Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3374dab4-7c36-4ac4-8509-b3bb2e8893c9.cer
File:                     3374dab4-7c36-4ac4-8509-b3bb2e8893c9.cer (raw, json)
Hash identifier:          VP4u/ZG2/T1aobiKPY1PmFDnmzz1etnT24lx4VbrauI=
Subject key identifier:   B4:88:53:97:A5:B3:3A:C2:92:42:92:9F:FE:B5:E4:02:85:0F:0A:05
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583CDA3F9B026DDD324DD7874780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3374dab4-7c36-4ac4-8509-b3bb2e8893c9/3374dab4-7c36-4ac4-8509-b3bb2e8893c9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3374dab4-7c36-4ac4-8509-b3bb2e8893c9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Feb 2022 14:58:01 +0000
Certificate not after:    Sat 07 Feb 2032 14:58:01 +0000
Subordinate resources:    AS: 400370
                          IP: 23.131.8.0/24
                          IP: 2602:fbd5::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:da:3f:9b:02:6d:dd:32:4d:d7:87:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb  7 14:58:01 2022 GMT
            Not After : Feb  7 14:58:01 2032 GMT
        Subject: CN=3374dab4-7c36-4ac4-8509-b3bb2e8893c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7e:8d:a3:4c:44:e1:6b:a2:1f:b2:65:42:cd:
                    18:3f:47:8e:0f:cd:ee:b9:a5:14:fa:0e:eb:49:ce:
                    b8:10:ed:29:3b:9c:03:64:92:49:e6:60:30:5f:94:
                    d2:82:92:d8:5f:6f:58:c8:c5:eb:29:88:df:3c:73:
                    d2:88:55:89:79:b8:52:17:45:73:46:f3:ed:94:97:
                    8b:49:d7:82:ce:09:02:52:ec:84:b2:bd:28:54:a7:
                    09:bb:1e:ea:d8:6b:32:6e:32:59:d5:fc:37:e3:8b:
                    32:99:17:fc:83:aa:14:ec:0e:74:26:09:ce:c1:b9:
                    10:f5:f8:bc:99:af:59:c2:35:29:3b:d3:cd:93:ce:
                    2a:dc:6d:e4:cf:7f:00:75:95:87:14:b5:4e:e7:98:
                    1f:ee:76:b1:24:40:d3:c4:0b:12:3b:ec:9d:6d:30:
                    73:11:37:8a:63:09:42:6a:72:34:49:51:0e:05:48:
                    6a:70:bf:ac:85:e8:77:34:07:72:6b:d4:a7:12:59:
                    05:57:85:05:ca:bf:4c:46:73:e9:57:4e:df:d5:f6:
                    a1:9a:9d:34:4e:fa:bf:7c:a3:fc:47:f8:da:79:61:
                    94:6f:02:f8:67:d6:61:ba:1a:89:7e:17:da:ba:cf:
                    6b:b7:17:06:6a:fd:12:8e:61:b0:40:4c:72:9a:0e:
                    ca:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:88:53:97:A5:B3:3A:C2:92:42:92:9F:FE:B5:E4:02:85:0F:0A:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3374dab4-7c36-4ac4-8509-b3bb2e8893c9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3374dab4-7c36-4ac4-8509-b3bb2e8893c9/3374dab4-7c36-4ac4-8509-b3bb2e8893c9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.8.0/24
                IPv6:
                  2602:fbd5::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400370

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9a:3e:81:99:bb:04:05:2f:7e:e7:0d:1a:ba:30:fb:82:7a:
         5f:3b:23:c6:fe:29:a5:b1:d3:cc:a0:b0:5f:b0:33:83:c2:f0:
         c2:86:7e:1e:61:1f:fe:f6:bb:27:f0:8d:30:3d:7d:11:ac:ea:
         74:15:42:6d:ff:83:ae:c1:eb:f7:5b:4f:61:cf:77:fd:43:c6:
         48:3c:fe:61:4c:8f:fd:ce:5a:2a:a7:2a:49:73:0b:04:98:48:
         98:eb:43:46:2e:bf:a1:44:56:b8:c5:07:e0:2d:ab:5d:55:ea:
         f7:02:aa:e9:03:1a:f7:14:2c:6f:e7:71:9b:0e:e9:07:1d:ed:
         f3:41:8a:2b:74:77:55:73:b8:17:65:04:7b:d7:32:72:5f:8b:
         c8:4c:75:ef:1f:28:b3:df:f1:d0:3a:f5:1f:2e:1b:3d:50:e5:
         97:0b:b5:83:10:92:30:c5:74:2a:1f:a5:62:8c:0b:3f:7b:7d:
         68:16:b1:a8:8e:de:a2:94:eb:18:06:44:1c:90:c4:0b:1f:28:
         f9:30:15:14:09:2c:54:88:e6:41:f5:23:f9:03:72:86:2b:6d:
         c4:63:d5:3b:a6:15:6a:ad:fa:29:e5:8a:1c:0f:25:c8:51:f0:
         c5:34:47:42:9c:79:3f:7c:3f:17:aa:2b:23:d0:bf:50:fa:06:
         14:cb:bd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:31 2023 by rpki-client on console-ams.rpki-client.org