Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3c0710f8-837b-4164-b478-e2ff69aaea6b.cer
File:                     3c0710f8-837b-4164-b478-e2ff69aaea6b.cer (raw, json)
Hash identifier:          aK2d+i8H7SHlv6muio9bGIObdOug+6CUG7VR849jWCI=
Subject key identifier:   51:1F:2C:0A:93:22:21:72:12:8A:64:16:15:FF:67:C5:A2:BE:1D:77
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328583DDB98C04DCEAB26EC50F0FA00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3c0710f8-837b-4164-b478-e2ff69aaea6b/3c0710f8-837b-4164-b478-e2ff69aaea6b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3c0710f8-837b-4164-b478-e2ff69aaea6b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 10 May 2022 19:20:22 +0000
Certificate not after:    Mon 12 Aug 2024 19:20:22 +0000
Subordinate resources:    AS: 32809
                          IP: 63.141.0.0/20
                          IP: 65.23.160.0/19
                          IP: 209.188.64.0/20
                          IP: 2607:f0f8::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:db:98:c0:4d:ce:ab:26:ec:50:f0:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 10 19:20:22 2022 GMT
            Not After : Aug 12 19:20:22 2024 GMT
        Subject: CN=3c0710f8-837b-4164-b478-e2ff69aaea6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:d6:ec:90:f1:6c:e5:a5:dd:8c:9f:b4:40:
                    b8:79:79:78:59:ed:bb:a8:ac:5a:14:6c:cf:48:c7:
                    5f:f8:f8:a3:16:2a:0b:bf:b7:78:0f:d1:43:87:9b:
                    6e:70:ba:07:4e:f3:80:4d:c7:36:7a:16:4c:4f:d5:
                    a3:6c:8c:79:a1:06:ef:44:bd:49:50:b8:e3:9f:49:
                    ab:ef:52:8c:94:c3:9d:4c:cb:93:eb:e7:8a:38:db:
                    55:95:44:3b:5a:74:8e:01:60:b4:43:19:4a:bb:6f:
                    0c:44:b6:cd:32:18:b2:f6:78:39:57:d7:c1:99:28:
                    c5:29:d7:be:b7:04:cf:70:69:4c:08:ae:a5:da:50:
                    12:a3:50:b9:5e:dc:f9:b7:09:63:c7:49:34:a0:09:
                    17:14:4b:a4:a8:1e:b1:d9:0d:f1:4c:03:cc:95:42:
                    e1:13:fd:a6:1f:3b:5f:f5:60:a2:1c:92:a1:10:10:
                    18:cf:90:cc:57:0e:d0:c2:60:80:5c:ba:d2:64:c6:
                    cb:0d:9d:1b:ec:2a:c9:3c:c9:fa:b1:e2:d6:7c:d5:
                    9b:9c:2c:71:52:3a:4c:f4:93:75:a1:9d:c3:54:e6:
                    5d:4c:2b:e2:49:fd:f7:75:8b:fb:57:c9:45:8a:bf:
                    09:8c:5c:45:6a:f6:9e:dc:ee:b1:b1:c6:8f:f9:5a:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:2C:0A:93:22:21:72:12:8A:64:16:15:FF:67:C5:A2:BE:1D:77
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3c0710f8-837b-4164-b478-e2ff69aaea6b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3c0710f8-837b-4164-b478-e2ff69aaea6b/3c0710f8-837b-4164-b478-e2ff69aaea6b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.0.0/20
                  65.23.160.0/19
                  209.188.64.0/20
                IPv6:
                  2607:f0f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32809

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:46:e7:d8:17:b5:a6:e5:91:b7:81:99:d1:f4:6e:41:7f:dc:
         58:18:de:a3:b8:0c:5e:9d:ba:89:1c:90:cf:29:98:46:b5:70:
         5a:15:e1:a8:70:b6:50:0c:d8:bc:fc:44:f6:08:ed:eb:f1:4f:
         67:d5:bc:fa:26:e3:03:06:63:42:0c:0c:11:9b:91:a9:49:07:
         7c:cf:f7:a9:ec:3c:7c:a6:28:a3:2f:1c:d4:c2:7b:3c:b4:0c:
         05:68:19:b2:49:b0:ce:12:b1:d6:35:11:e7:2f:c8:98:7b:9f:
         55:d2:46:1b:29:53:cc:89:3b:c4:70:be:b4:86:6c:be:e3:7f:
         f5:37:07:7b:9b:5c:99:7d:87:eb:e8:ad:0e:fa:c3:d6:7b:0c:
         36:93:35:1a:bd:ef:cf:bf:6f:f8:40:4a:14:2b:1c:62:ab:5d:
         36:d8:67:d3:69:db:1c:e8:53:c3:a2:da:ec:47:f3:b8:33:ae:
         29:41:07:0a:3f:fb:61:05:d6:7e:09:5b:d7:87:c6:3a:dd:b2:
         97:dc:19:43:fb:d7:59:a8:29:1e:76:01:d6:2c:74:e4:e2:a0:
         a4:0c:df:30:25:36:75:24:2c:f2:48:b7:b0:fe:f4:32:50:98:
         e5:e5:65:b6:d7:22:53:bb:78:26:a6:08:d5:c3:8c:78:8a:19:
         6f:84:e9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:12 2023 by rpki-client on console-ams.rpki-client.org