Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10c0b280-bd68-4827-9aae-bc5342e8e7ab.cer
File:                     10c0b280-bd68-4827-9aae-bc5342e8e7ab.cer (raw, json)
Hash identifier:          YJ5sENstT1XukmP9yaUsLmlS+I9T+z9ElOoxeEvMfa8=
Subject key identifier:   4C:89:E6:94:47:CA:E4:FF:33:28:EB:08:42:02:78:DD:60:67:EC:E2
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328583C83EFAEB59EF9F63E4A19C180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10c0b280-bd68-4827-9aae-bc5342e8e7ab/10c0b280-bd68-4827-9aae-bc5342e8e7ab.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10c0b280-bd68-4827-9aae-bc5342e8e7ab/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 Nov 2021 16:50:59 +0000
Certificate not after:    Sat 15 Nov 2031 16:50:59 +0000
Subordinate resources:    AS: 54817
                          IP: 66.187.196.0/22
                          IP: 172.110.188.0/22
                          IP: 2606:31c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:83:ef:ae:b5:9e:f9:f6:3e:4a:19:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov 15 16:50:59 2021 GMT
            Not After : Nov 15 16:50:59 2031 GMT
        Subject: CN=10c0b280-bd68-4827-9aae-bc5342e8e7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:cc:a8:68:e1:53:a5:e5:03:f5:0c:c8:16:
                    f4:be:61:37:50:e5:82:0a:07:50:27:60:4b:63:e7:
                    3a:31:49:a5:9e:e4:9a:eb:61:c3:b0:d2:6d:19:67:
                    89:8b:e1:51:7f:87:f3:0e:f9:30:64:27:fe:12:99:
                    86:27:78:09:6f:3d:61:22:0e:ea:ea:23:eb:cc:a1:
                    84:a9:3f:a8:25:c6:d1:fe:62:5b:45:df:12:bd:1e:
                    b5:de:ca:3b:8d:5c:a9:3f:77:e4:53:e1:60:67:1e:
                    0c:bd:c6:18:4e:08:b3:64:a1:31:74:40:1f:92:ec:
                    4e:b2:7c:fd:ff:ff:33:5a:50:4c:7b:ce:96:93:40:
                    ec:2f:0b:c5:96:17:c9:0e:0e:fe:46:3e:05:30:d4:
                    b8:98:31:13:c1:9f:05:9d:33:6d:a3:d2:7d:66:a9:
                    b6:55:ff:2c:75:a0:ca:bc:38:ba:bc:29:e3:7b:2f:
                    32:f7:49:b4:e4:62:5a:98:32:cc:6a:18:5a:1f:8c:
                    84:7c:5a:b2:ae:4d:a9:fc:d2:5d:06:fb:5a:4f:2b:
                    91:de:03:d2:4a:c4:de:9e:4d:9e:31:6b:0a:d0:8a:
                    60:ee:75:3d:c2:45:2f:96:69:e9:33:bf:82:41:8a:
                    72:ba:a8:57:78:7e:1c:4f:0f:ac:aa:d1:70:33:93:
                    82:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:89:E6:94:47:CA:E4:FF:33:28:EB:08:42:02:78:DD:60:67:EC:E2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10c0b280-bd68-4827-9aae-bc5342e8e7ab/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10c0b280-bd68-4827-9aae-bc5342e8e7ab/10c0b280-bd68-4827-9aae-bc5342e8e7ab.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.196.0/22
                  172.110.188.0/22
                IPv6:
                  2606:31c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54817

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:cb:f7:61:ed:4e:2f:4f:bc:0f:f4:36:c4:77:12:95:a8:7f:
         db:5f:fe:3a:23:da:e1:2c:fd:af:ce:a7:d5:d6:24:39:31:43:
         30:4d:ae:48:15:63:37:ac:a3:cc:9e:34:65:f2:69:5e:d3:4d:
         6c:71:2c:43:e5:3e:99:97:a3:a3:db:87:1f:56:7e:d5:43:14:
         0a:22:ef:b2:52:3f:36:26:95:28:1f:e3:72:38:f2:54:a0:90:
         75:74:84:b8:e5:ea:9f:2b:39:63:20:4e:71:77:2a:2b:bf:aa:
         e4:65:8d:9d:ed:ad:25:c3:30:ab:69:0f:37:f3:c1:3b:22:15:
         f1:16:d6:19:89:8e:8a:48:0d:3f:12:d9:ef:64:ed:3d:5a:3b:
         4b:8e:3a:33:6a:fc:cc:96:54:2b:7a:ff:78:fb:87:b3:65:88:
         c5:3b:47:00:3c:52:8e:9a:e8:32:f0:be:81:be:1c:ac:b4:a8:
         67:18:fa:47:15:62:4f:f9:10:bb:bb:8b:85:80:e7:a7:22:da:
         45:be:a1:ef:67:f3:d9:b8:6c:3a:9e:4d:c2:03:2e:28:5c:1e:
         81:ec:af:e8:99:f5:7b:c4:e4:28:ff:7b:43:e2:c8:ee:ce:f1:
         f3:bb:27:02:0c:e8:76:17:93:45:38:79:87:1e:1e:83:dd:f4:
         a3:72:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:32:57 2023 by rpki-client on console-ams.rpki-client.org