:3E:36:E3:34:5B:3A:5B:1E:03:11:7F:EB:E6:E1
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328583D9E0455F2CF0E4D0B4B64D680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63/968407b3-e2a9-4ec2-9f39-e02d0486ee63.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Apr 2022 17:57:02 +0000
Certificate not after:    Sun 18 Apr 2032 17:57:02 +0000
Subordinate resources:    IP: 104.166.112.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:9e:04:55:f2:cf:0e:4d:0b:4b:64:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Apr 18 17:57:02 2022 GMT
            Not After : Apr 18 17:57:02 2032 GMT
        Subject: CN=968407b3-e2a9-4ec2-9f39-e02d0486ee63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:6e:d8:1a:e6:00:68:fc:e6:4e:46:0e:25:
                    cc:c9:7d:36:61:80:b6:5d:5d:56:e4:37:67:05:6e:
                    67:97:a2:2a:a8:2f:37:c3:2d:31:f2:22:86:2f:d2:
                    a2:39:95:59:bb:59:2e:84:f2:78:e9:99:96:17:4d:
                    19:b2:5d:bf:af:0b:1b:ea:ef:fa:df:cf:fe:ec:57:
                    d2:95:6b:a8:20:f9:5f:63:69:4f:ad:d0:a0:30:dc:
                    c1:71:e9:82:b8:a9:7f:c2:82:00:08:10:63:2f:45:
                    25:85:ee:fb:68:db:5a:85:b7:d9:69:d9:9c:6a:8a:
                    be:b0:19:4b:4c:2d:1f:aa:84:5e:c7:39:ec:b5:5c:
                    88:aa:ab:e6:21:41:7b:67:2d:85:34:3d:4d:cf:c0:
                    84:7d:9f:66:18:d0:e1:d4:4b:7e:76:2f:78:75:33:
                    c7:2e:97:8e:5b:59:96:a6:e6:b1:de:9a:c8:09:c7:
                    48:18:6b:cc:dc:aa:ad:8b:81:17:db:ce:d4:c5:5c:
                    2d:25:87:60:4d:f5:c4:ea:bf:bb:69:c0:f6:eb:6f:
                    a7:4b:f0:bc:1d:b6:39:c2:15:a7:24:c2:95:4c:83:
                    2a:3e:8b:fd:98:1d:8b:b8:30:ef:7a:ee:81:39:42:
                    45:e1:6b:af:b4:32:3d:80:02:70:15:1f:20:2b:11:
                    df:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F0:FD:54:48:16:3E:36:E3:34:5B:3A:5B:1E:03:11:7F:EB:E6:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63/968407b3-e2a9-4ec2-9f39-e02d0486ee63.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:15:de:e6:b1:e0:bb:b6:bf:a1:4b:7e:9d:52:32:ba:84:3c:
         2d:c0:30:bb:74:19:98:f0:e6:14:28:8b:4e:68:65:b2:f3:ea:
         00:b2:92:f4:8b:a9:cb:55:63:c5:4e:d4:77:85:49:10:2f:1c:
         8d:6f:3e:4f:a1:04:3e:43:ad:42:67:60:1d:81:12:c7:cb:68:
         e9:cb:d6:ac:02:cb:12:f2:c3:92:d2:da:40:ca:62:ad:46:a8:
         aa:5a:62:88:c2:4f:75:db:3a:da:f4:41:2b:00:15:cd:7f:a7:
         65:72:cf:3d:b5:07:fb:50:97:af:22:e3:0d:0e:73:4e:66:99:
         66:be:64:60:a2:7f:fa:be:b3:db:e8:be:00:38:d3:a6:22:95:
         9a:53:26:59:1c:45:6b:43:9f:e2:07:b7:de:fd:48:5a:d7:62:
         0d:70:c5:15:3e:71:41:f5:57:6e:90:23:b9:97:a9:85:77:d2:
         20:11:20:96:43:7e:76:94:c6:24:d5:a3:f0:e0:c8:ab:85:88:
         aa:a2:48:b0:d0:19:e3:14:50:0b:61:f6:f1:5d:ff:47:33:ea:
         ad:40:65:b1:6e:69:46:c8:dd:e5:be:5f:8a:74:01:bd:3b:e7:
         14:13:be:db:a2:c0:51:e5:fa:b9:8b:60:a4:75:9a:ce:2c:b0:
         c2:ff:6e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:25 2023 by rpki-client on console-ams.rpki-client.org