Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b.cer
File:                     7c3e0065-2137-4495-8836-4a1420c6d42b.cer (raw, json)
Hash identifier:          I4UZSdLTuRVCPDWCfy7f1Tb39qIeyNFLA4FP2sXK1Cs=
Subject key identifier:   C8:94:35:86:89:93:3B:62:E9:CF:E4:EC:AF:DD:23:A3:F7:FD:11:E2
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583DA34B0A50F68ADEF598BAF650
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/7c3e0065-2137-4495-8836-4a1420c6d42b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 Apr 2022 15:18:32 +0000
Certificate not after:    Tue 20 Apr 2032 15:18:32 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a3:4b:0a:50:f6:8a:de:f5:98:ba:f6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr 20 15:18:32 2022 GMT
            Not After : Apr 20 15:18:32 2032 GMT
        Subject: CN=7c3e0065-2137-4495-8836-4a1420c6d42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:13:98:ee:be:d6:a9:e7:d0:14:e2:50:fb:
                    e3:a7:09:55:84:42:be:19:0a:e4:10:51:1d:7d:03:
                    c6:79:61:1e:22:80:c7:20:2b:2f:6b:3f:9a:e7:89:
                    6a:1e:9d:d7:5f:4c:ea:45:7c:3a:4c:a4:36:1d:5b:
                    88:1f:9d:ab:35:d1:36:b4:18:b2:4b:ae:43:fc:79:
                    2d:05:b4:fc:03:48:d5:78:53:25:a6:46:eb:4e:5e:
                    9a:2c:44:f4:2a:e0:53:4f:3c:75:ed:df:95:cd:b4:
                    5a:02:8e:dd:bd:a6:48:c4:83:64:05:63:7e:c1:df:
                    6a:c5:75:3e:7a:75:36:08:b4:0a:fa:24:76:50:f3:
                    b2:c6:92:73:c3:da:97:93:4b:45:59:08:e4:57:0f:
                    41:a2:d5:3b:b5:26:4f:c8:f4:fb:6c:33:30:db:af:
                    b6:74:88:27:ba:0d:81:02:20:f0:7f:40:3a:ce:8a:
                    f1:7b:a2:18:0e:90:e2:2f:0a:97:57:5f:db:54:ca:
                    02:a8:a4:74:c9:ce:50:11:5a:75:e1:d3:2b:84:6c:
                    7f:b4:ac:ee:a9:4c:52:c0:0c:69:d7:c9:a5:f4:b5:
                    04:5b:18:3d:28:a0:c4:4d:8d:3f:f8:22:86:48:81:
                    8a:a6:87:a9:d5:58:69:f7:a6:42:da:83:2c:80:c3:
                    fd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:94:35:86:89:93:3B:62:E9:CF:E4:EC:AF:DD:23:A3:F7:FD:11:E2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/7c3e0065-2137-4495-8836-4a1420c6d42b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:dc:4f:59:7b:4a:01:7c:0e:6f:28:3e:db:a1:0a:41:03:56:
         5f:71:7a:20:0b:02:08:fe:18:3d:31:a5:b6:92:ef:78:0d:c7:
         d7:b2:f0:46:a6:82:ba:f0:48:81:02:62:e6:89:a6:18:d4:5c:
         50:d9:8b:14:16:82:0e:a5:c7:11:6c:26:db:16:b2:d7:fc:bf:
         21:42:8b:45:e2:b5:96:a3:93:5e:8f:c0:54:55:fa:24:bd:d2:
         1d:54:89:51:db:c1:2c:7c:31:6d:86:cb:4c:63:d9:4d:1d:d6:
         55:ce:1b:d7:98:3d:56:36:54:30:8d:03:75:44:b0:24:e0:23:
         3d:27:ed:6e:2d:09:3e:43:0b:81:1e:d5:b6:28:d7:19:f0:01:
         2d:43:4d:cd:d6:fa:bf:0d:74:87:e6:22:88:53:9b:53:43:03:
         37:45:e2:41:57:28:89:4a:76:4d:1c:cb:36:3f:5d:74:ec:2c:
         95:5e:19:99:18:61:6d:43:38:73:bf:41:a3:92:f3:ba:ad:c0:
         47:55:8a:3c:a6:5c:24:08:65:40:cd:1f:aa:35:08:4a:70:b1:
         5f:5d:57:54:5e:e3:21:d5:06:42:fa:2d:d6:71:4e:8b:1d:9e:
         38:5a:12:84:78:ca:20:49:88:da:bc:ff:a9:3d:78:bf:68:1d:
         61:30:2a:cd
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWD2jSwpQ9ore9Zi69lAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIyMDQyMDE1MTgzMloXDTMyMDQyMDE1MTgzMlowLzEtMCsGA1UEAxMk
N2MzZTAwNjUtMjEzNy00NDk1LTg4MzYtNGExNDIwYzZkNDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIMTmO6+1qnn0BTiUPvjpwlVhEK+GQrkEFEd
fQPGeWEeIoDHICsvaz+a54lqHp3XX0zqRXw6TKQ2HVuIH52rNdE2tBiyS65D/Hkt
BbT8A0jVeFMlpkbrTl6aLET0KuBTTzx17d+VzbRaAo7dvaZIxINkBWN+wd9qxXU+
enU2CLQK+iR2UPOyxpJzw9qXk0tFWQjkVw9BotU7tSZPyPT7bDMw26+2dIgnug2B
AiDwf0A6zorxe6IYDpDiLwqXV1/bVMoCqKR0yc5QEVp14dMrhGx/tKzuqUxSwAxp
18ml9LUEWxg9KKDETY0/+CKGSIGKpoep1Vhp96ZC2oMsgMP9RQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFMiUNYaJkzti6c/k7K/dI6P3/RHiMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83
YzNlMDA2NS0yMTM3LTQ0OTUtODgzNi00YTE0MjBjNmQ0MmIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdjM2UwMDY1LTIxMzctNDQ5NS04
ODM2LTRhMTQyMGM2ZDQyYi83YzNlMDA2NS0yMTM3LTQ0OTUtODgzNi00YTE0MjBj
NmQ0MmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAKVcJgwDgQCAAIwCAMGBCYC/DsAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYaYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAf3E9Ze0oBfA5vKD7boQpBA1Zf
cXogCwII/hg9MaW2ku94DcfXsvBGpoK68EiBAmLmiaYY1FxQ2YsUFoIOpccRbCbb
FrLX/L8hQotF4rWWo5Nej8BUVfokvdIdVIlR28EsfDFthstMY9lNHdZVzhvXmD1W
NlQwjQN1RLAk4CM9J+1uLQk+QwuBHtW2KNcZ8AEtQ03N1vq/DXSH5iKIU5tTQwM3
ReJBVyiJSnZNHMs2P1107CyVXhmZGGFtQzhzv0GjkvO6rcBHVYo8plwkCGVAzR+q
NQhKcLFfXVdUXuMh1QZC+i3WcU6LHZ44WhKEeMogSYjavP+pPXi/aB1hMCrN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:41 2023 by rpki-client on console-fra.rpki-client.org