Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/133f99b4-ee02-4d4b-b0a6-29e17725ecde.cer
File:                     133f99b4-ee02-4d4b-b0a6-29e17725ecde.cer (raw, json)
Hash identifier:          fqPcOe4c2VAYXUROu3rYAi4rKfLtnf3fPrFVztTgy+M=
Subject key identifier:   0E:5F:96:59:8B:24:91:7F:31:3F:C5:43:33:57:08:BE:7B:FC:4C:1F
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583B46209D617BF4872FAF8A35C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/133f99b4-ee02-4d4b-b0a6-29e17725ecde/133f99b4-ee02-4d4b-b0a6-29e17725ecde.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/133f99b4-ee02-4d4b-b0a6-29e17725ecde/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 Sep 2021 20:49:00 +0000
Certificate not after:    Mon 15 Sep 2031 20:49:00 +0000
Subordinate resources:    AS: 21507
                          IP: 198.186.143.0 -- 198.186.144.255
                          IP: 204.156.192.0/19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:46:20:9d:61:7b:f4:87:2f:af:8a:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep 15 20:49:00 2021 GMT
            Not After : Sep 15 20:49:00 2031 GMT
        Subject: CN=133f99b4-ee02-4d4b-b0a6-29e17725ecde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:13:71:7d:46:9e:a0:5f:6a:2a:f2:68:f4:
                    e9:50:40:4c:96:f3:6c:21:37:f3:be:a5:3d:b6:23:
                    a8:36:10:2d:4f:60:f1:0c:a0:1e:81:e2:0d:c7:f9:
                    9d:ca:00:b4:1f:cd:9e:14:f5:0e:0e:39:37:ce:55:
                    ce:7f:1a:2d:fa:dd:d0:1d:22:12:64:fe:32:27:51:
                    41:85:8c:06:8a:02:9c:9a:43:45:b5:15:c1:ac:3a:
                    5c:ff:12:4f:c2:21:3d:f4:bc:fc:64:bf:47:87:3a:
                    c7:d8:ad:69:97:cf:71:12:14:40:09:87:7d:16:41:
                    66:2d:e2:65:84:85:58:03:50:78:7d:bd:cf:4a:de:
                    d0:0a:37:bf:55:9d:9b:08:7a:69:50:1b:40:5c:d3:
                    4c:94:71:1b:41:be:d6:af:b0:21:67:8f:84:e8:da:
                    48:18:32:81:e7:9a:cc:e7:5b:97:a5:9e:7e:bb:7e:
                    e1:61:1e:79:6f:0b:60:0f:62:62:b6:ba:cc:0d:a7:
                    34:89:1c:d9:fe:0d:e1:f1:88:04:0f:74:74:eb:93:
                    2f:92:ba:95:1a:3c:d2:23:0a:ec:35:a6:27:f5:3b:
                    c3:c4:8e:79:64:ae:c2:53:53:50:86:e7:8d:34:f6:
                    62:12:bf:61:2b:19:c5:5d:5a:5f:62:5f:65:72:b8:
                    e2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5F:96:59:8B:24:91:7F:31:3F:C5:43:33:57:08:BE:7B:FC:4C:1F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/133f99b4-ee02-4d4b-b0a6-29e17725ecde/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/133f99b4-ee02-4d4b-b0a6-29e17725ecde/133f99b4-ee02-4d4b-b0a6-29e17725ecde.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.186.143.0-198.186.144.255
                  204.156.192.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21507

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:06:a6:ce:e3:84:00:ee:0c:71:1c:30:b0:26:75:2d:25:e7:
         d5:f6:46:16:b0:9b:9f:59:2e:1f:c3:dc:ed:d7:46:3f:79:9f:
         5b:12:2a:48:96:52:0b:83:8b:d8:72:46:16:26:d5:ce:e9:6e:
         00:f0:00:12:ba:f0:ed:03:22:67:65:a8:78:63:2c:bb:f8:87:
         40:2f:7b:9d:85:47:42:17:24:c2:bc:28:f1:59:67:af:12:c0:
         00:ba:6e:f3:24:ac:e3:ed:85:3a:14:68:d8:e3:ad:0c:15:0b:
         1e:5b:3d:1e:4a:a0:ac:28:42:31:2f:11:32:a0:91:25:38:61:
         7a:c5:29:e8:7d:43:dd:5b:e6:b4:8c:c2:6e:d5:2f:7e:6e:32:
         d8:ad:e5:40:7d:2e:7b:5e:09:79:e8:eb:cf:db:4c:1d:d4:e6:
         1c:66:7e:26:b9:c8:13:a0:c3:3c:7f:79:94:26:84:30:d4:ff:
         41:d2:8c:06:0c:46:6e:b9:62:fe:77:a3:ab:ee:98:05:48:de:
         f5:6e:6d:0e:70:b3:1d:86:9f:62:f6:18:03:d1:25:70:70:41:
         2e:7c:fd:7f:42:b1:1a:db:c1:15:e3:96:a7:55:9f:9b:a6:87:
         6b:6e:5a:80:ae:3a:ac:e3:d8:c4:1a:a2:71:ef:3f:f5:ff:a1:
         7c:b6:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:36 2023 by rpki-client on console-fra.rpki-client.org