Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8.cer
File:                     5387bf04-58cb-48fb-ac16-4936ae99bfe8.cer (raw, json)
Hash identifier:          sqIZvc99FyzgXYbYrALSL/R5Ac4b2hv6Cyzj4/YjLdA=
Subject key identifier:   F5:B2:27:36:05:07:17:BE:91:E5:39:21:38:2C:58:5F:42:C1:4E:C1
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D5220A0B6F88EBF471BC1DD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8/5387bf04-58cb-48fb-ac16-4936ae99bfe8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 22 Mar 2022 13:32:36 +0000
Certificate not after:    Mon 22 Mar 2032 13:32:36 +0000
Subordinate resources:    AS: 6653
                          AS: 7369
                          IP: 68.64.208.0/20
                          IP: 216.98.192.0/20
                          IP: 216.241.32.0/20
                          IP: 2604:280::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:52:20:a0:b6:f8:8e:bf:47:1b:c1:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 22 13:32:36 2022 GMT
            Not After : Mar 22 13:32:36 2032 GMT
        Subject: CN=5387bf04-58cb-48fb-ac16-4936ae99bfe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:83:b4:3e:83:b2:57:d4:fb:da:54:a6:b2:
                    8a:2c:15:14:fc:18:28:72:f7:da:c8:68:d9:59:15:
                    96:db:65:b1:85:90:73:e6:b2:12:05:56:91:42:69:
                    c3:fb:3e:b7:ad:92:11:05:82:7d:86:e0:85:51:7c:
                    66:cc:b2:f8:68:db:79:9d:e6:34:4b:d1:57:24:d5:
                    f1:9b:78:95:25:42:44:00:e8:8d:bf:7d:28:4f:d5:
                    14:09:5b:15:24:4a:6e:35:b3:82:f8:53:7c:f1:48:
                    f6:bb:2d:a4:ec:8c:64:a6:99:50:57:7b:e2:66:b6:
                    a4:3c:ed:2a:a3:a1:4f:83:5d:7b:b7:14:83:04:eb:
                    46:1c:39:2d:8e:e4:c6:17:8c:90:49:69:27:4e:f2:
                    a2:a0:13:9d:23:2b:3a:0c:a7:5c:b3:c0:97:8e:06:
                    a2:23:d0:10:de:d5:e1:1d:04:b1:1b:b7:8a:bb:d1:
                    bd:00:65:ec:9d:94:63:a8:14:6b:f8:4f:1d:94:cc:
                    79:94:52:a5:6d:9d:5a:04:c8:06:bc:6f:b9:d3:44:
                    66:1d:ac:ff:e8:67:63:76:0b:ff:c3:79:29:46:9e:
                    d4:c5:9b:b1:60:a8:38:b5:87:c4:fe:15:8b:6c:d4:
                    fd:24:d7:07:20:16:3e:db:01:26:d2:35:92:b2:03:
                    28:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B2:27:36:05:07:17:BE:91:E5:39:21:38:2C:58:5F:42:C1:4E:C1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8/5387bf04-58cb-48fb-ac16-4936ae99bfe8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.208.0/20
                  216.98.192.0/20
                  216.241.32.0/20
                IPv6:
                  2604:280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6653
                  7369

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:cc:93:9b:92:45:8c:a0:78:2c:f2:59:d4:1e:bb:e3:7d:79:
         7a:de:20:a0:41:a3:e7:6d:cb:57:3f:01:b8:57:3f:fa:7a:8f:
         b4:80:58:3d:16:b8:3e:21:a5:43:1c:fd:c1:e8:dd:56:4e:36:
         63:88:56:3e:ec:6f:d5:de:ba:d6:93:ed:13:20:e9:04:3b:a1:
         46:41:af:8f:47:b4:06:0b:a8:14:e1:5c:54:4e:4f:9a:a3:92:
         51:cf:92:17:a0:fb:ed:53:c0:27:5a:25:88:6a:c5:71:66:75:
         10:c8:07:a8:78:61:c3:a8:6e:7e:9e:26:b4:bd:67:09:36:8f:
         20:a4:1d:30:60:12:47:54:dc:97:eb:32:a2:0d:d3:7b:f9:f1:
         3b:34:73:cf:6c:34:64:a7:a2:aa:3e:52:24:0b:fb:79:5c:8b:
         22:0d:c2:fd:b1:83:5c:a8:dd:ee:84:d8:61:28:a3:5e:d2:bf:
         1d:be:d2:6e:bc:9d:5c:a2:90:4b:32:39:eb:e4:45:6b:24:52:
         6b:a4:8f:d4:53:48:b6:94:4c:c6:89:ac:fd:09:22:1b:2e:ff:
         2a:0d:02:85:64:f2:c6:d9:ec:28:50:bd:0e:4d:f2:b2:e0:3d:
         2a:5c:bc:a4:44:f1:e1:eb:77:97:85:f1:fc:9a:ec:e6:aa:11:
         dc:88:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:33 2023 by rpki-client on console-ams.rpki-client.org