Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c9fbd7-d670-42e1-9274-1ad053d66f9e.cer
File:                     47c9fbd7-d670-42e1-9274-1ad053d66f9e.cer (raw, json)
Hash identifier:          oD19MyBFUvS/LmMfZg5sKykwfaSjzav8FWqv3M98Xq8=
Subject key identifier:   C3:3A:22:1F:BA:55:35:4D:20:8B:0F:F3:8C:96:AA:E9:DB:99:71:C2
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D5B2702C4BD4BF62415632A60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c9fbd7-d670-42e1-9274-1ad053d66f9e/47c9fbd7-d670-42e1-9274-1ad053d66f9e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c9fbd7-d670-42e1-9274-1ad053d66f9e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 25 Mar 2022 19:07:44 +0000
Certificate not after:    Thu 25 Mar 2032 19:07:44 +0000
Subordinate resources:    IP: 148.59.77.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5b:27:02:c4:bd:4b:f6:24:15:63:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 25 19:07:44 2022 GMT
            Not After : Mar 25 19:07:44 2032 GMT
        Subject: CN=47c9fbd7-d670-42e1-9274-1ad053d66f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:27:ed:a8:7c:d6:cc:5f:b2:aa:18:57:2c:9d:
                    ab:e0:40:aa:34:1c:48:27:7a:f8:2e:69:58:db:94:
                    e0:50:da:3a:cd:0d:d1:d0:35:95:2b:38:61:94:fa:
                    8f:d4:2e:c6:43:21:09:5f:92:1c:27:66:ff:e5:45:
                    3d:7c:7d:ba:a1:d2:7a:c4:aa:10:70:c6:33:94:d1:
                    d9:f0:08:01:80:19:8f:9e:ee:41:27:73:3e:83:45:
                    2d:0a:0f:e9:f6:4c:c7:6a:bc:aa:01:9c:2f:7f:d2:
                    35:30:40:2b:2d:c9:60:19:8b:43:43:1d:ff:e5:c3:
                    d2:f6:11:7b:07:4e:27:84:11:90:80:34:79:ba:51:
                    db:65:77:d7:e7:dd:c2:8b:c1:65:77:07:23:f8:a3:
                    8e:57:c7:38:cf:c4:94:5b:b4:45:06:68:8e:8c:7b:
                    68:cb:30:b9:13:97:e7:28:59:62:5e:db:fb:aa:bc:
                    bf:22:38:68:5a:c0:86:b7:fd:87:dd:7b:8c:b7:59:
                    f7:57:58:27:7b:aa:9f:e3:f9:8c:8c:f7:9c:0f:ef:
                    fd:62:3b:d3:41:f2:95:25:9d:2d:d8:aa:e8:92:70:
                    77:95:03:74:3e:dc:66:e9:ad:4c:05:d0:83:3f:48:
                    92:7b:0c:55:89:5a:6b:55:e3:89:00:bc:81:e6:67:
                    69:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3A:22:1F:BA:55:35:4D:20:8B:0F:F3:8C:96:AA:E9:DB:99:71:C2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c9fbd7-d670-42e1-9274-1ad053d66f9e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c9fbd7-d670-42e1-9274-1ad053d66f9e/47c9fbd7-d670-42e1-9274-1ad053d66f9e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d4:ca:af:4a:9b:ec:47:2f:85:9d:22:2f:2e:86:9f:f4:8b:
         5b:a3:65:84:56:7f:01:3c:5e:2a:e9:f7:61:1e:37:ac:68:9b:
         74:2d:c5:62:b0:68:2a:9a:d0:14:bf:8b:80:d7:87:dd:b3:43:
         f1:0c:28:98:e0:8a:b7:31:24:27:e6:bd:83:76:82:85:71:25:
         bb:17:ab:cc:f5:14:d3:a7:4c:1e:b6:6f:00:3b:17:c2:da:f7:
         d0:23:54:87:f5:3f:93:32:b8:8a:c7:6c:7f:e3:ea:7e:3b:08:
         a3:a6:db:5a:fc:ec:36:9b:07:b5:bd:c5:b3:5d:87:2b:8b:fa:
         28:69:8d:7c:03:db:4a:d5:74:5e:cf:a5:51:01:42:e7:36:1f:
         ac:f7:24:4e:00:67:1a:c3:d2:fe:dc:53:8a:2a:9a:7c:46:da:
         85:cf:a4:dd:c6:f9:2a:bb:82:b0:ae:0c:18:36:ab:6b:ab:68:
         1d:57:4e:a2:dc:ab:4f:c9:b5:86:db:87:da:79:5d:c7:d2:14:
         38:03:c1:35:8c:91:2a:97:d2:33:e2:c7:b0:3f:38:59:c4:53:
         ee:21:6a:1f:6d:2d:c0:26:41:fc:2d:fc:fa:09:b1:2d:af:f2:
         23:af:75:2c:ec:db:9b:32:13:a4:a3:45:eb:e4:d0:90:a5:79:
         3b:4d:6a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:38 2023 by rpki-client on console-fra.rpki-client.org