Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee.cer
File:                     93dbef53-2166-44a6-a13b-260fc343eeee.cer (raw, json)
Hash identifier:          mcC9r+aQllTRNJ9GQ0n2e1B7ooIlYY3ykWD1DgZiMr4=
Subject key identifier:   6C:A0:A5:52:B3:9D:6C:2A:89:FC:27:2D:65:4D:14:2C:1A:C4:C9:40
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285840BF85DE11B746B92D18549A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee/93dbef53-2166-44a6-a13b-260fc343eeee.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 30 Jan 2023 20:20:30 +0000
Certificate not after:    Sun 04 May 2025 19:20:30 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bf:85:de:11:b7:46:b9:2d:18:54:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jan 30 20:20:30 2023 GMT
            Not After : May  4 19:20:30 2025 GMT
        Subject: CN=93dbef53-2166-44a6-a13b-260fc343eeee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:25:a1:87:03:77:2c:7b:02:12:0c:6b:3a:
                    0f:42:d4:bc:55:6e:90:c4:d9:36:0d:25:6e:4d:f5:
                    77:a0:e5:65:06:d1:c5:6b:35:55:ba:29:73:71:70:
                    7a:55:71:f1:d5:d8:6b:38:7b:d3:64:27:62:59:91:
                    bd:cc:c4:7a:f1:06:9a:8e:52:56:70:d8:ae:50:f5:
                    76:fb:c6:9d:00:07:b6:d8:f4:de:d1:5b:ce:00:86:
                    23:95:c3:5e:53:9b:bb:c0:fd:98:ba:54:54:68:8d:
                    b9:e0:82:7c:49:58:29:33:bc:de:05:d2:06:dd:2e:
                    8f:41:9b:3a:53:c4:0f:f6:da:fc:73:16:65:27:b4:
                    df:b5:a3:9f:e9:bb:07:93:d0:b3:6c:82:ae:20:73:
                    34:8c:79:0e:0b:df:ea:72:b0:db:0e:d9:76:08:81:
                    2d:fe:bb:61:e3:cc:f2:62:5a:99:c5:87:6c:32:cb:
                    e6:37:0b:8b:e5:dd:c6:d8:a5:4f:ac:65:40:25:b5:
                    11:d1:ed:e0:36:ee:90:f3:d3:d7:96:2e:1c:bc:f4:
                    0b:cd:be:38:d0:d7:12:85:6e:20:48:b8:88:be:b7:
                    50:0d:5b:26:5b:fc:a0:4d:b7:4a:09:c4:37:c3:9e:
                    8d:b9:8b:32:76:ee:cf:ff:3d:28:bc:ae:86:d4:b6:
                    f0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A0:A5:52:B3:9D:6C:2A:89:FC:27:2D:65:4D:14:2C:1A:C4:C9:40
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee/93dbef53-2166-44a6-a13b-260fc343eeee.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:2c:f1:7e:c4:0d:b4:f0:42:9c:4d:93:36:fe:f0:3a:2c:df:
         86:57:99:8c:1e:bd:39:19:00:d3:fd:e3:28:8d:d3:ca:97:8f:
         23:58:06:fd:04:33:bc:70:f5:45:14:ae:b1:ae:a2:3f:1b:68:
         88:22:5c:a2:26:9f:af:fc:ff:62:5a:74:80:35:4a:eb:5c:3e:
         02:47:46:90:14:6c:4e:3e:4a:6d:c7:0a:43:af:6f:73:60:aa:
         b4:0c:2b:ba:04:04:28:32:a2:6a:c3:8c:04:cc:1f:73:21:3a:
         0c:cc:14:cd:f8:fb:03:fe:a6:a6:a6:07:94:a0:49:80:22:98:
         b7:ee:1b:c5:73:06:db:6a:8d:30:11:0a:64:c1:73:12:5a:34:
         87:08:77:7d:a8:bd:40:0b:ae:1f:02:b5:78:e4:2b:bd:16:fa:
         4b:3a:1d:6e:05:03:5f:f6:70:ac:2d:4e:50:ea:cc:e7:92:d9:
         b9:db:f7:e8:18:70:8a:72:8e:9d:5a:58:23:c5:fd:54:64:6c:
         27:57:4b:3c:6c:fb:6a:d8:d3:55:ac:0f:21:02:ad:96:e7:82:
         55:d2:e3:9a:f5:39:82:f9:94:a7:9b:f8:62:65:fe:45:17:2b:
         18:dc:35:87:b3:d9:0a:64:57:7b:13:5f:12:38:28:0e:39:8b:
         58:2c:ce:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:22 2023 by rpki-client on console-ams.rpki-client.org