Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb8f947c-f90b-4d48-bb9e-dd46be1ecfaf.cer
File:                     fb8f947c-f90b-4d48-bb9e-dd46be1ecfaf.cer (raw, json)
Hash identifier:          OXTsr86lw0Yj8BJonQOZPhOVQGEkUPy7aGG82F1F3dE=
Subject key identifier:   C2:DA:88:EB:59:2D:94:75:D6:C3:BE:BB:67:06:CE:93:78:D1:D1:53
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E48321466489F687BF821800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb8f947c-f90b-4d48-bb9e-dd46be1ecfaf/fb8f947c-f90b-4d48-bb9e-dd46be1ecfaf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb8f947c-f90b-4d48-bb9e-dd46be1ecfaf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 06 Sep 2024 19:06:39 +0000
Subordinate resources:    AS: 18737
                          IP: 199.68.156.0/22
                          IP: 2620:2:8000::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:21:46:64:89:f6:87:bf:82:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Sep  6 19:06:39 2024 GMT
        Subject: CN=fb8f947c-f90b-4d48-bb9e-dd46be1ecfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:ac:72:0c:10:c0:b5:c3:c0:a3:a8:40:6f:
                    f0:3b:a3:96:6b:94:af:76:b2:e8:17:3b:a1:6d:2c:
                    3e:ac:73:6c:2e:58:83:49:c7:91:eb:d3:cb:74:22:
                    f5:86:5c:e8:e5:7b:95:bc:e1:ed:e0:73:92:db:bf:
                    59:4c:7e:6a:50:e5:f3:fe:78:90:79:15:2e:b5:a0:
                    b6:99:48:98:18:6c:91:4d:ac:2b:00:c2:9a:00:3a:
                    dc:02:cf:38:f3:6a:60:e9:40:24:13:fe:72:30:19:
                    5d:85:2b:d8:d4:a6:a5:bc:30:09:63:64:82:eb:41:
                    fd:b7:bd:c7:9a:e9:60:70:48:5b:d1:d4:6e:5b:0c:
                    aa:4d:d6:25:ee:92:a2:70:46:b2:b9:51:45:4d:4c:
                    31:d5:17:d6:4b:b7:8a:13:ce:9f:12:07:58:d2:cb:
                    27:dd:fd:95:53:55:58:67:43:20:e3:59:45:a8:d8:
                    4f:84:18:2a:b0:c5:77:f0:70:17:f4:61:bd:b7:03:
                    23:a1:7e:9f:14:ca:62:50:c9:21:ba:50:cb:af:88:
                    51:f2:e8:d6:21:9a:28:74:04:21:3e:b5:b5:74:1e:
                    98:ef:53:00:68:c9:56:05:16:27:b8:55:ce:96:b4:
                    f6:2a:fb:2e:f4:d2:74:13:4b:31:39:02:c8:e8:29:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DA:88:EB:59:2D:94:75:D6:C3:BE:BB:67:06:CE:93:78:D1:D1:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb8f947c-f90b-4d48-bb9e-dd46be1ecfaf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb8f947c-f90b-4d48-bb9e-dd46be1ecfaf/fb8f947c-f90b-4d48-bb9e-dd46be1ecfaf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.156.0/22
                IPv6:
                  2620:2:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18737

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:55:70:44:a2:48:88:0b:f7:da:46:7d:9b:40:50:f7:dc:f1:
         dc:24:85:5f:5d:3c:c9:ad:78:7c:7d:b4:dd:8e:2b:54:c6:4d:
         5c:de:66:99:d1:a2:92:3c:e0:10:b5:68:10:63:bb:03:91:84:
         06:13:2b:01:22:f8:1f:bf:d8:6f:5b:4d:07:0c:fa:8f:bf:38:
         ea:66:5d:28:8b:3a:d6:d0:f6:b8:1a:eb:85:67:e8:bd:fc:17:
         11:ce:c8:ec:88:6b:b3:95:d6:fa:45:bf:e2:ab:98:05:ba:58:
         3d:59:06:71:c5:38:8e:22:cf:90:fc:12:f4:66:be:0a:0e:59:
         37:5b:ac:ef:53:8f:9f:8e:f9:79:0b:ff:f1:8c:96:d5:76:4a:
         0d:e0:d0:24:7c:47:0d:2d:d5:64:82:8c:e0:da:c3:20:1b:bb:
         df:e7:91:e3:86:29:c1:95:13:f3:cd:3d:dc:b9:e2:09:c4:6f:
         7e:8f:47:9b:bb:20:8b:fd:91:23:0e:ff:a2:28:9c:7f:70:5c:
         4b:5c:5e:31:00:90:84:e0:f8:4f:15:21:54:7e:2f:ba:91:ab:
         f2:72:f4:f7:dd:9f:9d:03:d6:e2:2d:a8:dc:9a:a3:65:bf:24:
         ee:f9:d9:67:d6:51:c2:7e:88:54:b6:5c:03:93:bc:9a:e6:aa:
         51:7b:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:30 2023 by rpki-client on console-ams.rpki-client.org