Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52822094-9c6a-46c7-a525-aee5fe0883fe.cer
File:                     52822094-9c6a-46c7-a525-aee5fe0883fe.cer (raw, json)
Hash identifier:          W3Um835krEds+5UwkQyT8h0ufiTkMXMczKKCEaiSy1I=
Subject key identifier:   50:04:A2:C5:E4:B8:83:D3:60:D2:E8:80:E4:FB:31:EB:11:CC:18:5D
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D0D4D4429A5AB80A7483BFEC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52822094-9c6a-46c7-a525-aee5fe0883fe/52822094-9c6a-46c7-a525-aee5fe0883fe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52822094-9c6a-46c7-a525-aee5fe0883fe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 25 Feb 2022 21:51:46 +0000
Certificate not after:    Wed 25 Feb 2032 21:51:46 +0000
Subordinate resources:    IP: 137.216.0.0/16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0d:4d:44:29:a5:ab:80:a7:48:3b:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb 25 21:51:46 2022 GMT
            Not After : Feb 25 21:51:46 2032 GMT
        Subject: CN=52822094-9c6a-46c7-a525-aee5fe0883fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:49:ef:9b:9c:c5:b8:a0:0f:e0:c1:a9:1f:
                    b5:e0:1d:49:c1:fd:20:89:ce:be:53:7a:68:ac:58:
                    4e:85:a2:e1:c9:f2:df:bf:21:ed:57:63:26:ab:44:
                    06:66:02:e8:63:7a:ff:98:a3:7d:88:44:20:d6:7d:
                    ea:ce:6a:9c:08:be:12:80:0f:b7:d2:52:4a:73:47:
                    e4:09:fd:68:47:fe:d1:ee:25:cb:4a:8b:08:c1:74:
                    4c:4c:18:4b:09:88:99:37:16:04:1e:cc:f2:de:5d:
                    57:e5:4f:bc:65:1d:dc:82:c1:ea:8d:16:8b:04:57:
                    15:47:60:07:55:cc:f3:95:b8:01:bb:40:23:6e:18:
                    c8:a5:d3:e5:4f:5f:df:2f:d2:dc:f9:bb:17:c2:fc:
                    66:35:52:08:c9:1d:2f:2d:6a:56:d4:6b:9c:70:32:
                    80:8b:42:0a:a1:08:36:50:08:84:5a:f2:e5:b9:aa:
                    57:2b:d3:30:44:91:af:cc:6a:af:e4:7a:f9:48:01:
                    56:6f:b1:8d:29:f0:6f:a1:c1:97:8c:eb:7d:e4:94:
                    27:b6:9f:0e:08:08:15:f1:d3:3c:bb:dd:5b:ae:d9:
                    2b:ba:17:86:eb:59:1a:46:7f:aa:db:d3:fe:31:b6:
                    c0:a1:c2:29:8d:d7:98:4f:2c:7e:cd:45:6d:c3:79:
                    e2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:04:A2:C5:E4:B8:83:D3:60:D2:E8:80:E4:FB:31:EB:11:CC:18:5D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52822094-9c6a-46c7-a525-aee5fe0883fe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52822094-9c6a-46c7-a525-aee5fe0883fe/52822094-9c6a-46c7-a525-aee5fe0883fe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:33:5e:7f:31:71:55:c3:15:47:50:74:8e:7b:93:b4:2d:7a:
         94:f0:f8:bc:f3:84:8f:aa:53:9b:38:44:05:5d:d7:50:c1:2e:
         cd:17:57:0a:af:ae:e8:b7:d4:a2:06:e9:60:05:0e:5f:d0:f9:
         25:b8:a4:91:f9:27:a8:75:28:d7:93:d9:dc:cd:99:78:5b:70:
         48:29:9f:ca:8f:8c:5b:e8:4b:de:15:68:62:0a:e0:3e:ed:cb:
         c8:0b:55:e7:04:fa:17:ba:2b:6d:ca:c7:cb:1b:d2:c8:20:bf:
         e0:85:68:c9:54:c4:9f:79:37:af:33:11:6f:89:ae:08:a4:91:
         b8:da:08:0c:48:84:d0:8c:e3:fc:03:b3:50:0c:18:c5:a8:9e:
         43:59:5a:42:2b:a2:b6:c1:7c:1c:ed:47:cf:2e:6a:a9:cb:4b:
         ba:ce:84:9d:7a:54:f2:67:37:a3:02:48:9e:cb:5e:6e:a4:20:
         01:8e:cc:95:04:e8:5e:4d:98:65:0a:71:88:b2:bf:ed:07:bd:
         c1:6d:87:a1:24:3f:14:0d:7f:81:1c:a7:50:c0:95:7d:04:d0:
         c1:a3:91:9a:8c:31:e2:e0:4a:f1:04:7a:e3:76:bf:86:da:0a:
         6d:56:02:a7:8b:aa:78:ef:bf:42:d1:f5:e4:4d:f7:6e:53:4b:
         12:82:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:39 2023 by rpki-client on console-fra.rpki-client.org