Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4cab7cca-920d-4084-bcb8-4dacf3766e0a.cer
File:                     4cab7cca-920d-4084-bcb8-4dacf3766e0a.cer (raw, json)
Hash identifier:          iz93f6rflXp2kORDq7/+Knc9C+u9Ha3CFvGP0/4Csto=
Subject key identifier:   29:13:D1:D0:55:E9:DE:31:26:BA:F7:15:DB:9C:19:E6:09:2F:16:62
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E483337E9CCA987E41845240
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4cab7cca-920d-4084-bcb8-4dacf3766e0a/4cab7cca-920d-4084-bcb8-4dacf3766e0a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4cab7cca-920d-4084-bcb8-4dacf3766e0a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Tue 24 Dec 2024 20:06:39 +0000
Subordinate resources:    AS: 31857
                          IP: 23.157.48.0/24
                          IP: 69.28.32.0/20
                          IP: 141.193.60.0/22
                          IP: 162.213.180.0/22
                          IP: 199.127.112.0/22
                          IP: 2604:3b80::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:33:7e:9c:ca:98:7e:41:84:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Dec 24 20:06:39 2024 GMT
        Subject: CN=4cab7cca-920d-4084-bcb8-4dacf3766e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:11:c9:07:db:a3:ad:8f:85:9c:ea:14:78:
                    bd:5e:50:a1:40:9f:a2:df:87:f3:94:e6:a5:d9:a6:
                    48:5f:07:9f:d6:b7:1f:85:ce:59:60:d7:81:0d:d4:
                    50:b6:56:ff:a1:fa:7f:de:76:f5:21:a6:93:19:28:
                    cd:2e:f9:72:54:00:fd:38:a5:98:d9:12:71:a5:30:
                    9c:b0:75:fe:2f:71:b8:65:08:78:4c:f9:60:f0:22:
                    ca:b5:aa:16:cc:01:a4:fe:61:6a:ac:0d:fb:06:6b:
                    00:6b:95:04:35:19:a0:a1:db:93:e4:dd:df:36:82:
                    4a:06:32:50:1e:96:3c:2b:a6:92:14:f0:79:44:43:
                    b8:c1:b7:df:96:1a:14:63:58:d5:f3:e6:23:88:c2:
                    76:29:49:54:cb:e4:33:a6:43:a4:e8:a3:f8:d2:59:
                    40:0c:11:ec:34:51:fb:54:5f:11:a9:2e:77:52:48:
                    e2:60:29:ae:07:93:e5:1c:a6:c1:4d:29:a0:b3:bd:
                    7b:94:03:50:14:df:08:f7:71:89:93:dc:c0:5f:c9:
                    0c:1a:89:26:cd:01:0e:85:54:b6:79:ff:71:13:80:
                    35:a7:61:27:97:62:cc:ba:d0:1f:02:01:2f:ae:ed:
                    d5:19:93:ba:cb:73:91:31:79:3e:51:ee:4d:99:26:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:13:D1:D0:55:E9:DE:31:26:BA:F7:15:DB:9C:19:E6:09:2F:16:62
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4cab7cca-920d-4084-bcb8-4dacf3766e0a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4cab7cca-920d-4084-bcb8-4dacf3766e0a/4cab7cca-920d-4084-bcb8-4dacf3766e0a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.48.0/24
                  69.28.32.0/20
                  141.193.60.0/22
                  162.213.180.0/22
                  199.127.112.0/22
                IPv6:
                  2604:3b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31857

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:23:c2:f4:30:19:3b:31:8a:96:22:ca:b2:fa:28:76:c0:23:
         24:de:8d:de:5d:7b:49:f3:b7:56:3d:c9:20:c3:91:93:4f:3a:
         e6:43:d1:14:0c:d2:db:35:44:02:15:ae:c6:6b:7f:41:50:c0:
         a7:c2:d9:db:dc:23:6d:ab:b2:d7:54:81:df:ef:70:d3:84:b4:
         00:04:29:38:9a:05:95:bc:20:ab:b1:bb:ef:e9:3d:0e:e7:88:
         a9:a7:81:f5:d0:13:62:52:af:ad:6c:31:3b:ca:83:81:22:e8:
         aa:f8:ce:77:1b:b5:c6:e1:4c:b7:40:33:20:28:b4:8c:03:b5:
         84:8e:f5:c7:0a:f5:40:bb:be:6c:10:ca:d6:47:32:72:eb:c8:
         fd:01:ef:cb:22:77:ab:ad:42:6c:a8:76:62:20:34:87:e4:c6:
         ea:bb:db:b8:5a:12:4e:55:b1:85:fe:ad:dc:c7:22:76:3e:82:
         c2:bd:1f:59:cd:02:7f:59:e8:e2:d3:40:18:0d:25:72:72:94:
         db:55:46:ea:e4:97:53:ea:14:72:e3:b4:85:ae:24:3b:dc:14:
         f9:f2:56:48:ca:53:e2:a4:ea:30:7d:74:c9:e3:03:d1:03:6f:
         e0:42:9d:e2:ac:d4:56:a6:6e:e8:e7:61:0b:16:1f:ef:af:09:
         92:c0:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:12 2023 by rpki-client on console-ams.rpki-client.org