Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42aca8b6-0ff7-407e-9500-82d24bdabad2.cer
File:                     42aca8b6-0ff7-407e-9500-82d24bdabad2.cer (raw, json)
Hash identifier:          qY0G558vi7UjX9W8MSRgw5KRvbCHswCoF7Ss6mftguU=
Subject key identifier:   A5:36:19:F6:83:DA:9A:E7:1F:AA:9F:6A:9F:E8:6A:81:4E:71:B0:B8
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583B05F643DAB2F50919A4F263C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42aca8b6-0ff7-407e-9500-82d24bdabad2/42aca8b6-0ff7-407e-9500-82d24bdabad2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42aca8b6-0ff7-407e-9500-82d24bdabad2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Aug 2021 21:11:56 +0000
Certificate not after:    Sat 23 Aug 2031 21:11:56 +0000
Subordinate resources:    AS: 11448
                          IP: 23.182.240.0/24
                          IP: 45.45.188.0/22
                          IP: 162.220.68.0/22
                          IP: 2606:41c0::/32
                          IP: 2620:b6:4000::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:05:f6:43:da:b2:f5:09:19:a4:f2:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Aug 23 21:11:56 2021 GMT
            Not After : Aug 23 21:11:56 2031 GMT
        Subject: CN=42aca8b6-0ff7-407e-9500-82d24bdabad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:ae:61:8a:21:2c:27:cc:4a:59:85:81:cf:
                    73:ff:c1:ae:49:56:78:56:c1:a2:63:c6:95:a0:e0:
                    61:1c:39:6f:82:70:fe:d6:a0:9d:6e:1d:cb:99:37:
                    bd:fc:39:85:56:ac:b8:6c:dc:84:de:27:da:ec:50:
                    02:fc:b3:55:91:7c:ae:aa:a6:43:97:18:79:7b:45:
                    aa:b4:29:15:c3:5b:cc:f9:2f:a8:55:d2:85:3f:6f:
                    5d:50:9a:3d:57:35:0f:8b:4d:a5:17:57:4e:27:2d:
                    dc:dd:25:8b:5d:57:78:a3:bf:1b:34:ca:bf:06:0f:
                    7f:03:6b:80:ef:8c:c0:d9:14:08:8c:fd:42:8e:74:
                    69:ce:2d:50:5e:a3:24:e2:f0:38:aa:a7:bf:2a:7e:
                    09:67:df:b4:a6:bb:4a:1d:43:76:75:3d:05:eb:6e:
                    be:e6:e2:a9:2e:cb:49:14:ff:ad:05:3e:6e:8d:eb:
                    39:40:91:33:45:01:16:45:66:e8:14:c1:f9:bb:08:
                    15:ba:5e:d1:ca:b9:76:3f:4a:df:ca:80:4c:62:90:
                    b8:a1:f7:3b:27:4a:b3:2b:b5:af:45:01:c1:b4:e2:
                    bf:30:73:44:f6:4e:85:98:95:ed:71:04:48:a7:22:
                    c2:4a:cb:ef:b1:78:3d:8c:89:83:89:d0:aa:b6:13:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:36:19:F6:83:DA:9A:E7:1F:AA:9F:6A:9F:E8:6A:81:4E:71:B0:B8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42aca8b6-0ff7-407e-9500-82d24bdabad2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42aca8b6-0ff7-407e-9500-82d24bdabad2/42aca8b6-0ff7-407e-9500-82d24bdabad2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.240.0/24
