Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ca30c836-e4c7-4a06-9876-6f3d45a6f7f8.cer
File:                     ca30c836-e4c7-4a06-9876-6f3d45a6f7f8.cer (raw, json)
Hash identifier:          MarO5xVfu1hkRpr6Z7Wr97fpCpfu8l1YnBKcUObMXPg=
Subject key identifier:   4B:BD:6A:F5:19:B9:2E:20:E6:45:E9:54:0A:A4:81:0D:E4:AC:B0:8D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E48354276B1E948593B4DF30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ca30c836-e4c7-4a06-9876-6f3d45a6f7f8/ca30c836-e4c7-4a06-9876-6f3d45a6f7f8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ca30c836-e4c7-4a06-9876-6f3d45a6f7f8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 04 Aug 2025 19:06:39 +0000
Subordinate resources:    IP: 2620:122:4000::/44

Validation:               Failed, certificate revoked on Tue 09 Jan 2024 12:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:54:27:6b:1e:94:85:93:b4:df:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug  4 19:06:39 2025 GMT
        Subject: CN=ca30c836-e4c7-4a06-9876-6f3d45a6f7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:c1:84:bb:ff:fd:c0:92:67:35:6b:08:5c:
                    3b:2d:cc:74:5e:ff:ec:e4:26:e5:97:4f:4c:6d:ea:
                    6f:cd:31:51:6c:db:16:40:77:72:14:37:1d:2e:55:
                    dd:df:dd:7a:40:0a:ad:f8:48:f2:a1:f9:b8:de:98:
                    24:91:ca:46:0b:51:f6:f0:e4:f2:2f:a0:5b:fc:cc:
                    59:67:2c:0b:3a:09:27:cd:46:b6:a5:6f:b0:4f:9d:
                    94:f6:c2:ed:0d:d8:1c:20:60:05:55:3b:40:77:9e:
                    8a:ab:de:1d:6c:3c:bb:b1:0a:a8:bc:43:1a:ae:09:
                    c2:97:4a:28:41:20:40:d9:0b:c7:92:04:fe:19:39:
                    7d:1c:12:9e:10:1b:b1:c9:8b:2d:5e:ca:9f:32:de:
                    69:7b:f2:06:3f:b4:29:2d:94:02:b8:c6:28:f2:99:
                    ce:74:33:ec:b4:6b:7d:42:09:b7:8e:d4:59:ac:5e:
                    a0:c6:55:cb:c3:54:20:a9:aa:9e:e1:bf:54:a2:b5:
                    d0:f3:f7:1b:6d:dc:c6:f2:2d:e7:3b:5a:3b:c2:ce:
                    f1:68:06:2f:75:28:ce:8f:24:e9:91:85:bf:c2:a7:
                    35:ce:68:e8:aa:6c:bc:f8:44:66:25:fb:8f:10:e5:
                    ce:22:45:ba:30:09:c9:ee:fe:f6:2a:cf:da:ca:8c:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BD:6A:F5:19:B9:2E:20:E6:45:E9:54:0A:A4:81:0D:E4:AC:B0:8D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ca30c836-e4c7-4a06-9876-6f3d45a6f7f8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ca30c836-e4c7-4a06-9876-6f3d45a6f7f8/ca30c836-e4c7-4a06-9876-6f3d45a6f7f8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:122:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:70:d5:74:84:4e:1d:8a:f6:09:91:16:fc:31:98:68:75:55:
         65:42:36:e0:36:cf:ae:b6:e0:70:99:2a:43:8e:23:36:af:99:
         71:be:e3:8f:b5:7f:34:5e:10:6e:cb:2c:54:9f:3b:6f:27:19:
         37:b0:6b:2e:73:e6:bf:95:be:12:47:5d:f9:9f:78:f8:36:b0:
         2e:cd:13:6b:7b:db:a4:ed:65:ac:01:0e:69:d4:0c:49:28:4f:
         85:09:b9:66:e8:03:66:1b:19:39:4f:15:02:78:da:76:c3:59:
         36:0c:53:23:45:dc:1d:5e:c9:72:cc:cb:8b:f5:1c:62:6d:95:
         09:93:50:79:af:46:ed:48:63:cf:02:9b:95:69:67:62:5a:98:
         51:0e:50:b1:8c:00:18:07:51:fa:e8:16:bb:66:22:75:0e:64:
         0c:1f:f9:27:07:a6:27:78:1a:04:ba:9b:7c:d3:31:4b:c9:0e:
         99:91:a0:db:e6:fb:91:42:42:17:89:0e:f4:cc:62:94:85:c2:
         62:9d:b5:b3:88:7a:0d:43:17:76:1b:b9:39:f7:2a:28:b5:53:
         a5:6c:17:3a:e6:ee:2f:e7:25:fd:3f:ba:f3:fa:d2:20:29:4d:
         fe:f8:13:af:bd:2c:e4:c3:e7:f9:9a:b2:28:26:7c:01:37:9b:
         fb:8e:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:36:41 2024 by rpki-client on console-fra.rpki-client.org