Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c222b9e1-d773-4359-8c1d-0699ca26e63c.cer
File:                     c222b9e1-d773-4359-8c1d-0699ca26e63c.cer (raw, json)
Hash identifier:          reJ8psDn+hzxkzxfTnUnj0dpv5AQdacFUNSPbpX87yw=
Subject key identifier:   FB:BA:E0:ED:60:7C:00:B0:F1:CB:0C:E9:DD:64:54:9D:07:4A:6C:90
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328583FFDF60244082ACEF00B2FB940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c222b9e1-d773-4359-8c1d-0699ca26e63c/c222b9e1-d773-4359-8c1d-0699ca26e63c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c222b9e1-d773-4359-8c1d-0699ca26e63c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 22 Nov 2022 12:19:38 +0000
Certificate not after:    Mon 24 Feb 2025 12:19:38 +0000
Subordinate resources:    AS: 33140
                          IP: 74.112.16.0/22
                          IP: 199.7.152.0/22
                          IP: 204.10.24.0/22
                          IP: 208.72.80.0/22
                          IP: 2604:6c00::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fd:f6:02:44:08:2a:ce:f0:0b:2f:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Nov 22 12:19:38 2022 GMT
            Not After : Feb 24 12:19:38 2025 GMT
        Subject: CN=c222b9e1-d773-4359-8c1d-0699ca26e63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1b:d6:88:fc:9a:0a:03:77:fe:11:7e:0d:9c:
                    68:c6:c7:33:38:11:14:8c:fe:37:47:9a:14:e1:06:
                    e6:6f:98:4e:8a:83:2e:ee:9a:45:59:91:26:96:03:
                    82:66:42:59:88:47:cc:b1:00:32:09:2d:ae:7b:1c:
                    1b:44:e0:4f:0f:43:71:c7:c2:07:7b:85:97:fd:b8:
                    30:0a:68:dd:27:f0:53:0b:ac:74:e9:ec:78:49:ea:
                    30:c3:81:bb:d8:4f:46:c3:51:15:6f:ce:34:05:d0:
                    41:96:d9:da:1c:27:aa:8d:28:83:fe:74:b5:69:0b:
                    00:b2:d6:f9:fe:88:8b:72:e0:45:68:6f:36:7e:96:
                    0b:74:a3:32:86:88:24:ad:60:b7:68:c3:ea:03:57:
                    72:16:1d:15:7a:81:76:36:91:74:47:cf:0f:9e:6d:
                    1f:e4:3f:14:09:c3:13:8c:11:3f:6b:b7:4e:27:eb:
                    aa:a4:6b:63:1d:55:00:9e:bb:96:05:be:19:7e:69:
                    f4:dd:6f:16:6d:85:00:44:24:0e:23:64:3c:b3:cb:
                    8c:e5:bc:f7:3d:c7:5e:3a:07:7e:34:a1:ef:bc:c5:
                    84:54:e4:8e:b6:52:9d:02:12:46:a1:73:53:78:19:
                    e5:fd:03:55:f6:8b:65:a5:bb:f5:1d:76:15:b9:bf:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BA:E0:ED:60:7C:00:B0:F1:CB:0C:E9:DD:64:54:9D:07:4A:6C:90
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c222b9e1-d773-4359-8c1d-0699ca26e63c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c222b9e1-d773-4359-8c1d-0699ca26e63c/c222b9e1-d773-4359-8c1d-0699ca26e63c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.16.0/22
