Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/258e3f96-4541-4a50-aea6-487735eb3328.cer
File:                     258e3f96-4541-4a50-aea6-487735eb3328.cer (raw, json)
Hash identifier:          qR44iLK3Q1BtE8OCjIt0fq5xDjlMxNU3EUV/28ReREk=
Subject key identifier:   A3:20:D5:04:04:08:B2:53:F5:C2:1F:AB:CC:3D:12:50:27:26:9E:62
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583C034FBDE3D1403B7CE01E35A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/258e3f96-4541-4a50-aea6-487735eb3328/258e3f96-4541-4a50-aea6-487735eb3328.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/258e3f96-4541-4a50-aea6-487735eb3328/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Nov 2021 15:11:44 +0000
Certificate not after:    Sat 22 Nov 2031 15:11:44 +0000
Subordinate resources:    IP: 23.144.224.0/24
                          IP: 2620:52:e000::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:03:4f:bd:e3:d1:40:3b:7c:e0:1e:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 22 15:11:44 2021 GMT
            Not After : Nov 22 15:11:44 2031 GMT
        Subject: CN=258e3f96-4541-4a50-aea6-487735eb3328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:68:f5:5b:b7:7a:0a:4d:38:5a:3a:88:c5:85:
                    51:f5:3c:7a:ff:fa:33:91:dd:9c:3f:cd:65:1b:e5:
                    8e:c1:c9:07:0a:24:16:58:c6:ee:85:93:cd:16:b3:
                    85:98:42:e8:d5:56:8d:0f:d5:0f:0e:d0:4d:df:88:
                    69:db:79:69:77:5a:5c:5b:a1:74:2a:60:ee:6f:44:
                    77:28:c1:6a:9f:66:8d:28:36:65:1d:c1:1e:70:54:
                    32:af:10:5f:d0:50:47:0b:f9:b6:6d:0c:82:79:53:
                    0a:03:47:b5:72:f2:d4:fd:71:d7:e5:cb:e7:e0:67:
                    11:ab:cd:49:c1:17:e2:02:a8:1d:84:1a:d4:d6:65:
                    c9:fb:cd:d2:1f:cf:3a:f9:9b:d3:2f:b3:7c:df:6c:
                    61:87:2f:43:bb:79:bb:82:5e:81:b1:06:6b:be:74:
                    86:16:75:d6:57:46:e8:60:21:7e:cb:d0:aa:a2:bd:
                    a4:29:48:11:9c:35:09:b4:e2:98:ae:68:b3:72:cc:
                    0d:82:df:ef:ca:a4:d8:80:1a:6f:e4:8b:73:f2:c8:
                    6c:e0:ef:f5:7e:ff:b6:a4:60:0c:87:c2:42:f2:b0:
                    ba:9c:a3:7d:f2:b2:b0:3d:c0:7c:e7:a0:d6:b9:4f:
                    77:b0:a7:6e:d1:ff:d6:5f:5c:95:f6:a6:b7:4f:78:
                    1d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:20:D5:04:04:08:B2:53:F5:C2:1F:AB:CC:3D:12:50:27:26:9E:62
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/258e3f96-4541-4a50-aea6-487735eb3328/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/258e3f96-4541-4a50-aea6-487735eb3328/258e3f96-4541-4a50-aea6-487735eb3328.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.224.0/24
                IPv6:
                  2620:52:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b3:42:c0:27:b5:b2:b7:45:6e:9d:ba:bf:d0:c4:74:dd:07:
         8d:37:e1:57:bb:fe:ab:ef:f1:0a:25:5c:a7:a5:b8:05:41:fd:
         56:2f:f1:36:36:92:31:49:20:45:0b:4d:41:61:74:aa:9b:f3:
         9c:d9:4e:41:a7:ae:d2:1e:92:38:e9:9e:eb:19:c3:86:14:c6:
         e7:fc:2a:70:bb:16:88:41:b2:01:ec:52:f7:cf:e8:55:40:59:
         ae:6d:51:67:a2:54:e6:96:01:49:7e:e0:f4:0a:84:9a:35:b6:
         0f:c0:18:90:73:03:41:f1:6a:9e:78:c7:72:a2:b1:5d:c5:27:
         1f:78:93:2a:70:84:06:3f:a3:e4:4c:34:3a:eb:1e:a9:bc:cd:
         f7:97:70:03:4c:eb:37:ca:b4:dd:16:8e:a4:fd:80:ba:c1:e6:
         23:5e:cc:80:45:55:b7:17:b6:ad:85:13:78:8b:3e:fe:c8:0c:
         f6:f5:69:89:19:e6:03:ad:0f:f0:13:3f:66:d8:31:ed:19:15:
         d9:c8:b8:21:5c:85:69:77:ce:03:62:82:89:37:27:37:3d:be:
         72:4f:44:8b:d9:80:31:4c:a6:74:f1:7c:38:dc:4d:fb:cf:6d:
         61:a4:b9:a3:77:85:26:5d:55:5b:d3:c9:91:d9:d7:0e:68:ef:
         f7:57:a3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:31 2023 by rpki-client on console-ams.rpki-client.org