Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4962e6f7-6ea7-4c4a-a93c-27cb7a201f8d.cer
File:                     4962e6f7-6ea7-4c4a-a93c-27cb7a201f8d.cer (raw, json)
Hash identifier:          X+tbXZxpZipm4GSed8nEcS9uGqQH/xjgcCyVTCWDD0c=
Subject key identifier:   43:76:C4:D0:10:FA:11:4C:A3:13:3D:37:AC:8D:A5:FF:17:69:A7:05
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D7EEE5DD1629645038B6C1F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4962e6f7-6ea7-4c4a-a93c-27cb7a201f8d/4962e6f7-6ea7-4c4a-a93c-27cb7a201f8d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4962e6f7-6ea7-4c4a-a93c-27cb7a201f8d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 29 Mar 2022 18:15:59 +0000
Certificate not after:    Mon 29 Mar 2032 18:15:59 +0000
Subordinate resources:    AS: 400542
                          IP: 23.133.248.0/23
                          IP: 2602:fba2::/32
                          IP: 2606:c740::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7e:ee:5d:d1:62:96:45:03:8b:6c:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 29 18:15:59 2022 GMT
            Not After : Mar 29 18:15:59 2032 GMT
        Subject: CN=4962e6f7-6ea7-4c4a-a93c-27cb7a201f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:f9:24:c3:67:20:a2:f9:28:a2:17:12:c0:
                    91:46:4d:14:64:d9:85:f8:6b:92:c3:93:57:45:ef:
                    2d:c5:77:40:aa:fe:98:eb:ba:fc:ef:61:09:c0:ba:
                    0c:bd:e6:24:fe:c5:6a:ce:ef:b8:58:13:7d:99:93:
                    6a:ac:39:e5:16:16:1f:ab:0c:bc:c7:78:97:d7:e6:
                    7a:28:ef:3f:ea:34:ac:f5:ef:8e:82:4d:d4:63:16:
                    87:71:24:fb:73:07:f6:4c:f6:e4:d0:ba:af:f0:85:
                    89:37:01:b7:d9:d0:21:de:c8:a0:c2:1a:d1:94:b5:
                    8f:16:df:f5:5f:3c:fb:4b:fd:5c:06:5f:d8:fd:aa:
                    4a:46:56:36:b3:40:2e:21:b7:f6:6d:d9:79:e4:4c:
                    1d:5b:20:6c:35:75:67:49:bf:fa:f1:c4:14:5c:0c:
                    51:69:9e:c6:8f:a5:0a:46:64:df:61:70:8c:85:33:
                    e5:5d:c7:00:30:76:f1:6f:c7:a1:20:0e:d3:18:3e:
                    53:ac:55:81:08:84:c2:6a:f0:bb:f2:e2:1c:4e:b2:
                    46:d3:0f:f8:5a:39:02:43:0c:f2:ed:1b:d8:88:81:
                    62:06:dd:dc:aa:a7:b7:60:1a:e9:a6:b1:ac:92:ca:
                    fb:e1:f1:29:11:41:ad:ec:fd:c7:18:4d:b4:b9:15:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:76:C4:D0:10:FA:11:4C:A3:13:3D:37:AC:8D:A5:FF:17:69:A7:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4962e6f7-6ea7-4c4a-a93c-27cb7a201f8d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4962e6f7-6ea7-4c4a-a93c-27cb7a201f8d/4962e6f7-6ea7-4c4a-a93c-27cb7a201f8d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.248.0/23
