Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63e0b1ac-9cd7-4998-bda5-556194e8519d.cer
File:                     63e0b1ac-9cd7-4998-bda5-556194e8519d.cer (raw, json)
Hash identifier:          POF2W1kSfkL+FfkxkCNCVFv6oiGwINTHVM2kFTDOxxA=
Subject key identifier:   AD:76:40:D6:9B:15:B6:41:B5:3B:50:AA:F4:35:14:2E:13:96:8F:E5
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584172B50DB5DB4602C346414580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63e0b1ac-9cd7-4998-bda5-556194e8519d/63e0b1ac-9cd7-4998-bda5-556194e8519d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63e0b1ac-9cd7-4998-bda5-556194e8519d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 05 Apr 2023 00:45:16 +0000
Certificate not after:    Tue 08 Jul 2025 00:45:16 +0000
Subordinate resources:    AS: 8047
                          AS: 395718
                          IP: 24.237.0.0/16
                          IP: 64.110.28.0/22
                          IP: 65.74.0.0/17
                          IP: 66.58.128.0/17
                          IP: 66.223.128.0/17
                          IP: 67.58.0.0/19
                          IP: 69.178.0.0/17
                          IP: 72.42.128.0/18
                          IP: 206.174.0.0/17
                          IP: 209.165.128.0/18
                          IP: 2610:100::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:72:b5:0d:b5:db:46:02:c3:46:41:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr  5 00:45:16 2023 GMT
            Not After : Jul  8 00:45:16 2025 GMT
        Subject: CN=63e0b1ac-9cd7-4998-bda5-556194e8519d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:44:e0:e9:47:78:87:0b:04:c1:70:ed:53:b5:
                    80:1f:c3:90:c8:49:b6:e2:6d:79:95:5d:95:7e:24:
                    79:e9:a7:dd:b8:91:c4:80:da:c1:8d:9b:34:ab:d8:
                    2d:2d:6c:68:8e:5e:c7:35:cd:aa:01:2a:36:cb:37:
                    c1:75:f1:6e:f8:52:9f:6c:d7:19:c6:78:e6:80:6b:
                    f4:96:84:b2:09:51:77:da:c5:19:8a:78:b6:0a:e8:
                    db:76:85:b6:5e:7c:34:d6:ff:2b:73:18:62:ce:cf:
                    fe:46:26:66:d5:61:a3:3e:fc:2c:bf:3d:8f:be:c0:
                    63:79:57:be:7a:6a:04:3a:c6:6d:64:f2:fe:b1:10:
                    0c:d1:ff:56:9c:f6:13:e3:d4:da:42:e8:ee:c0:cf:
                    25:c7:ca:15:93:cf:40:7b:03:b3:1a:03:d1:97:c9:
                    1d:54:66:f4:91:74:88:42:54:5a:1c:0a:73:33:d6:
                    da:07:68:af:e2:92:2c:59:12:4e:36:f8:78:ef:bd:
                    27:77:91:c5:c1:ab:53:ae:a3:07:77:11:c8:01:e5:
                    89:74:61:05:2a:05:ba:38:da:f0:ec:7c:d3:bd:2d:
                    f3:0b:be:50:a7:24:e6:b0:9a:79:c8:11:0f:27:ec:
                    40:47:60:8a:69:75:72:93:bc:a4:42:fe:e1:ab:27:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:76:40:D6:9B:15:B6:41:B5:3B:50:AA:F4:35:14:2E:13:96:8F:E5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63e0b1ac-9cd7-4998-bda5-556194e8519d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63e0b1ac-9cd7-4998-bda5-556194e8519d/63e0b1ac-9cd7-4998-bda5-556194e8519d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.237.0.0/16
