Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51299e71-5cab-4079-ade6-d89a8ba57a1d.cer
File:                     51299e71-5cab-4079-ade6-d89a8ba57a1d.cer (raw, json)
Hash identifier:          UnbWV36IVndxaq/My2BIp5sSyh19Sy5/dy8GMo0O4zI=
Subject key identifier:   EF:1F:D0:D4:F6:2A:82:2E:EC:20:54:9B:9C:E7:78:A9:6C:DB:B1:3F
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583E059B5F1709435E20F4109F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51299e71-5cab-4079-ade6-d89a8ba57a1d/51299e71-5cab-4079-ade6-d89a8ba57a1d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51299e71-5cab-4079-ade6-d89a8ba57a1d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 25 May 2022 20:29:36 +0000
Certificate not after:    Tue 27 Aug 2024 20:29:36 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:05:9b:5f:17:09:43:5e:20:f4:10:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 25 20:29:36 2022 GMT
            Not After : Aug 27 20:29:36 2024 GMT
        Subject: CN=51299e71-5cab-4079-ade6-d89a8ba57a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d9:92:9a:1c:44:3a:dc:e2:e5:43:3d:7b:ee:
                    b9:8b:46:e9:28:bc:72:c9:3a:8d:96:58:e5:d4:c9:
                    2e:dc:3d:e4:78:54:58:47:30:0a:df:ed:d2:d9:f1:
                    27:69:32:af:48:9a:f1:c5:23:fb:40:8a:4d:04:1f:
                    23:48:0b:06:d1:7a:e7:df:e9:15:e1:40:41:8b:27:
                    c1:d9:79:b0:98:f9:a7:dc:30:75:04:4f:59:98:de:
                    8e:06:cf:fa:cf:63:e4:b6:11:b0:fb:7e:c0:62:07:
                    38:aa:9e:2f:70:cf:db:bb:8f:94:59:3d:31:a6:d7:
                    38:4c:92:89:e7:12:e7:cf:3c:28:90:22:91:6e:98:
                    d0:e8:a5:09:f1:bc:ca:6a:94:33:f7:94:9f:d9:d2:
                    c2:6b:27:26:81:ed:00:d7:17:5e:5d:8f:18:ee:37:
                    4c:ae:f0:cd:c8:d9:2e:e2:f2:4d:f1:09:28:e2:83:
                    70:cc:a1:20:ba:a7:65:fe:86:33:10:e2:4b:92:ba:
                    59:da:c8:22:bf:5b:ff:0a:1f:92:60:f4:de:81:5e:
                    90:dc:dc:bc:93:09:67:86:28:f3:b6:a5:70:59:54:
                    0f:19:6c:d6:7e:1b:65:08:41:46:01:03:41:92:64:
                    2f:e5:e6:d1:49:2a:9a:ce:d1:32:99:45:6e:b1:82:
                    9a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1F:D0:D4:F6:2A:82:2E:EC:20:54:9B:9C:E7:78:A9:6C:DB:B1:3F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51299e71-5cab-4079-ade6-d89a8ba57a1d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51299e71-5cab-4079-ade6-d89a8ba57a1d/51299e71-5cab-4079-ade6-d89a8ba57a1d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:86:8e:da:08:90:57:a6:ee:95:d1:3d:eb:c4:18:8f:06:1f:
         61:79:24:4e:f3:62:da:d3:c7:4b:05:46:1c:4e:2e:4d:eb:cd:
         f9:3c:3e:01:90:e2:9b:36:32:71:ab:2b:27:ab:05:0f:85:ce:
         24:2e:24:85:66:19:cf:8a:d7:5a:41:d2:98:05:51:e2:22:bf:
         f7:38:7d:71:d7:77:23:1c:8c:2e:05:10:3d:7c:19:15:32:26:
         73:7a:9a:c6:21:2f:fd:3c:bb:dc:61:67:24:04:8c:1f:8e:68:
         fb:ca:52:b1:10:3b:83:9e:e4:3f:de:25:2a:de:14:f0:8b:51:
         f2:b1:fd:17:f5:e3:1d:5f:f3:be:c8:9c:cc:9c:59:67:d7:4a:
         e7:dd:eb:1f:8b:ef:53:cc:9e:c1:ef:0d:a3:c5:8d:13:12:04:
         31:5e:30:ae:fd:67:01:80:14:38:1a:0e:3d:30:34:6e:5c:e4:
         71:61:83:86:7b:24:f6:cc:59:d5:0f:57:04:a7:11:38:3a:73:
         01:6f:b7:55:54:fd:8b:bb:13:9c:69:58:01:b4:55:c3:6c:7c:
         12:e9:31:6a:ff:3c:4e:97:9d:89:35:ad:d8:32:c9:3f:0d:31:
         13:3d:b6:53:83:d9:9c:44:9e:e0:48:c7:b6:5a:19:07:fc:47:
         eb:18:8a:42
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWD4Fm18XCUNeIPQQn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIyMDUyNTIwMjkzNloXDTI0MDgyNzIwMjkzNlowLzEtMCsGA1UEAxMk
NTEyOTllNzEtNWNhYi00MDc5LWFkZTYtZDg5YThiYTU3YTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dmSmhxEOtzi5UM9e+65i0bpKLxyyTqNlljl
1Mku3D3keFRYRzAK3+3S2fEnaTKvSJrxxSP7QIpNBB8jSAsG0Xrn3+kV4UBBiyfB
2XmwmPmn3DB1BE9ZmN6OBs/6z2PkthGw+37AYgc4qp4vcM/bu4+UWT0xptc4TJKJ
5xLnzzwokCKRbpjQ6KUJ8bzKapQz95Sf2dLCaycmge0A1xdeXY8Y7jdMrvDNyNku
4vJN8Qko4oNwzKEguqdl/oYzEOJLkrpZ2sgiv1v/Ch+SYPTegV6Q3Ny8kwlnhijz
tqVwWVQPGWzWfhtlCEFGAQNBkmQv5ebRSSqaztEymUVusYKawwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFO8f0NT2KoIu7CBUm5zneKls27E/MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81
MTI5OWU3MS01Y2FiLTQwNzktYWRlNi1kODlhOGJhNTdhMWQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzUxMjk5ZTcxLTVjYWItNDA3OS1h
ZGU2LWQ4OWE4YmE1N2ExZC81MTI5OWU3MS01Y2FiLTQwNzktYWRlNi1kODlhOGJh
NTdhMWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAKVcJgwDgQCAAIwCAMGBCYC/DsAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYaYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9ho7aCJBXpu6V0T3rxBiPBh9h
eSRO82La08dLBUYcTi5N6835PD4BkOKbNjJxqysnqwUPhc4kLiSFZhnPitdaQdKY
BVHiIr/3OH1x13cjHIwuBRA9fBkVMiZzeprGIS/9PLvcYWckBIwfjmj7ylKxEDuD
nuQ/3iUq3hTwi1Hysf0X9eMdX/O+yJzMnFln10rn3esfi+9TzJ7B7w2jxY0TEgQx
XjCu/WcBgBQ4Gg49MDRuXORxYYOGeyT2zFnVD1cEpxE4OnMBb7dVVP2LuxOcaVgB
tFXDbHwS6TFq/zxOl52JNa3YMsk/DTETPbZTg9mcRJ7gSMe2WhkH/EfrGIpC
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:32 2023 by rpki-client on console-ams.rpki-client.org