                IPv6:
                  2602:fba2::/32
                  2606:c740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400542

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:b4:ef:4c:df:85:f0:85:7c:d2:34:97:c8:a1:83:58:ac:
         19:2c:17:98:05:e2:34:53:a5:0f:17:ee:6d:f2:3c:15:30:70:
         90:20:67:03:a9:3e:b6:66:30:fd:2f:58:e3:1c:3a:20:bf:40:
         98:dc:30:04:d8:b5:f5:5b:4c:86:1c:8e:f3:4f:61:b7:a8:64:
         30:3d:f6:6e:b6:56:fb:f7:58:da:82:65:c9:90:4d:f6:04:a8:
         7d:24:08:b1:09:ea:78:f3:a3:49:c0:87:12:5d:4b:1d:c5:9c:
         25:83:8f:e5:59:df:38:e8:ce:4c:a8:ff:37:03:7d:f2:d4:b0:
         9f:54:35:bc:e2:f0:3d:dd:c7:4b:19:71:76:f2:5b:46:64:e4:
         bc:4d:1e:dc:b5:19:f5:16:91:df:79:0c:fc:1c:6e:6c:54:85:
         24:d1:ab:34:dc:68:c9:23:c5:57:e1:50:01:3e:4d:c9:c5:d2:
         1d:d1:af:cd:35:0b:7d:fd:28:13:83:34:23:e6:e4:8e:42:05:
         4a:7c:b9:52:ab:2c:b6:58:e6:3c:f0:3b:b8:19:2c:aa:89:93:
         dc:32:52:97:6b:2a:b1:62:d7:05:00:1b:4c:e3:e7:b3:49:68:
         96:28:b0:d1:f5:ba:04:8a:1b:fd:b7:2e:97:4d:6f:c6:2f:34:
         d1:c4:54:44
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWD1+7l3RYpZFA4tsHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIyMDMyOTE4MTU1OVoXDTMyMDMyOTE4MTU1OVowLzEtMCsGA1UEAxMk
NDk2MmU2ZjctNmVhNy00YzRhLWE5M2MtMjdjYjdhMjAxZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1z5JMNnIKL5KKIXEsCRRk0UZNmF+GuSw5NX
Re8txXdAqv6Y67r872EJwLoMveYk/sVqzu+4WBN9mZNqrDnlFhYfqwy8x3iX1+Z6
KO8/6jSs9e+Ogk3UYxaHcST7cwf2TPbk0Lqv8IWJNwG32dAh3sigwhrRlLWPFt/1
Xzz7S/1cBl/Y/apKRlY2s0AuIbf2bdl55EwdWyBsNXVnSb/68cQUXAxRaZ7Gj6UK
RmTfYXCMhTPlXccAMHbxb8ehIA7TGD5TrFWBCITCavC78uIcTrJG0w/4WjkCQwzy
7RvYiIFiBt3cqqe3YBrpprGsksr74fEpEUGt7P3HGE20uRUTKQIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFEN2xNAQ+hFMoxM9N6yNpf8XaacFMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80
OTYyZTZmNy02ZWE3LTRjNGEtYTkzYy0yN2NiN2EyMDFmOGQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ5NjJlNmY3LTZlYTctNGM0YS1h
OTNjLTI3Y2I3YTIwMWY4ZC80OTYyZTZmNy02ZWE3LTRjNGEtYTkzYy0yN2NiN2Ey
MDFmOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMAwEAgABMAYDBAEXhfgwFAQCAAIwDgMFACYC+6IDBQAmBsdAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYcnjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOsLTvTN+F8IV80jSX
yKGDWKwZLBeYBeI0U6UPF+5t8jwVMHCQIGcDqT62ZjD9L1jjHDogv0CY3DAE2LX1
W0yGHI7zT2G3qGQwPfZutlb791jagmXJkE32BKh9JAixCep486NJwIcSXUsdxZwl
g4/lWd846M5MqP83A33y1LCfVDW84vA93cdLGXF28ltGZOS8TR7ctRn1FpHfeQz8
HG5sVIUk0as03GjJI8VX4VABPk3JxdId0a/NNQt9/SgTgzQj5uSOQgVKfLlSqyy2
WOY88Du4GSyqiZPcMlKXayqxYtcFABtM4+ezSWiWKLDR9boEihv9ty6XTW/GLzTR
xFRE
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:32 2023 by rpki-client on console-ams.rpki-client.org