Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3a31d61-5b31-4d27-a685-bcfb1d776d97.cer
File:                     a3a31d61-5b31-4d27-a685-bcfb1d776d97.cer (raw, json)
Hash identifier:          B4XRBYKzuki8M936zMT59TeCOHrsy6PBSetGKeTTldo=
Subject key identifier:   50:75:22:00:90:2E:93:C1:38:32:F1:44:DC:4E:64:6B:5B:17:AF:B8
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328583F53D754BFF602544F1F8737C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3a31d61-5b31-4d27-a685-bcfb1d776d97/a3a31d61-5b31-4d27-a685-bcfb1d776d97.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3a31d61-5b31-4d27-a685-bcfb1d776d97/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Sep 2022 13:50:24 +0000
Certificate not after:    Wed 25 Dec 2024 14:50:24 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:53:d7:54:bf:f6:02:54:4f:1f:87:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Sep 22 13:50:24 2022 GMT
            Not After : Dec 25 14:50:24 2024 GMT
        Subject: CN=a3a31d61-5b31-4d27-a685-bcfb1d776d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:64:4c:c6:73:99:fe:b2:33:31:e0:9f:20:
                    55:72:87:c5:d6:2a:1b:52:b2:0c:66:88:de:b3:b0:
                    6d:83:9c:93:8d:37:02:c5:25:64:41:d3:e6:b0:a8:
                    1c:7b:8c:1a:1b:82:3f:9c:66:f1:16:8e:1f:a8:5e:
                    e9:5a:46:17:11:1b:45:35:c1:6e:42:2e:e9:78:5f:
                    90:81:36:3d:2a:4e:6a:e6:52:9f:a5:18:69:a5:0a:
                    12:85:b3:62:4c:fb:db:5a:5e:eb:a5:81:ed:33:17:
                    f2:43:18:75:41:4e:ae:a2:48:9b:04:11:4a:78:42:
                    13:4a:f8:6b:85:bb:12:b5:68:12:70:81:49:01:95:
                    ed:11:8b:e9:83:eb:15:57:b3:16:7e:dc:f4:96:b8:
                    ec:7e:a6:e0:af:85:73:df:c4:d5:8c:ad:4e:57:b3:
                    80:aa:1e:e9:31:26:cf:2e:d1:54:f5:3d:f7:85:e6:
                    77:48:66:12:63:36:02:29:bf:25:55:95:7f:31:cb:
                    a1:b8:a4:8e:25:a2:ec:45:81:f5:cc:ff:70:d1:6a:
                    28:b4:b7:aa:65:8a:fe:9e:32:9d:60:9d:5f:35:e0:
                    3f:8e:93:95:9c:e6:b1:67:1f:35:1b:4b:20:ce:3f:
                    08:56:0f:cf:0e:f9:d5:bb:82:3c:c2:21:21:4a:20:
                    b2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:75:22:00:90:2E:93:C1:38:32:F1:44:DC:4E:64:6B:5B:17:AF:B8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3a31d61-5b31-4d27-a685-bcfb1d776d97/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3a31d61-5b31-4d27-a685-bcfb1d776d97/a3a31d61-5b31-4d27-a685-bcfb1d776d97.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:15:ff:80:db:d7:62:ba:c8:ea:93:90:8e:ec:9f:6a:13:41:
         18:f3:6f:18:0a:a0:e0:72:e9:39:1e:d3:29:d0:1a:e5:97:5d:
         3e:bb:f4:2d:7b:76:f0:16:56:2c:6a:df:b2:cd:f9:87:9a:bd:
         e1:85:48:80:24:d5:3b:ae:ed:42:3f:75:cc:54:04:31:dc:0b:
         b9:72:f5:04:69:a1:73:fe:f4:8d:bd:2d:ef:17:4a:6f:49:81:
         d8:b6:61:f6:fc:de:99:de:74:ab:a5:23:ef:fa:89:02:0f:96:
         9a:b7:48:d8:72:c7:6b:53:e2:8d:20:96:ab:3b:d0:e1:ea:9a:
         1c:2b:ac:0b:a7:46:92:eb:43:4d:89:ff:92:42:54:4b:45:97:
         01:b4:66:84:37:da:e7:f8:76:6b:c1:bc:47:33:ff:f3:e5:59:
         9e:d0:83:e7:d4:66:8a:af:38:9d:82:b7:0e:46:7a:0a:3a:7d:
         1c:0d:0a:44:fb:dd:95:22:9c:73:00:15:02:56:60:82:89:70:
         97:38:69:9d:60:49:e2:56:c5:56:75:69:c7:bc:b7:a1:3d:d0:
         7b:16:78:51:7d:45:5c:47:76:0e:d8:69:bd:bb:a7:6d:e2:e0:
         2f:9d:04:c8:06:f6:4f:dc:a9:fc:6a:3a:bd:68:a2:28:77:33:
         c2:90:09:49
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWD9T11S/9gJUTx+HN8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTIyMDkyMjEzNTAyNFoXDTI0MTIyNTE0NTAyNFowLzEtMCsGA1UEAxMk
YTNhMzFkNjEtNWIzMS00ZDI3LWE2ODUtYmNmYjFkNzc2ZDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oBkTMZzmf6yMzHgnyBVcofF1iobUrIMZoje
s7Btg5yTjTcCxSVkQdPmsKgce4waG4I/nGbxFo4fqF7pWkYXERtFNcFuQi7peF+Q
gTY9Kk5q5lKfpRhppQoShbNiTPvbWl7rpYHtMxfyQxh1QU6uokibBBFKeEITSvhr
hbsStWgScIFJAZXtEYvpg+sVV7MWftz0lrjsfqbgr4Vz38TVjK1OV7OAqh7pMSbP
LtFU9T33heZ3SGYSYzYCKb8lVZV/McuhuKSOJaLsRYH1zP9w0WootLeqZYr+njKd
YJ1fNeA/jpOVnOaxZx81G0sgzj8IVg/PDvnVu4I8wiEhSiCyGwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFFB1IgCQLpPBODLxRNxOZGtbF6+4MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h
M2EzMWQ2MS01YjMxLTRkMjctYTY4NS1iY2ZiMWQ3NzZkOTcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2EzYTMxZDYxLTViMzEtNGQyNy1h
Njg1LWJjZmIxZDc3NmQ5Ny9hM2EzMWQ2MS01YjMxLTRkMjctYTY4NS1iY2ZiMWQ3
NzZkOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAKVcJgwDgQCAAIwCAMGBCYC/DsAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYaYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4Ff+A29diusjqk5CO7J9qE0EY
828YCqDgcuk5HtMp0Brll10+u/Qte3bwFlYsat+yzfmHmr3hhUiAJNU7ru1CP3XM
VAQx3Au5cvUEaaFz/vSNvS3vF0pvSYHYtmH2/N6Z3nSrpSPv+okCD5aat0jYcsdr
U+KNIJarO9Dh6pocK6wLp0aS60NNif+SQlRLRZcBtGaEN9rn+HZrwbxHM//z5Vme
0IPn1GaKrzidgrcORnoKOn0cDQpE+92VIpxzABUCVmCCiXCXOGmdYEniVsVWdWnH
vLehPdB7FnhRfUVcR3YO2Gm9u6dt4uAvnQTIBvZP3Kn8ajq9aKIodzPCkAlJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:26 2023 by rpki-client on console-ams.rpki-client.org