Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f.cer
File:                     44e03c61-6e39-49a5-bb22-77cc5b0ab06f.cer (raw, json)
Hash identifier:          fHKNMkm0pfeygb2R9A4O6eaLPyr0xsaVvPgGH4aYZq8=
Subject key identifier:   D6:72:E4:20:89:1F:76:23:99:BE:0B:53:A2:49:35:05:19:17:56:71
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285840DE3D3069E92CD1507051D800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/44e03c61-6e39-49a5-bb22-77cc5b0ab06f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 10 Feb 2023 20:24:08 +0000
Certificate not after:    Thu 15 May 2025 19:15:06 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:de:3d:30:69:e9:2c:d1:50:70:51:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 10 20:24:08 2023 GMT
            Not After : May 15 19:15:06 2025 GMT
        Subject: CN=44e03c61-6e39-49a5-bb22-77cc5b0ab06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:e5:b6:8f:21:be:04:1e:32:ea:37:0a:be:
                    75:63:08:21:d8:d7:a6:2c:b4:2c:7b:0b:e5:ee:27:
                    46:f9:0c:e5:f5:15:5c:6c:9d:e6:13:56:85:8f:5c:
                    43:e6:dd:2f:5e:50:4f:fe:56:9c:e1:f8:9d:12:58:
                    6b:38:68:1c:6a:85:1e:75:84:c6:83:71:6d:fb:75:
                    f2:b6:b5:91:6e:ab:e5:e5:97:23:1c:8e:79:77:93:
                    8e:25:ff:76:e0:59:91:86:00:5d:d1:96:06:6c:44:
                    c9:b6:44:8a:e1:68:cf:a8:be:c2:f5:af:07:e1:4e:
                    1d:48:97:15:00:2d:b6:a7:74:cf:27:0d:53:f1:8f:
                    6a:4d:9b:79:31:39:42:3d:1a:dd:6f:bb:21:ba:79:
                    d9:03:b0:62:01:9c:f8:bb:66:b5:54:a4:61:b2:df:
                    77:01:39:d2:90:ba:90:7d:46:47:20:bd:12:67:20:
                    79:c7:23:46:4a:a9:7d:2e:af:ad:0b:46:fe:0d:8a:
                    0f:76:c7:3f:75:47:9d:ff:a9:48:bd:d0:96:60:ef:
                    f0:25:46:40:a1:2b:85:38:75:35:27:5c:2b:d8:c4:
                    36:36:f9:80:24:a5:12:36:49:bf:69:cc:c6:4d:e5:
                    d4:2b:fd:32:a2:87:7e:0e:3e:b3:02:29:f2:88:b0:
                    04:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:72:E4:20:89:1F:76:23:99:BE:0B:53:A2:49:35:05:19:17:56:71
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/44e03c61-6e39-49a5-bb22-77cc5b0ab06f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:3f:26:54:5f:ed:40:3b:e4:91:4d:2f:14:6e:65:4b:85:
         a1:32:61:85:c4:87:17:a1:bb:0d:ce:09:cd:9e:7e:f5:9b:c9:
         50:84:93:c9:3e:cc:f3:e7:2d:c7:f1:af:96:8d:08:c2:3e:4d:
         f4:be:60:e5:f6:12:b7:1c:d2:00:bc:4e:02:4a:a7:08:d1:39:
         ca:bc:60:df:1f:98:12:9b:0c:df:8d:9b:90:87:49:79:54:f1:
         a5:28:09:23:4b:04:85:11:dd:3a:6b:51:3f:b5:ed:00:7d:f3:
         dc:b8:d5:8d:cc:21:03:0e:de:6c:7d:80:60:f8:cb:6e:be:31:
         d4:db:1f:a5:48:b7:e8:a3:03:e8:74:63:22:44:59:5c:d3:8e:
         6b:75:41:53:26:c0:db:af:3d:13:5e:21:b3:29:79:ea:28:73:
         6d:5e:79:7d:75:27:93:50:f4:bf:2d:b2:ad:f5:0a:ce:38:0a:
         64:5e:f1:e9:2c:50:19:ac:61:a1:1f:8e:3d:da:a7:85:14:f4:
         6e:19:b6:17:7d:ef:b5:c3:77:d9:bb:44:58:48:27:dd:b4:43:
         1d:2d:74:67:fb:4d:bd:38:bb:43:a1:bf:d6:cc:8f:d1:09:b1:
         4c:f6:5a:1f:0f:42:93:fb:2e:13:9f:63:9b:45:75:c7:30:14:
         51:9f:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:12 2023 by rpki-client on console-ams.rpki-client.org