Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a3341707bac3fc01ee9a767fc6263bdeddfba3118.cer
File:                     a3e135216a3341707bac3fc01ee9a767fc6263bdeddfba3118.cer (raw, json)
Hash identifier:          yXfu3eildeE0/12mwF9UnVeDO9vdmfWJnQoDD5/Ej4c=
Subject key identifier:   B2:2C:BF:00:06:D9:4D:F1:74:F2:90:8F:AC:1B:EA:B4:DD:EF:20:17
Authority key identifier: EE:76:48:A9:24:03:C5:6B:07:82:9B:97:3F:47:9B:1D:4E:64:0A:71
Certificate issuer:       /CN=0743eacf-bc4f-4c8a-9140-1347b6fa6ee5
Certificate serial:       010D0C9F4328583BB44BD75752527964F4096200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/55725383-b7ec-45dc-b4ba-533ae25c828e-1/0/B22CBF0006D94DF174F2908FAC1BEAB4DDEF2017.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/55725383-b7ec-45dc-b4ba-533ae25c828e-1/0
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Mon 25 Oct 2021 07:55:01 +0000
Certificate not after:    Sat 25 Oct 2031 07:55:01 +0000
Subordinate resources:    AS: 834

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:b4:4b:d7:57:52:52:79:64:f4:09:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743eacf-bc4f-4c8a-9140-1347b6fa6ee5
        Validity
            Not Before: Oct 25 07:55:01 2021 GMT
            Not After : Oct 25 07:55:01 2031 GMT
        Subject: CN=a3e135216a3341707bac3fc01ee9a767fc6263bdeddfba3118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:e9:1d:cf:81:22:c7:fd:a0:1d:ab:13:82:
                    d7:fc:c7:b4:66:db:21:8d:c9:d6:0a:2a:72:c5:5f:
                    0b:92:21:fb:58:c4:10:86:b4:82:e0:32:50:75:ff:
                    71:07:92:cb:4b:56:6b:a9:66:b9:4b:b1:fd:67:fc:
                    8b:a8:e8:74:13:7a:d9:6f:86:1f:f9:d4:d4:ee:d6:
                    8e:cf:80:67:37:5c:63:0c:5c:6f:56:20:87:b5:df:
                    ac:de:8b:ca:b2:cd:c7:13:97:5c:63:1d:95:3e:f0:
                    58:19:ad:12:a4:16:2e:53:e7:07:a3:5b:f8:9b:1b:
                    7a:ba:33:b7:1c:d6:a0:48:fe:4a:0a:41:1e:00:d7:
                    30:b1:63:46:68:4c:f0:6e:81:0c:15:66:f4:a9:9e:
                    98:0c:a8:65:78:cd:ad:91:a7:41:26:5e:47:7b:e8:
                    ec:89:36:17:8c:d8:db:61:77:55:1e:da:21:a6:21:
                    40:a7:3d:3a:b3:35:bb:ce:f5:07:32:64:42:f1:36:
                    65:d4:7e:b9:b5:fe:62:63:6c:66:58:19:2e:fd:26:
                    34:04:a1:9b:08:54:8f:b3:1a:5a:1e:87:d5:43:dc:
                    70:b0:2a:c3:f7:3d:55:a4:00:f1:1d:c9:7e:49:40:
                    68:78:0c:6d:fd:81:09:52:68:72:67:84:1a:fd:68:
                    b6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2C:BF:00:06:D9:4D:F1:74:F2:90:8F:AC:1B:EA:B4:DD:EF:20:17
            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/55725383-b7ec-45dc-b4ba-533ae25c828e-1/0
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/55725383-b7ec-45dc-b4ba-533ae25c828e-1/0/B22CBF0006D94DF174F2908FAC1BEAB4DDEF2017.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl

            X509v3 Authority Key Identifier:
                keyid:EE:76:48:A9:24:03:C5:6B:07:82:9B:97:3F:47:9B:1D:4E:64:0A:71

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  834

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7a:a7:10:77:a3:1a:3a:1d:7c:25:0a:75:cc:d3:6f:df:b2:
         4d:34:c5:1e:07:cb:4c:ce:70:5d:f5:de:84:c8:e0:b1:cd:d3:
         4d:0b:14:f5:3b:55:f1:b6:0b:bd:a7:96:4a:8f:ed:e2:b4:52:
         70:d1:b2:a4:8b:8e:dc:a5:33:b0:3d:f6:0f:bd:4a:60:51:dc:
         1a:3b:88:bb:e6:7c:2c:5f:eb:4e:63:80:c7:01:b9:21:2c:70:
         f8:86:d2:bd:a8:6d:e2:99:03:7f:8f:3d:75:8f:16:2d:98:fa:
         94:8a:02:23:e9:fd:8e:ad:1a:e5:58:ff:78:b5:4f:5f:5e:d7:
         42:40:f9:89:93:86:28:ed:3c:4b:c2:b0:1a:fc:08:14:be:7d:
         13:22:aa:13:d1:ed:9c:52:99:0e:3c:48:04:3f:f0:98:0d:25:
         e7:94:fa:73:c5:94:6b:c5:20:56:c2:6b:46:d7:c0:9d:e3:e9:
         9a:f3:9b:46:78:07:0b:97:6e:b3:c2:9a:4e:f6:48:e2:19:e4:
         9e:5e:b6:9d:07:30:a6:e3:53:eb:2c:3f:fa:86:a6:5f:1c:3e:
         70:90:2b:e3:a6:93:8a:77:8d:76:e9:cb:fa:14:d4:fa:41:21:
         b9:bc:c8:ca:52:b9:97:c1:22:fc:0f:70:68:0d:34:85:ee:59:
         06:85:78:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:36 2023 by rpki-client on console-fra.rpki-client.org