Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da.cer
File:                     80f0e919-8ed6-4b5f-bc05-1b833ab626da.cer (raw, json)
Hash identifier:          eCF/bpDwNgPXYokHriIcfXurAc4K4jnPUmeHiF+tLpU=
Subject key identifier:   A7:02:98:3F:AE:FA:FE:7F:00:28:35:A9:4C:B2:34:5D:C9:C2:81:65
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583F0370C9525C12B4950A088A40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/80f0e919-8ed6-4b5f-bc05-1b833ab626da.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 24 Aug 2022 18:39:08 +0000
Certificate not after:    Sun 04 Apr 2032 13:44:52 +0000
Subordinate resources:    AS: 54543
                          AS: 397165
                          AS: 398197
                          IP: 23.130.112.0/24
                          IP: 23.130.240.0/24
                          IP: 23.142.96.0/24
                          IP: 23.156.240.0/24
                          IP: 23.161.160.0/24
                          IP: 23.161.224.0/24
                          IP: 140.99.0.0/16
                          IP: 2600:3300::/24
                          IP: 2603:f000::/20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:03:70:c9:52:5c:12:b4:95:0a:08:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Aug 24 18:39:08 2022 GMT
            Not After : Apr  4 13:44:52 2032 GMT
        Subject: CN=80f0e919-8ed6-4b5f-bc05-1b833ab626da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:c0:73:88:07:b0:aa:8e:5f:f3:8a:6f:45:
                    d3:64:42:bd:7c:c3:31:e3:4a:f6:45:72:c3:b3:1d:
                    9e:4d:cf:6a:fa:3f:0d:42:b6:d2:d5:73:7f:16:aa:
                    e9:c7:98:09:a2:86:91:2e:25:4e:f3:c5:bf:3c:bd:
                    47:60:91:70:5f:b9:53:91:34:bf:9b:ca:d2:c9:72:
                    7a:35:ea:9b:98:d9:bb:02:fb:9a:16:57:ec:22:6c:
                    b6:33:76:f2:b6:15:9b:4b:16:a9:9b:dc:87:bd:46:
                    78:2f:1a:a5:67:e7:ef:71:8f:0f:ef:2b:61:20:3d:
                    4d:c9:43:b2:2a:1c:90:77:c5:8c:6c:4f:02:57:24:
                    e5:6c:de:bd:5f:6c:f5:35:5f:5f:5c:d8:dd:1f:a6:
                    bc:8d:1e:0a:29:c9:90:99:82:23:aa:04:e1:85:f0:
                    e4:4b:65:f8:df:0e:96:b8:ae:d5:c9:91:1a:4c:80:
                    27:47:94:c9:6b:b7:3b:1f:7e:c9:9e:66:0e:28:09:
                    07:77:74:2c:3d:fc:2a:69:55:13:60:6c:8a:f1:ba:
                    a4:4b:71:8b:6b:86:1d:13:35:c2:8b:98:ed:ea:cf:
                    6c:d2:cc:df:50:e8:1f:e6:68:8f:01:c9:65:9e:00:
                    90:99:e0:e6:ef:19:17:65:08:9a:6b:71:e3:d5:4a:
                    3a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:02:98:3F:AE:FA:FE:7F:00:28:35:A9:4C:B2:34:5D:C9:C2:81:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/80f0e919-8ed6-4b5f-bc05-1b833ab626da.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.112.0/24
                  23.130.240.0/24
                  23.142.96.0/24
                  23.156.240.0/24
                  23.161.160.0/24
                  23.161.224.0/24
                  140.99.0.0/16
                IPv6:
                  2600:3300::/24
                  2603:f000::/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54543
                  397165
                  398197

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:75:83:27:4e:e4:f0:83:c3:be:88:9c:3c:2c:93:b6:fd:21:
         6f:13:c4:2d:45:72:b9:9a:03:a0:be:c6:2d:74:21:b5:62:a6:
         69:41:ae:45:05:be:78:db:b7:d4:88:6d:90:35:f9:57:90:33:
         f5:0f:a0:91:37:2b:0c:39:3a:2a:57:51:33:7b:9d:ae:c9:b4:
         2f:de:34:25:93:2b:8a:94:50:bd:5b:de:24:93:6d:2b:8e:9b:
         b9:13:99:89:1c:a8:3a:3e:ef:09:54:21:f1:8c:74:82:bc:c1:
         36:63:c7:5f:b4:b5:5e:2e:d9:42:36:26:ce:b2:bc:5f:5d:8e:
         8b:d2:6a:8a:32:ec:16:42:41:a0:8c:df:51:11:14:d1:f0:ab:
         10:dd:fb:d9:47:6e:e6:8d:87:ff:d6:79:85:88:33:94:92:80:
         ba:2d:a6:4a:55:97:0d:21:d4:79:3f:e8:ad:04:f7:e5:af:d1:
         fd:91:f3:e8:b3:81:e2:5b:c7:75:f0:bb:ee:98:75:ef:dc:5e:
         4d:65:fe:a7:d8:7f:13:24:1f:73:68:b4:42:c6:5f:62:ff:e8:
         cf:72:ee:ac:e1:fb:ba:36:bf:5c:84:af:3a:44:fc:00:d3:a3:
         0d:d7:7b:e6:4b:03:6f:ec:77:57:0f:7f:48:72:9d:46:cd:f0:
         6d:83:70:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:37 2023 by rpki-client on console-ams.rpki-client.org