                  45.45.188.0/22
                  162.220.68.0/22
                IPv6:
                  2606:41c0::/32
                  2620:b6:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11448

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:86:73:a5:9a:dc:c1:d8:ee:0d:e9:2d:12:5b:fd:2e:84:6f:
         c0:f0:36:d9:91:c8:f1:76:c9:c8:eb:81:70:c8:99:17:e3:62:
         66:a1:9a:08:7d:40:da:c0:20:22:8f:eb:ec:0e:0e:de:cd:da:
         90:ca:3c:91:0c:44:c9:43:b8:fa:d2:2f:8c:11:5e:2c:0f:23:
         7a:0a:72:16:dc:fb:6e:9c:3d:f5:4c:0f:1b:23:1c:26:5b:e3:
         b2:b9:a5:28:5a:da:ea:c3:95:5b:9b:5c:a5:25:d7:be:e2:30:
         90:ab:1d:c9:7e:42:6f:1a:f9:a4:f7:5e:61:4a:4a:45:10:1e:
         7b:a2:85:db:74:ec:3b:f5:05:62:03:6d:e0:f9:41:df:cd:be:
         b4:2c:ec:2f:df:6e:d5:9d:3e:11:2f:84:50:c1:b7:09:16:d0:
         62:0d:2d:cc:4f:8a:c8:ae:7d:12:03:55:f5:03:63:e9:00:df:
         28:70:d2:aa:3c:5b:71:9e:b7:aa:bc:0a:89:9f:ff:3f:97:ab:
         14:56:9f:a4:a3:5f:8e:a7:f0:ad:84:e8:ba:ba:54:c2:28:f3:
         2e:3a:6d:f2:5f:3a:1b:ac:2e:ef:40:80:51:4c:1d:67:c8:ef:
         3f:97:7d:25:16:89:60:9b:0e:4b:10:bc:c9:86:4f:c8:5e:b2:
         cd:65:30:11
-----BEGIN CERTIFICATE-----
MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWDsF9kPasvUJGaTyY8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIxMDgyMzIxMTE1NloXDTMxMDgyMzIxMTE1NlowLzEtMCsGA1UEAxMk
NDJhY2E4YjYtMGZmNy00MDdlLTk1MDAtODJkMjRiZGFiYWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEGuYYohLCfMSlmFgc9z/8GuSVZ4VsGiY8aV
oOBhHDlvgnD+1qCdbh3LmTe9/DmFVqy4bNyE3ifa7FAC/LNVkXyuqqZDlxh5e0Wq
tCkVw1vM+S+oVdKFP29dUJo9VzUPi02lF1dOJy3c3SWLXVd4o78bNMq/Bg9/A2uA
74zA2RQIjP1CjnRpzi1QXqMk4vA4qqe/Kn4JZ9+0prtKHUN2dT0F626+5uKpLstJ
FP+tBT5ujes5QJEzRQEWRWboFMH5uwgVul7Ryrl2P0rfyoBMYpC4ofc7J0qzK7Wv
RQHBtOK/MHNE9k6FmJXtcQRIpyLCSsvvsXg9jImDidCqthM9wQIDAQABo4IEPjCC
BDowHQYDVR0OBBYEFKU2GfaD2prnH6qfap/oaoFOcbC4MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80
MmFjYThiNi0wZmY3LTQwN2UtOTUwMC04MmQyNGJkYWJhZDIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQyYWNhOGI2LTBmZjctNDA3ZS05
NTAwLTgyZDI0YmRhYmFkMi80MmFjYThiNi0wZmY3LTQwN2UtOTUwMC04MmQyNGJk
YWJhZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQwYIKwYBBQUH
AQcBAf8ENDAyMBgEAgABMBIDBAAXtvADBAItLbwDBAKi3EQwFgQCAAIwEAMFACYG
QcADBwAmIAC2QAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLLgwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
RYZzpZrcwdjuDektElv9LoRvwPA22ZHI8XbJyOuBcMiZF+NiZqGaCH1A2sAgIo/r
7A4O3s3akMo8kQxEyUO4+tIvjBFeLA8jegpyFtz7bpw99UwPGyMcJlvjsrmlKFra
6sOVW5tcpSXXvuIwkKsdyX5Cbxr5pPdeYUpKRRAee6KF23TsO/UFYgNt4PlB382+
tCzsL99u1Z0+ES+EUMG3CRbQYg0tzE+KyK59EgNV9QNj6QDfKHDSqjxbcZ63qrwK
iZ//P5erFFafpKNfjqfwrYTourpUwijzLjpt8l86G6wu70CAUUwdZ8jvP5d9JRaJ
YJsOSxC8yYZPyF6yzWUwEQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:38 2023 by rpki-client on console-fra.rpki-client.org