Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2ab2bf7-fa96-47df-b10f-3b650d6e64d5.cer
File:                     b2ab2bf7-fa96-47df-b10f-3b650d6e64d5.cer (raw, json)
Hash identifier:          66Dp1oy0YMQPmvs14GkVflRkpl5vmjNPVhUVr71m0mk=
Subject key identifier:   5E:EB:70:5B:FE:00:C2:7A:88:18:D9:1E:54:A0:2B:5D:42:B8:A2:FD
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328583DA6B2337D189271B1FEF11070
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2ab2bf7-fa96-47df-b10f-3b650d6e64d5/b2ab2bf7-fa96-47df-b10f-3b650d6e64d5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2ab2bf7-fa96-47df-b10f-3b650d6e64d5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Apr 2022 20:33:49 +0000
Certificate not after:    Wed 21 Apr 2032 20:33:49 +0000
Subordinate resources:    AS: 400645
                          IP: 23.135.104.0/24
                          IP: 2602:fb85::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a6:b2:33:7d:18:92:71:b1:fe:f1:10:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Apr 21 20:33:49 2022 GMT
            Not After : Apr 21 20:33:49 2032 GMT
        Subject: CN=b2ab2bf7-fa96-47df-b10f-3b650d6e64d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:66:fd:2f:15:23:6e:46:b0:d5:fa:15:bf:
                    e9:93:e1:16:a3:c3:bf:ab:32:7f:7b:bb:4a:92:b2:
                    5c:d1:fd:f9:87:32:1e:1a:68:7a:a3:66:e5:8b:94:
                    67:2a:f6:0d:34:1c:11:4c:6b:8b:32:81:16:23:11:
                    c7:4b:f0:3e:36:7f:80:dc:8a:e8:44:42:ec:37:ca:
                    e6:8a:fb:07:c1:74:a3:61:8a:a6:95:c7:0e:8c:fd:
                    37:e6:e8:87:33:c1:5c:de:69:a4:a4:6a:46:ca:a1:
                    d7:8b:3b:f7:68:c0:3a:cd:18:50:5a:9c:d9:81:17:
                    68:7a:b5:1a:7d:81:99:d9:26:d6:93:df:34:1c:16:
                    5c:af:aa:39:a0:49:49:d8:17:b6:85:fe:a4:6d:84:
                    a5:3f:16:1f:67:3f:a2:92:57:a4:72:4b:2f:88:b4:
                    cc:3d:9e:80:c0:7b:35:f6:4e:4d:64:bb:b4:6d:68:
                    15:9e:bd:79:ad:8b:f1:64:de:44:04:f6:77:ba:1e:
                    78:0e:7c:9e:9a:70:6a:36:fa:9b:1d:50:22:92:d2:
                    92:4b:31:1c:04:02:de:95:b7:ca:d8:66:ff:9d:42:
                    f8:12:a9:4f:ea:0c:76:17:38:35:05:c1:ed:2a:df:
                    b9:aa:60:75:35:f3:f9:be:3f:43:60:14:a3:74:84:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EB:70:5B:FE:00:C2:7A:88:18:D9:1E:54:A0:2B:5D:42:B8:A2:FD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2ab2bf7-fa96-47df-b10f-3b650d6e64d5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2ab2bf7-fa96-47df-b10f-3b650d6e64d5/b2ab2bf7-fa96-47df-b10f-3b650d6e64d5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.104.0/24
                IPv6:
                  2602:fb85::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400645

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f9:76:db:fe:d8:38:25:77:10:fc:8d:cf:90:8e:99:51:46:
         b5:a6:96:db:a3:0d:ed:56:24:4a:4f:83:20:37:0e:5c:90:3e:
         9a:a4:92:44:e8:fc:c1:27:24:9e:1c:59:d5:6b:9e:35:dd:ee:
         9e:03:ea:4c:8b:14:76:c0:53:14:77:51:19:fc:75:34:b6:e0:
         7d:44:86:68:51:b2:1f:cf:12:69:5a:84:b8:98:e7:99:4c:02:
         b0:d5:47:56:31:ab:9f:2b:2a:ce:4e:08:67:24:3d:ba:87:77:
         d7:74:22:de:5c:09:13:78:8f:8b:f0:59:c3:6d:26:ef:cf:6b:
         7e:87:dc:8c:c2:7c:b5:92:36:f4:96:15:8f:4f:28:17:05:c5:
         0a:24:72:6d:f3:35:83:0e:29:f0:f8:8f:6d:f2:c9:ec:14:dc:
         32:76:d6:42:ce:7d:6b:c1:b1:c5:f2:19:1e:69:68:cf:c0:9f:
         b7:85:58:ae:29:64:19:d4:f7:ca:00:19:27:68:55:58:83:f7:
         c6:c4:a1:f3:03:22:18:8e:51:4f:8a:e4:00:a4:a7:3f:5e:cc:
         a6:a1:2b:0a:6f:e6:21:97:b3:02:34:8a:b5:58:cf:35:f1:88:
         a7:a0:94:76:a1:8f:43:f4:9b:ed:69:b6:3a:86:85:6b:a0:18:
         89:3b:ea:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:26 2023 by rpki-client on console-ams.rpki-client.org