Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d6c1c99-ec15-4868-9fe5-7f3c1f7493e3.cer
File:                     1d6c1c99-ec15-4868-9fe5-7f3c1f7493e3.cer (raw, json)
Hash identifier:          qKAotdNYWp5fQD1Ufjlqu8gSpMSqSEEKxO/EVoj+89M=
Subject key identifier:   49:B4:90:74:37:97:9E:1E:BA:2E:3A:21:69:AE:0A:F9:4C:D2:3B:33
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D6E08DB96B775F5AB6E80AD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d6c1c99-ec15-4868-9fe5-7f3c1f7493e3/1d6c1c99-ec15-4868-9fe5-7f3c1f7493e3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d6c1c99-ec15-4868-9fe5-7f3c1f7493e3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 01 Apr 2022 13:27:20 +0000
Certificate not after:    Thu 01 Apr 2032 13:27:20 +0000
Subordinate resources:    AS: 40174
                          IP: 69.41.80.0/20
                          IP: 72.34.176.0/20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:6e:08:db:96:b7:75:f5:ab:6e:80:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr  1 13:27:20 2022 GMT
            Not After : Apr  1 13:27:20 2032 GMT
        Subject: CN=1d6c1c99-ec15-4868-9fe5-7f3c1f7493e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:6d:68:d7:99:e2:01:99:78:32:d7:09:d8:
                    d8:ef:06:53:3a:7e:6f:17:dd:ef:1c:fa:ff:17:74:
                    d0:07:85:03:55:be:07:1e:80:ba:20:9c:ad:4d:f2:
                    e2:38:a5:fb:67:36:18:c9:18:a7:08:ed:8c:1c:71:
                    8b:f3:cc:74:9f:49:bc:51:56:f8:fc:23:8c:71:9d:
                    1b:22:ab:d0:19:ee:80:a9:be:31:74:c4:f1:ed:88:
                    5c:0c:4d:58:af:82:01:0c:80:83:c4:de:e6:cc:52:
                    2e:ce:76:4f:4e:c7:dd:c2:09:57:3b:11:ee:7e:95:
                    51:e5:6d:ab:c4:1a:35:30:e4:2e:15:30:1f:5b:d5:
                    90:ba:4b:ab:dd:39:c4:f6:f7:4f:56:0d:5c:6f:eb:
                    28:cd:c7:ec:09:c1:55:33:36:03:f6:47:d5:cb:6d:
                    96:45:b4:b6:95:32:09:17:73:1a:39:25:92:2c:89:
                    cf:29:b9:8e:24:e9:10:e0:69:2e:d6:3a:3e:99:be:
                    33:7b:22:53:a7:3f:ec:04:a5:bb:bb:bc:ec:9c:8d:
                    d9:47:6a:0a:6c:fb:d9:aa:b2:06:62:b6:41:42:4f:
                    46:d1:3d:38:fd:2b:49:72:40:35:cd:6a:e5:51:16:
                    c8:d8:c4:fa:fb:ea:f8:ed:72:83:f7:0a:3b:58:c6:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B4:90:74:37:97:9E:1E:BA:2E:3A:21:69:AE:0A:F9:4C:D2:3B:33
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d6c1c99-ec15-4868-9fe5-7f3c1f7493e3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d6c1c99-ec15-4868-9fe5-7f3c1f7493e3/1d6c1c99-ec15-4868-9fe5-7f3c1f7493e3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.80.0/20
                  72.34.176.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40174

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:52:fb:7b:bc:40:6f:8e:17:93:52:82:85:3c:9d:c4:fa:23:
         f6:2d:a7:c7:33:1d:27:4b:56:69:64:03:4a:e6:e0:24:d4:b0:
         b2:4f:9b:e2:3e:f4:28:3b:d8:c1:ef:84:90:b3:09:83:58:a5:
         0b:d0:4d:61:bd:cf:8f:50:fe:d5:19:a7:19:d9:ff:21:13:b2:
         f1:7f:c7:cd:9c:a2:eb:c5:5d:7e:81:1f:83:90:4f:7b:6a:e5:
         aa:1f:8d:2d:b7:56:10:e9:ff:f4:89:c8:f8:2a:ca:90:f2:b7:
         91:fd:1a:51:9a:37:3f:88:39:40:7b:97:92:b9:b9:7e:28:40:
         23:d9:47:dd:30:e3:32:ee:f9:18:29:19:f8:44:e7:44:77:94:
         a3:b6:2a:98:0d:e1:f3:ef:ec:79:81:14:85:6b:f8:e5:b6:60:
         f3:37:1b:58:91:f8:3d:f7:e0:3d:6f:aa:72:e2:d4:9e:39:b6:
         4e:11:ae:b2:e8:40:78:e1:1f:e8:8e:be:2c:bc:c4:cd:0e:2b:
         6f:0f:d4:2f:dc:8c:10:07:e0:53:ab:7b:73:e6:2d:9c:52:fc:
         e5:85:61:3c:9f:15:d9:dc:32:24:aa:92:ec:41:6a:61:38:62:
         37:8c:93:1d:c8:96:0a:18:d8:0a:85:53:3c:27:2e:74:25:05:
         a8:50:5e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:37 2023 by rpki-client on console-fra.rpki-client.org