Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bd40b8d4-3173-4741-b603-91d1e998969e.cer
File:                     bd40b8d4-3173-4741-b603-91d1e998969e.cer (raw, json)
Hash identifier:          A7s7+HYegVpG9PtplIL7JFxkkTyPhmwFax0BN/EMjtA=
Subject key identifier:   81:02:BF:97:A6:20:73:24:2E:CB:C3:8A:7C:54:DF:69:E8:04:13:E9
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328576D51CC73C042CFC16ECD4B4219
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bd40b8d4-3173-4741-b603-91d1e998969e/bd40b8d4-3173-4741-b603-91d1e998969e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bd40b8d4-3173-4741-b603-91d1e998969e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 10 Sep 2015 19:08:27 +0000
Certificate not after:    Wed 10 Sep 2025 19:08:27 +0000
Subordinate resources:    AS: 393380
                          AS: 394226
                          IP: 192.34.16.0/23
                          IP: 192.206.69.0/24
                          IP: 2620:c8:c000::/44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:cd:4b:42:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep 10 19:08:27 2015 GMT
            Not After : Sep 10 19:08:27 2025 GMT
        Subject: CN=bd40b8d4-3173-4741-b603-91d1e998969e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0e:e2:b9:ef:fc:3b:ef:95:95:83:81:81:99:
                    06:ac:3a:d7:43:fc:b1:c8:12:80:bc:2a:7c:49:5d:
                    07:a3:4f:bd:3e:7f:f5:70:00:66:f6:7f:e1:e3:6b:
                    a4:8a:e2:20:b1:6f:fe:6c:b8:e4:48:c1:7a:72:d1:
                    26:be:36:cb:ee:b6:ba:8f:d0:1c:87:83:b2:7b:76:
                    60:f4:3b:23:a6:78:b6:7a:68:0b:c6:23:0c:65:99:
                    db:83:bd:00:88:97:8d:59:f6:f7:55:94:a7:83:0b:
                    76:13:9b:41:c7:96:58:24:3a:4f:7b:b6:43:70:d8:
                    76:4b:85:19:da:85:44:32:09:22:55:2b:15:03:cc:
                    c1:2a:d6:9b:5f:81:2c:a3:41:f3:48:74:ab:59:30:
                    d1:f2:f0:ff:59:fe:af:dc:cd:66:b9:b0:7a:f5:89:
                    f6:0d:5c:40:b2:96:2d:10:bd:ab:c8:c5:cd:a1:8a:
                    f1:a8:40:e6:13:ac:fd:cf:ef:f4:df:18:dd:5d:46:
                    f4:f0:66:97:9d:5c:5a:a9:55:63:04:ed:95:04:7c:
                    94:a5:3d:93:0d:98:55:50:3c:f1:b7:5a:b1:88:ba:
                    51:a1:fc:89:37:1e:18:e2:05:4a:a5:52:c6:4e:97:
                    6e:44:e9:27:36:6c:d6:28:c8:82:db:a5:02:6d:69:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:02:BF:97:A6:20:73:24:2E:CB:C3:8A:7C:54:DF:69:E8:04:13:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bd40b8d4-3173-4741-b603-91d1e998969e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bd40b8d4-3173-4741-b603-91d1e998969e/bd40b8d4-3173-4741-b603-91d1e998969e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.16.0/23
                  192.206.69.0/24
                IPv6:
                  2620:c8:c000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393380
                  394226

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:4f:97:e2:2f:6c:c1:1f:cd:d5:6c:9e:84:ae:fe:8c:cf:de:
         d7:59:0a:66:15:f2:01:d6:c1:14:f2:b4:d5:21:2f:c8:59:fe:
         2c:a2:ca:70:b7:41:f1:71:63:73:0b:50:e1:aa:e4:1f:26:33:
         24:f1:e9:ad:56:01:82:36:b9:3a:92:83:7e:a4:06:ad:80:7c:
         3f:2c:e6:41:5e:9c:de:ba:b5:db:4a:6e:7c:bd:d1:d5:cc:2d:
         aa:45:21:d6:db:9a:da:cc:b7:54:ec:11:49:ee:01:8c:f1:90:
         95:81:ae:8f:49:b1:82:30:ee:e8:91:de:0b:a5:10:2f:ab:57:
         99:97:b8:f4:55:0d:01:0f:d5:bb:2a:92:76:f2:e9:a7:4b:75:
         1d:01:04:a3:ac:4f:2c:fc:d9:a1:3f:bb:00:89:f1:a5:18:c5:
         c6:14:7d:08:28:74:32:2b:5d:bd:3e:6b:1d:f9:08:2b:e2:02:
         a6:98:11:65:9a:b4:86:2d:2c:26:cd:ea:95:13:aa:57:82:60:
         bf:1c:ed:0b:8d:a1:2b:f0:e5:e9:32:6d:98:69:cf:ed:fe:e4:
         65:8b:d6:ac:93:db:34:59:4d:bd:5a:c0:f1:07:41:47:e6:2e:
         0a:04:66:a6:be:aa:1f:ca:f3:12:02:d6:11:8e:f0:6d:cb:11:
         57:6d:99:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:25 2023 by rpki-client on console-ams.rpki-client.org