Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b9c50f7f-8eab-4250-8433-c5805ffa7cff.cer
File:                     b9c50f7f-8eab-4250-8433-c5805ffa7cff.cer (raw, json)
Hash identifier:          PNhCv6KaGEUFEmlfuFCu0PvFporg3o8/5X9RvBe2Rpk=
Subject key identifier:   69:D8:FC:E2:BC:F5:E3:E5:4D:FA:B8:46:51:46:F3:54:A5:39:03:8C
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285841E4831CAFA3C275FB83125080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b9c50f7f-8eab-4250-8433-c5805ffa7cff/b9c50f7f-8eab-4250-8433-c5805ffa7cff.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b9c50f7f-8eab-4250-8433-c5805ffa7cff/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 09 Aug 2024 19:06:39 +0000
Subordinate resources:    AS: 17193
                          IP: 206.83.139.0/24
                          IP: 2001:504:9f::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:1c:af:a3:c2:75:fb:83:12:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug  9 19:06:39 2024 GMT
        Subject: CN=b9c50f7f-8eab-4250-8433-c5805ffa7cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:8b:f0:30:89:de:fd:97:b0:52:2c:1b:0e:
                    0c:af:f9:e3:7f:42:3e:82:8c:b3:4b:21:52:3e:8a:
                    b9:5e:5b:04:00:b8:3c:b0:c2:11:64:8e:be:f8:c1:
                    64:51:84:e9:e3:f6:c7:42:64:c4:52:4d:95:58:a2:
                    37:ee:23:f3:70:53:51:62:08:3f:9b:03:df:fb:21:
                    38:68:f9:b6:cd:da:85:e6:de:92:f6:bc:90:b1:e7:
                    c4:86:6e:cd:da:ad:12:32:f3:ac:d8:34:da:3f:f2:
                    3c:da:81:b9:66:a5:22:a3:cd:b7:ac:45:70:ae:5c:
                    bf:ac:36:6c:db:11:c4:0a:8e:8c:5c:6c:b2:0a:92:
                    39:7b:d6:f9:d4:d2:99:be:cf:2c:1a:31:36:5e:fe:
                    c6:22:dd:26:20:25:6c:3f:eb:f0:fe:9d:86:51:c7:
                    fe:cc:25:98:23:7e:5a:75:d9:94:d5:8c:e4:d2:81:
                    20:50:6e:8f:dd:b8:87:8d:c7:54:f3:e3:48:17:6f:
                    d2:4b:78:0d:9b:3d:41:0c:73:11:e7:ff:74:2d:01:
                    66:7b:2f:c5:09:f2:da:ca:e6:cd:d7:cf:c3:5f:53:
                    fa:64:c3:75:03:29:b2:fc:a2:9c:6c:b5:bc:b5:6e:
                    1d:b5:6e:69:fe:cf:90:85:4e:1f:58:85:ba:91:b7:
                    6b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D8:FC:E2:BC:F5:E3:E5:4D:FA:B8:46:51:46:F3:54:A5:39:03:8C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b9c50f7f-8eab-4250-8433-c5805ffa7cff/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b9c50f7f-8eab-4250-8433-c5805ffa7cff/b9c50f7f-8eab-4250-8433-c5805ffa7cff.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.139.0/24
                IPv6:
                  2001:504:9f::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17193

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:60:05:dd:0e:5b:96:2c:6b:5e:40:f8:89:78:95:f9:fb:b0:
         17:99:f2:3c:33:46:ba:e0:91:8b:7e:11:a7:44:9f:59:8a:74:
         33:67:81:33:31:f1:c9:03:da:7b:ae:73:87:a9:07:dd:bc:4b:
         d8:24:47:b2:bf:3a:84:44:0c:31:09:0b:29:66:9b:c3:9a:3e:
         f4:42:63:f4:87:07:36:a9:04:3b:4a:71:5a:04:72:31:72:0f:
         0d:cf:d0:c9:43:a6:67:18:e8:90:95:c6:ff:88:cd:5d:20:fc:
         e9:28:89:d7:4d:de:c0:98:36:06:31:bb:3a:4c:05:67:68:40:
         ed:15:b8:20:62:db:c6:e1:cc:09:d4:b7:5d:12:dc:ce:2c:ce:
         c1:3c:9c:13:6e:5a:99:6b:6f:59:8d:79:5e:db:9c:d2:4e:97:
         ac:40:38:06:d9:14:c6:06:34:32:e3:fe:0b:1a:95:58:c4:9d:
         25:4e:64:2b:4a:35:b4:67:e7:f4:f8:b5:50:2e:72:ef:13:08:
         ef:8b:33:37:b0:72:9f:33:4d:ce:9d:0a:f5:6a:95:40:8e:96:
         3c:e5:e8:3c:3e:68:25:8f:1e:69:8d:29:f2:cb:96:1c:f1:b0:
         b1:4f:8d:ed:4f:df:c3:2b:c5:bf:61:7c:0b:10:19:68:e5:75:
         43:8f:0d:4b
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEHkgxyvo8J1+4MSUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTIzMDUxNTE5MDYzOVoXDTI0MDgwOTE5MDYzOVowLzEtMCsGA1UEAxMk
YjljNTBmN2YtOGVhYi00MjUwLTg0MzMtYzU4MDVmZmE3Y2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLeL8DCJ3v2XsFIsGw4Mr/njf0I+goyzSyFS
Poq5XlsEALg8sMIRZI6++MFkUYTp4/bHQmTEUk2VWKI37iPzcFNRYgg/mwPf+yE4
aPm2zdqF5t6S9ryQsefEhm7N2q0SMvOs2DTaP/I82oG5ZqUio823rEVwrly/rDZs
2xHECo6MXGyyCpI5e9b51NKZvs8sGjE2Xv7GIt0mICVsP+vw/p2GUcf+zCWYI35a
ddmU1Yzk0oEgUG6P3biHjcdU8+NIF2/SS3gNmz1BDHMR5/90LQFmey/FCfLayubN
18/DX1P6ZMN1Aymy/KKcbLW8tW4dtW5p/s+QhU4fWIW6kbdrPQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFGnY/OK89ePlTfq4RlFG81SlOQOMMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9i
OWM1MGY3Zi04ZWFiLTQyNTAtODQzMy1jNTgwNWZmYTdjZmYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2I5YzUwZjdmLThlYWItNDI1MC04
NDMzLWM1ODA1ZmZhN2NmZi9iOWM1MGY3Zi04ZWFiLTQyNTAtODQzMy1jNTgwNWZm
YTdjZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBADOU4swDwQCAAIwCQMHACABBQQAnzAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgJDKTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQYAXdDluWLGteQPiJeJX5+7AX
mfI8M0a64JGLfhGnRJ9ZinQzZ4EzMfHJA9p7rnOHqQfdvEvYJEeyvzqERAwxCQsp
ZpvDmj70QmP0hwc2qQQ7SnFaBHIxcg8Nz9DJQ6ZnGOiQlcb/iM1dIPzpKInXTd7A
mDYGMbs6TAVnaEDtFbggYtvG4cwJ1LddEtzOLM7BPJwTblqZa29ZjXle25zSTpes
QDgG2RTGBjQy4/4LGpVYxJ0lTmQrSjW0Z+f0+LVQLnLvEwjvizM3sHKfM03OnQr1
apVAjpY85eg8Pmgljx5pjSnyy5Yc8bCxT43tT9/DK8W/YXwLEBlo5XVDjw1L
-----END CERTIFICATE-----
Generated at Tue Aug 8 11:34:15 2023 by rpki-client on console-fra.rpki-client.org