                  199.7.152.0/22
                  204.10.24.0/22
                  208.72.80.0/22
                IPv6:
                  2604:6c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33140

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d4:61:54:ee:56:8a:0f:96:77:66:b0:f4:24:f2:b1:f6:32:
         e3:10:36:20:ff:f8:b2:70:87:8c:81:ef:c4:bf:9c:32:02:62:
         db:09:20:4a:7d:13:f5:fb:0a:f1:cb:c5:a9:bc:5c:b0:ed:cf:
         3a:e4:f5:84:d4:ba:ab:38:ba:8d:de:f0:60:71:3a:19:dd:32:
         66:f7:90:23:42:a2:30:2e:11:8d:2e:7a:9a:6d:e9:5d:f7:02:
         1d:bf:5a:f3:7c:d3:be:f8:53:74:9e:82:6f:b5:ca:d0:9e:31:
         76:e5:97:ed:82:f6:94:f6:0a:0b:1d:63:4c:63:74:47:de:8a:
         e5:9c:3b:9d:8a:7e:49:a2:19:51:5b:6b:41:fa:18:65:7f:6f:
         80:38:44:7a:94:e2:49:8b:e3:cd:0e:e2:c5:ce:f0:43:ac:ac:
         45:9a:59:99:4e:28:fe:ed:f9:9b:a5:7d:72:4a:e5:0c:a3:92:
         e0:f0:be:87:03:61:7f:ed:58:f5:06:66:1f:9d:0a:8e:d4:43:
         57:0d:6e:ac:d1:71:d9:4d:d2:f9:9a:7e:42:fa:62:2f:9b:9c:
         65:54:ed:36:01:d0:6a:c6:f4:bc:e8:5f:9a:34:c5:2b:c8:47:
         cd:06:17:48:cc:ea:8b:68:17:80:a0:8f:f6:67:43:32:bc:09:
         60:93:ba:23
-----BEGIN CERTIFICATE-----
MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWD/99gJECCrO8AsvuUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTIyMTEyMjEyMTkzOFoXDTI1MDIyNDEyMTkzOFowLzEtMCsGA1UEAxMk
YzIyMmI5ZTEtZDc3My00MzU5LThjMWQtMDY5OWNhMjZlNjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxvWiPyaCgN3/hF+DZxoxsczOBEUjP43R5oU
4Qbmb5hOioMu7ppFWZEmlgOCZkJZiEfMsQAyCS2uexwbROBPD0Nxx8IHe4WX/bgw
CmjdJ/BTC6x06ex4Seoww4G72E9Gw1EVb840BdBBltnaHCeqjSiD/nS1aQsAstb5
/oiLcuBFaG82fpYLdKMyhogkrWC3aMPqA1dyFh0VeoF2NpF0R88Pnm0f5D8UCcMT
jBE/a7dOJ+uqpGtjHVUAnruWBb4Zfmn03W8WbYUARCQOI2Q8s8uM5bz3PcdeOgd+
NKHvvMWEVOSOtlKdAhJGoXNTeBnl/QNV9otlpbv1HXYVub87tQIDAQABo4IEPDCC
BDgwHQYDVR0OBBYEFPu64O1gfACw8csM6d1kVJ0HSmyQMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9j
MjIyYjllMS1kNzczLTQzNTktOGMxZC0wNjk5Y2EyNmU2M2MvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2MyMjJiOWUxLWQ3NzMtNDM1OS04
YzFkLTA2OTljYTI2ZTYzYy9jMjIyYjllMS1kNzczLTQzNTktOGMxZC0wNjk5Y2Ey
NmU2M2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMB4EAgABMBgDBAJKcBADBALHB5gDBALMChgDBALQSFAwDQQCAAIw
BwMFACYEbAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIF0MFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACTU
YVTuVooPlndmsPQk8rH2MuMQNiD/+LJwh4yB78S/nDICYtsJIEp9E/X7CvHLxam8
XLDtzzrk9YTUuqs4uo3e8GBxOhndMmb3kCNCojAuEY0ueppt6V33Ah2/WvN80774
U3Segm+1ytCeMXbll+2C9pT2CgsdY0xjdEfeiuWcO52KfkmiGVFba0H6GGV/b4A4
RHqU4kmL480O4sXO8EOsrEWaWZlOKP7t+ZulfXJK5QyjkuDwvocDYX/tWPUGZh+d
Co7UQ1cNbqzRcdlN0vmafkL6Yi+bnGVU7TYB0GrG9LzoX5o0xSvIR80GF0jM6oto
F4Cgj/ZnQzK8CWCTuiM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:26 2023 by rpki-client on console-ams.rpki-client.org