Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5752ba33-6fdc-428b-ac92-4d453d09c3e5.cer
File:                     5752ba33-6fdc-428b-ac92-4d453d09c3e5.cer (raw, json)
Hash identifier:          U+GJ0I/Kvi5dJ5LZuFyOvI79kSbqldjJPg8gpgV8ZlY=
Subject key identifier:   11:48:36:66:B5:16:15:3B:23:8E:9C:5E:AA:D5:B4:87:0C:03:D1:B7
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D552685BCE5B6515433A2D080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5752ba33-6fdc-428b-ac92-4d453d09c3e5/5752ba33-6fdc-428b-ac92-4d453d09c3e5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5752ba33-6fdc-428b-ac92-4d453d09c3e5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 23 Mar 2022 15:31:54 +0000
Certificate not after:    Tue 23 Mar 2032 15:31:54 +0000
Subordinate resources:    AS: 16693
                          IP: 66.22.176.0/21
                          IP: 198.91.22.0/23

Validation:               Failed, certificate revoked on Thu 26 Jan 2023 19:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:26:85:bc:e5:b6:51:54:33:a2:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 23 15:31:54 2022 GMT
            Not After : Mar 23 15:31:54 2032 GMT
        Subject: CN=5752ba33-6fdc-428b-ac92-4d453d09c3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:29:4a:75:63:bc:a1:f4:d8:70:65:fd:2b:
                    82:64:a8:b0:ba:29:19:e1:ed:10:68:6b:5f:9b:ef:
                    71:3e:1d:96:ac:7f:38:8f:0f:0c:47:f4:ee:ae:0a:
                    67:ad:ae:14:83:5d:ad:5e:5b:80:ec:88:ab:87:e4:
                    18:b5:7b:00:b8:f4:c9:09:c4:9f:78:d9:61:79:5c:
                    cb:e4:1f:69:0e:39:97:fd:d6:59:4f:2e:f3:8a:04:
                    12:22:07:ca:a6:bd:ad:1d:65:d8:d1:1c:0d:cb:34:
                    ca:fd:56:a1:a8:9f:61:27:2a:a3:02:63:42:c7:f9:
                    53:e7:48:c0:af:73:e5:8f:b2:7c:86:3f:b2:6c:1f:
                    3c:85:0a:68:0c:9f:b2:20:32:08:0b:31:c5:4e:4e:
                    3b:15:ee:30:b6:4f:4e:81:ac:a0:1d:2c:7f:a6:9c:
                    f4:bc:e1:37:b7:d6:90:34:43:fe:98:df:d4:bf:72:
                    06:72:da:b1:33:76:0b:a2:92:95:a2:18:41:58:a9:
                    49:69:9f:b1:4a:25:13:79:72:9b:b1:da:06:42:cb:
                    c0:14:e4:77:a6:c3:af:ee:b9:a1:28:6d:42:bd:88:
                    2a:d7:3e:3a:18:e5:61:08:f2:c9:99:21:9a:bf:2e:
                    82:73:ff:82:8f:af:26:81:f4:f9:ba:e9:83:bb:ac:
                    ea:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:48:36:66:B5:16:15:3B:23:8E:9C:5E:AA:D5:B4:87:0C:03:D1:B7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5752ba33-6fdc-428b-ac92-4d453d09c3e5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5752ba33-6fdc-428b-ac92-4d453d09c3e5/5752ba33-6fdc-428b-ac92-4d453d09c3e5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.176.0/21
                  198.91.22.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16693

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:19:91:28:e0:01:a5:d9:d0:0d:90:05:67:4f:da:b7:d8:0d:
         bb:5e:3b:fb:ce:c0:26:f7:2a:c4:56:fd:c9:ae:3d:a2:17:40:
         b8:83:5d:65:8b:a1:f6:55:84:fa:84:05:a0:a6:42:3f:c9:93:
         c5:0e:2c:39:4c:b0:37:86:0c:4b:e9:31:6d:4b:db:e8:13:05:
         a2:66:ad:b4:5e:3f:ef:a5:c3:95:52:77:90:f1:51:a3:4a:5b:
         19:db:ad:8c:a4:97:20:37:8b:d9:0d:a0:e6:33:3e:46:76:bf:
         4d:50:4f:38:bd:65:6b:37:70:ef:29:91:21:8d:dc:8b:9e:3a:
         34:5f:a8:aa:ec:8c:f2:f6:da:06:e2:a2:1f:bd:27:9c:ba:f6:
         a4:97:38:cb:46:8c:89:01:c7:22:8b:aa:90:06:da:6e:5c:f5:
         9d:2d:38:4b:54:0f:65:15:7a:22:1d:5c:80:cd:d3:f5:ea:9d:
         d9:d2:1f:c2:75:44:d4:b4:38:c6:e2:72:ba:84:8c:98:72:ae:
         ea:6d:0a:5c:3c:7f:f1:63:5b:6f:a9:ed:85:66:bb:4e:1f:f0:
         cd:de:51:45:77:48:22:99:80:da:4c:24:5e:bd:f4:e2:7d:e5:
         26:36:e2:c4:02:c1:cb:44:d7:3f:eb:83:08:a8:3f:be:a7:83:
         2b:5b:ec:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:44 2024 by rpki-client on console-ams.rpki-client.org