Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815.cer
File:                     11be392c-082c-49f9-bb64-29171ecbf815.cer (raw, json)
Hash identifier:          FR7TzeIYSvBY+TDmdqYYtDAqlMmaf0KpgD8UdF39A9Y=
Subject key identifier:   9E:C6:7C:EA:66:0E:04:5A:A4:BF:E6:3B:D0:C2:71:94:83:FC:50:0B
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583E15957ECC5A10AF2570BF7900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/11be392c-082c-49f9-bb64-29171ecbf815.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 31 May 2022 13:50:42 +0000
Certificate not after:    Mon 02 Sep 2024 13:50:42 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked on Wed 01 Jun 2022 14:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:15:95:7e:cc:5a:10:af:25:70:bf:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 31 13:50:42 2022 GMT
            Not After : Sep  2 13:50:42 2024 GMT
        Subject: CN=11be392c-082c-49f9-bb64-29171ecbf815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:f3:8c:f7:ec:15:fd:c7:a4:41:da:c7:86:
                    2e:d3:26:45:7a:e0:51:84:52:65:de:4a:55:b4:40:
                    fe:bd:15:bc:9b:91:b4:6f:38:1b:95:c3:36:60:9c:
                    5d:6e:31:62:fe:34:57:12:8f:4b:cd:9a:eb:5c:cc:
                    fc:1c:35:c8:f1:a2:28:44:70:d8:0c:f2:87:b6:5f:
                    cd:7f:6b:00:72:40:26:9a:70:a4:80:cc:09:3c:b3:
                    7f:1f:9c:d3:cd:04:0b:ea:65:ca:73:bd:49:76:34:
                    b3:76:54:67:5a:2f:34:10:d9:8a:81:c0:7e:1e:54:
                    d2:65:23:ae:5b:9a:2b:62:4b:2a:32:81:b6:43:e2:
                    8a:6a:b9:2e:59:a8:39:3f:cc:90:1b:50:fe:7c:aa:
                    59:24:76:ca:ce:4c:8d:48:63:1f:4f:73:2a:3a:aa:
                    a5:dc:46:95:fa:e6:c8:ce:4c:41:9e:25:be:06:5f:
                    e0:3b:5d:19:60:5c:fb:8f:a8:46:4c:91:17:3c:0d:
                    f5:3a:e8:28:6d:a7:0f:e5:ff:48:7c:21:bc:ab:24:
                    f4:f0:ed:14:05:cf:25:8d:83:4b:c7:c1:63:95:e2:
                    63:87:17:db:4c:88:03:16:38:60:dd:8d:66:f8:98:
                    95:a3:44:4a:ae:51:1f:7f:27:08:3c:e7:80:f1:d8:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C6:7C:EA:66:0E:04:5A:A4:BF:E6:3B:D0:C2:71:94:83:FC:50:0B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/11be392c-082c-49f9-bb64-29171ecbf815.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:9f:6e:dd:00:44:0f:95:17:07:2f:7f:27:e2:b4:91:e2:35:
         e5:a4:be:d0:c8:b7:2f:73:2e:b0:0b:2e:68:64:15:48:0f:ca:
         c0:5a:82:30:f1:c1:8a:65:13:3e:c8:cb:b3:02:bc:93:c4:f4:
         21:1e:29:c6:51:c7:f1:88:02:96:73:99:48:9e:fc:5c:ea:7b:
         d9:70:a3:f3:ba:da:8a:11:bf:71:10:09:c7:db:4b:69:ed:85:
         b8:9a:86:33:d4:01:e8:0a:f9:da:01:06:d7:d3:42:ca:d7:a1:
         88:28:0c:0d:2b:b7:c9:a8:a5:d1:83:88:86:41:54:7d:6e:6e:
         4a:0c:0d:d6:e5:57:8f:58:61:19:c6:d5:14:64:05:23:ee:76:
         58:81:5f:12:a9:40:54:e0:4f:53:cb:56:41:be:b0:2a:35:8c:
         a8:46:1d:59:c0:25:b1:04:4a:c7:21:0a:f8:eb:4a:e2:39:5a:
         c8:fe:50:b1:5e:d4:50:e9:65:af:43:c6:fb:0f:96:15:cf:58:
         62:68:19:66:1d:9a:33:7f:3e:87:e6:39:e4:db:09:0a:86:f1:
         9b:f3:50:d1:6f:c9:08:33:9f:5c:8c:87:0b:d1:61:ec:d3:f6:
         15:58:7b:52:bc:ec:c8:e9:2f:78:18:db:86:a8:0d:e6:dc:99:
         d5:6d:19:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:06 2024 by rpki-client on console-ams.rpki-client.org