Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88.cer
File:                     9757a31a-d9fe-4e04-975c-0effa5590b88.cer (raw, json)
Hash identifier:          Q/GSROF7NLHkQitlwWhIvwJWM8gSpxQ2z4GGf7HZs4I=
Subject key identifier:   68:C6:18:E3:82:A9:29:6A:B0:D2:CA:6B:6E:67:46:79:39:BE:F1:B2
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285840C1EE34E0DE0F0B20C7DE5EF8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/9757a31a-d9fe-4e04-975c-0effa5590b88.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 31 Jan 2023 17:02:21 +0000
Certificate not after:    Mon 05 May 2025 16:02:21 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:ee:34:e0:de:0f:0b:20:c7:de:5e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jan 31 17:02:21 2023 GMT
            Not After : May  5 16:02:21 2025 GMT
        Subject: CN=9757a31a-d9fe-4e04-975c-0effa5590b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9e:60:52:fc:c0:8d:e9:c2:be:66:d2:ec:79:
                    ee:30:6e:0b:1f:14:69:25:c3:c1:8e:18:c7:0d:79:
                    c2:32:c3:ff:a0:96:99:2d:89:51:15:50:c4:6e:cc:
                    a5:2e:82:0a:3a:f2:15:c3:7b:7c:14:ef:e3:1c:af:
                    d3:d1:c4:32:66:a2:9f:40:d6:bd:16:d8:d8:38:5e:
                    ab:b1:9d:74:71:3f:b7:71:1c:4c:c6:b0:fe:5c:dc:
                    20:16:b1:44:4e:6b:23:99:a0:c6:c0:ef:e2:8c:e0:
                    89:a3:bb:25:d7:d4:14:f6:92:c3:97:8f:61:48:62:
                    dc:32:d1:83:65:00:01:dc:52:db:a8:f3:4a:e5:e5:
                    1e:04:9d:70:d5:3a:c6:95:5f:f1:91:16:43:c3:e2:
                    18:d5:dd:fd:27:43:5e:3c:ab:14:26:f9:93:7b:cd:
                    b0:6f:37:0c:ec:e0:33:7e:10:61:e7:36:f1:3e:b3:
                    4c:87:1d:83:ee:56:8e:81:db:9b:57:cf:33:1c:ad:
                    d4:63:a1:9f:34:88:35:82:69:71:de:c9:53:e7:ff:
                    4d:05:7c:f5:50:db:55:a0:db:20:78:7f:89:66:e9:
                    01:e0:46:0d:97:af:52:70:71:6f:04:8c:28:96:5e:
                    13:80:96:49:e7:3c:ea:db:4c:6e:94:51:65:07:83:
                    81:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C6:18:E3:82:A9:29:6A:B0:D2:CA:6B:6E:67:46:79:39:BE:F1:B2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/9757a31a-d9fe-4e04-975c-0effa5590b88.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b0:f3:ab:ba:11:d2:8d:57:d5:ab:7d:29:5e:d3:f9:c1:ef:
         d0:ae:df:1b:8b:a0:49:b8:4f:43:68:dc:a6:d1:d5:a4:46:cc:
         df:fd:76:66:bb:00:fa:84:59:e7:ab:9a:57:3a:5f:29:21:a3:
         bb:85:61:e7:f8:47:25:96:a0:bf:0c:2e:4a:78:92:76:0e:86:
         ea:74:8e:51:09:b3:2c:b0:1f:54:5a:74:a8:44:3d:95:97:2f:
         ca:c4:49:aa:94:8f:6d:87:17:c2:62:00:ba:93:4b:d4:e9:36:
         e3:87:40:03:52:f7:7a:57:75:0b:9c:d2:24:c1:d9:07:a0:48:
         44:72:57:7a:55:40:de:e2:53:9c:1a:5a:5b:e7:93:aa:55:00:
         3c:7d:50:bf:e6:aa:68:1b:ac:90:30:71:9c:de:2a:f7:c9:29:
         39:fb:22:13:8a:c2:71:86:9c:0f:b2:5d:d2:fa:59:93:1b:4a:
         b3:f5:04:17:88:aa:4b:9c:5d:91:0a:a2:d1:c3:27:5b:85:3f:
         0c:c8:cf:91:13:cf:ef:e9:d3:e8:2a:60:46:6a:19:b9:5c:1d:
         e2:eb:8e:03:0b:81:46:02:3c:a2:d6:4a:cb:b2:b0:46:25:01:
         2b:82:1d:d9:40:25:a9:cc:1b:7c:fe:0b:37:e4:44:65:99:99:
         61:de:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:22 2023 by rpki-client on console-ams.rpki-client.org