                  64.110.28.0/22
                  65.74.0.0/17
                  66.58.128.0/17
                  66.223.128.0/17
                  67.58.0.0/19
                  69.178.0.0/17
                  72.42.128.0/18
                  206.174.0.0/17
                  209.165.128.0/18
                IPv6:
                  2610:100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8047
                  395718

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:11:b7:73:68:df:76:b6:a4:7f:00:03:00:34:53:44:67:
         aa:87:c5:4f:3e:f9:d5:ea:b2:a3:a7:2e:bc:18:a8:f6:68:65:
         49:c4:be:33:d7:80:4e:a6:08:ce:91:2d:0e:3b:36:86:5e:a9:
         83:cd:ea:ce:9f:58:16:ed:9e:fa:30:74:a9:5b:8a:22:04:3e:
         47:9e:86:bb:e6:07:8d:95:4e:6e:fb:73:fb:f4:9c:87:27:4e:
         f1:62:e0:92:2e:6e:ac:1a:53:a2:6d:83:f7:9b:38:fa:62:e1:
         35:23:15:22:2d:2c:93:fa:be:fe:74:88:99:10:c8:a7:a6:e5:
         cc:c1:bb:00:15:0c:2d:0f:6a:22:4a:3d:0f:ff:e2:bf:d3:13:
         c3:ed:e9:68:98:36:20:b2:84:f6:53:60:31:b3:f1:9e:dc:ff:
         ef:1f:4d:19:b3:d9:20:5e:ac:b3:2c:d8:a6:61:df:66:63:63:
         85:0e:ac:a2:41:84:25:2a:79:6a:53:d5:46:25:29:a5:b4:14:
         ee:a8:fc:7b:f3:2d:54:8b:38:06:63:79:16:83:c6:4d:3d:ad:
         36:ca:45:ba:15:ae:03:08:bc:76:68:11:65:dc:ec:d9:fb:1a:
         4a:2a:d3:76:58:0c:25:3d:58:d7:6f:dc:4d:fe:da:1b:d6:4d:
         8f:3f:a1:f0
-----BEGIN CERTIFICATE-----
MIIHUTCCBjmgAwIBAgIUAQ0Mn0MoWEFytQ2120YCw0ZBRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDQwNTAwNDUxNloXDTI1MDcwODAwNDUxNlowLzEtMCsGA1UEAxMk
NjNlMGIxYWMtOWNkNy00OTk4LWJkYTUtNTU2MTk0ZTg1MTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50Tg6Ud4hwsEwXDtU7WAH8OQyEm24m15lV2V
fiR56afduJHEgNrBjZs0q9gtLWxojl7HNc2qASo2yzfBdfFu+FKfbNcZxnjmgGv0
loSyCVF32sUZini2CujbdoW2Xnw01v8rcxhizs/+RiZm1WGjPvwsvz2PvsBjeVe+
emoEOsZtZPL+sRAM0f9WnPYT49TaQujuwM8lx8oVk89AewOzGgPRl8kdVGb0kXSI
QlRaHApzM9baB2iv4pIsWRJONvh4770nd5HFwatTrqMHdxHIAeWJdGEFKgW6ONrw
7HzTvS3zC75QpyTmsJp5yBEPJ+xAR2CKaXVyk7ykQv7hqyeqIQIDAQABo4IEYzCC
BF8wHQYDVR0OBBYEFK12QNabFbZBtTtQqvQ1FC4Tlo/lMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82
M2UwYjFhYy05Y2Q3LTQ5OTgtYmRhNS01NTYxOTRlODUxOWQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYzZTBiMWFjLTljZDctNDk5OC1i
ZGE1LTU1NjE5NGU4NTE5ZC82M2UwYjFhYy05Y2Q3LTQ5OTgtYmRhNS01NTYxOTRl
ODUxOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwYwYIKwYBBQUH
AQcBAf8EVDBSMEEEAgABMDsDAwAY7QMEAkBuHAMEB0FKAAMEB0I6gAMEB0LfgAME
BUM6AAMEB0WyAAMEBkgqgAMEB86uAAMEBtGlgDANBAIAAjAHAwUAJhABADAeBggr
BgEFBQcBCAEB/wQPMA2gCzAJAgIfbwIDBgnGMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAYNEbdzaN92tqR/
AAMANFNEZ6qHxU8++dXqsqOnLrwYqPZoZUnEvjPXgE6mCM6RLQ47NoZeqYPN6s6f
WBbtnvowdKlbiiIEPkeehrvmB42VTm77c/v0nIcnTvFi4JIubqwaU6Jtg/ebOPpi
4TUjFSItLJP6vv50iJkQyKem5czBuwAVDC0PaiJKPQ//4r/TE8Pt6WiYNiCyhPZT
YDGz8Z7c/+8fTRmz2SBerLMs2KZh32ZjY4UOrKJBhCUqeWpT1UYlKaW0FO6o/Hvz
LVSLOAZjeRaDxk09rTbKRboVrgMIvHZoEWXc7Nn7Gkoq03ZYDCU9WNdv3E3+2hvW
TY8/ofA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:15 2023 by rpki-client on console-ams.rpki-client.org