Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/50acf341-183e-46d2-ade0-55f9abf90d54.cer
File:                     50acf341-183e-46d2-ade0-55f9abf90d54.cer (raw, json)
Hash identifier:          kOIXe8TYmal/P9Kj/XSXDYxgWotcrZxI3nNx//TwqpE=
Subject key identifier:   3B:CD:9B:B7:C7:32:B5:0A:75:73:4D:9D:DA:03:53:B5:32:A9:33:DF
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285840259E78100389E68260C30480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/50acf341-183e-46d2-ade0-55f9abf90d54/50acf341-183e-46d2-ade0-55f9abf90d54.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/50acf341-183e-46d2-ade0-55f9abf90d54/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 06 Dec 2022 17:15:35 +0000
Certificate not after:    Mon 10 Mar 2025 16:15:35 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:25:9e:78:10:03:89:e6:82:60:c3:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Dec  6 17:15:35 2022 GMT
            Not After : Mar 10 16:15:35 2025 GMT
        Subject: CN=50acf341-183e-46d2-ade0-55f9abf90d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:fe:37:31:a1:1a:b0:88:e6:db:6e:71:ee:
                    4a:0b:8f:ad:9a:7d:3d:4a:e4:e6:40:ae:b6:e2:4d:
                    97:ea:ba:08:a1:cf:c6:19:db:17:99:aa:23:62:ec:
                    15:9c:b0:0e:14:73:f1:c1:6a:9a:08:cc:cd:96:40:
                    58:61:41:e3:af:ba:53:ee:39:f7:9f:b8:fe:d4:77:
                    b2:df:58:9e:79:7b:2e:ee:c5:6d:61:83:36:cb:d4:
                    59:ce:c8:9f:d6:6e:96:84:da:d1:55:84:e8:75:c8:
                    8c:75:d7:42:f1:da:45:d9:ac:87:25:9a:1e:23:95:
                    39:d0:8b:7b:4b:84:ba:56:bf:f5:eb:7a:00:cf:6b:
                    15:be:90:f9:27:15:51:3c:3a:45:49:3b:8b:5e:e0:
                    0e:c8:3c:8b:dc:24:24:bf:92:7e:67:34:02:55:71:
                    91:ed:d8:fb:c0:7e:c9:d0:9f:24:05:f0:1f:f9:92:
                    67:c9:aa:a9:30:ce:1f:e2:dd:62:de:b3:f6:19:43:
                    69:3e:29:e5:95:95:e6:07:99:dc:65:07:ba:07:00:
                    5b:00:48:56:d6:b5:5d:d1:ae:37:84:18:89:ed:e9:
                    2d:40:46:4c:6a:33:c8:a7:d0:41:d0:cb:f8:82:3c:
                    8a:ce:fe:e5:0e:af:d5:41:10:51:ef:c1:99:1f:61:
                    53:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CD:9B:B7:C7:32:B5:0A:75:73:4D:9D:DA:03:53:B5:32:A9:33:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/50acf341-183e-46d2-ade0-55f9abf90d54/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/50acf341-183e-46d2-ade0-55f9abf90d54/50acf341-183e-46d2-ade0-55f9abf90d54.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f6:6c:99:74:e1:b0:d8:70:d4:16:34:62:57:a7:3c:18:71:
         4f:57:66:f9:8d:3a:3d:eb:04:b1:63:cc:90:76:ab:7c:7c:1d:
         01:97:ca:7e:fc:3d:5e:38:e4:8e:07:0f:43:8f:ce:2b:2e:76:
         c9:c6:12:e2:c5:30:b2:6a:7f:cc:d3:ae:05:dc:67:ca:fe:8b:
         1b:63:a2:6f:06:22:e1:e5:e7:3d:02:59:b8:1a:7a:88:19:a8:
         06:6a:69:35:37:07:37:b7:35:67:a8:48:f1:04:9d:43:1a:d9:
         4c:d8:c0:38:00:af:92:a1:f3:a6:85:0c:f7:12:82:00:0b:a8:
         30:70:ef:9a:3e:ae:00:64:00:f1:88:87:66:85:82:da:05:fb:
         6b:40:d6:d0:f3:d8:f1:4e:60:1a:c6:3d:43:ac:c4:3e:96:5c:
         c1:32:f1:74:ad:d3:dd:7f:d7:54:46:2f:45:35:8e:55:f2:1d:
         4a:f1:44:0f:62:4b:73:fd:ba:bf:1b:e3:8f:8c:e7:6f:77:25:
         10:27:18:fd:2a:22:43:75:c1:3f:61:0b:fd:a4:fc:fe:e5:d9:
         14:d5:d2:a3:b5:0f:43:3e:ec:f9:87:0f:d9:5a:e3:00:e9:85:
         bd:23:f6:bc:36:fd:bf:92:ef:4e:ab:5e:32:4f:71:28:21:e1:
         42:71:b4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:14 2023 by rpki-client on console-ams.rpki-client.org