Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/838d6d32-99dd-4f9c-aaa4-106e28d9952b.cer
File:                     838d6d32-99dd-4f9c-aaa4-106e28d9952b.cer (raw, json)
Hash identifier:          35bbwsqDfiTrEqgfk0RPSF12jHuMXX3AWWMOTss5vWY=
Subject key identifier:   BF:A0:11:CD:A3:54:4F:F7:FF:D8:BB:1D:63:D5:C2:5C:44:21:42:11
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583CCA136A4962C26875EE233380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/838d6d32-99dd-4f9c-aaa4-106e28d9952b/838d6d32-99dd-4f9c-aaa4-106e28d9952b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/838d6d32-99dd-4f9c-aaa4-106e28d9952b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 01 Feb 2022 19:56:03 +0000
Certificate not after:    Sun 01 Feb 2032 19:56:03 +0000
Subordinate resources:    AS: 33151
                          AS: 40912
                          IP: 204.13.200.0/22
                          IP: 208.90.236.0/22
                          IP: 2620:0:d20::/48
                          IP: 2620:bb:c000::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ca:13:6a:49:62:c2:68:75:ee:23:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb  1 19:56:03 2022 GMT
            Not After : Feb  1 19:56:03 2032 GMT
        Subject: CN=838d6d32-99dd-4f9c-aaa4-106e28d9952b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:aa:37:6e:c1:65:d2:0f:4f:e5:d0:83:d6:4b:
                    bf:da:21:ce:a5:72:51:50:b0:5d:ac:03:a3:9a:d6:
                    0f:fd:96:65:4f:f7:5a:6e:fd:60:6f:c8:c3:4a:0b:
                    4f:10:3f:3c:fc:8a:b8:19:2b:2d:d8:f0:33:b4:b9:
                    69:23:63:42:3a:34:72:7e:53:05:15:e7:8b:30:48:
                    d9:c0:00:44:cd:97:51:93:3e:e5:63:76:d3:4e:e5:
                    0b:e7:9a:c8:15:8e:62:e5:3d:5c:02:67:6a:e2:f1:
                    1d:dc:b6:87:ac:be:a6:48:25:ae:91:3e:68:b5:c5:
                    b6:02:bd:07:54:30:ab:0d:9a:0b:71:dc:a3:17:96:
                    e3:5a:9c:53:07:d5:5d:c9:be:2b:57:9d:9e:29:f5:
                    08:e6:95:d0:31:e4:76:30:12:58:b8:fb:d3:5a:90:
                    4b:5d:cf:db:4e:6c:89:f2:8b:7a:51:a9:26:c8:e9:
                    09:d4:50:b1:a4:6e:1f:4f:97:96:63:51:a6:0c:68:
                    d0:ea:0b:19:6d:f8:ee:ca:ae:47:e9:ce:c2:59:dc:
                    aa:89:63:f8:7c:d9:fc:21:a4:87:90:7d:ee:29:0e:
                    31:36:19:5f:b9:ee:b6:86:0b:2e:7f:08:dd:87:0b:
                    41:09:60:bb:fa:e8:dd:70:18:df:f2:f9:35:24:3b:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A0:11:CD:A3:54:4F:F7:FF:D8:BB:1D:63:D5:C2:5C:44:21:42:11
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/838d6d32-99dd-4f9c-aaa4-106e28d9952b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/838d6d32-99dd-4f9c-aaa4-106e28d9952b/838d6d32-99dd-4f9c-aaa4-106e28d9952b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.200.0/22
                  208.90.236.0/22
                IPv6:
                  2620:0:d20::/48
                  2620:bb:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33151
                  40912

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:37:2b:3b:9a:7b:e1:68:17:97:69:08:13:0c:d8:18:7a:8f:
         36:98:b9:c3:0a:ca:c9:6c:86:17:84:b6:d5:aa:db:e8:82:d8:
         e2:29:5f:db:b7:ff:7f:d9:03:61:ec:de:51:ec:3a:5b:71:4a:
         02:f9:7d:81:db:90:cd:a3:78:9a:ad:ea:8b:0a:e3:0c:1e:3f:
         5b:71:95:5a:1a:15:05:26:c5:6a:e2:17:83:39:ba:0a:ec:5b:
         15:88:86:2d:e2:dc:1c:bb:6e:6c:71:50:85:c2:2c:5b:84:e1:
         07:77:04:15:df:44:16:11:37:a3:e8:7f:1a:a9:d9:9f:f1:16:
         89:b8:ad:74:fb:56:d5:aa:76:d8:5b:52:92:7f:c4:a7:68:ec:
         53:fd:2c:65:1c:c8:6e:1c:a8:94:e9:ef:44:b9:80:30:e4:f8:
         a7:3f:0c:41:0a:b8:70:83:df:39:39:85:98:94:43:b7:e1:00:
         ef:dd:3f:cb:89:43:9d:39:59:3f:fd:da:8e:fe:ef:3a:75:1d:
         ff:ab:0a:90:25:6d:e8:ff:54:70:e5:c3:e1:20:05:2c:8e:5b:
         dc:be:6a:bc:e6:6c:c8:4e:40:53:91:7c:07:4c:ec:c7:1f:cb:
         e8:24:3a:07:19:7a:5e:a9:93:10:44:4d:30:e6:41:c1:94:d1:
         26:60:62:fa
-----BEGIN CERTIFICATE-----
MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWDzKE2pJYsJode4jM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIyMDIwMTE5NTYwM1oXDTMyMDIwMTE5NTYwM1owLzEtMCsGA1UEAxMk
ODM4ZDZkMzItOTlkZC00ZjljLWFhYTQtMTA2ZTI4ZDk5NTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqo3bsFl0g9P5dCD1ku/2iHOpXJRULBdrAOj
mtYP/ZZlT/dabv1gb8jDSgtPED88/Iq4GSst2PAztLlpI2NCOjRyflMFFeeLMEjZ
wABEzZdRkz7lY3bTTuUL55rIFY5i5T1cAmdq4vEd3LaHrL6mSCWukT5otcW2Ar0H
VDCrDZoLcdyjF5bjWpxTB9Vdyb4rV52eKfUI5pXQMeR2MBJYuPvTWpBLXc/bTmyJ
8ot6UakmyOkJ1FCxpG4fT5eWY1GmDGjQ6gsZbfjuyq5H6c7CWdyqiWP4fNn8IaSH
kH3uKQ4xNhlfue62hgsufwjdhwtBCWC7+ujdcBjf8vk1JDtvJQIDAQABo4IEQDCC
BDwwHQYDVR0OBBYEFL+gEc2jVE/3/9i7HWPVwlxEIUIRMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84
MzhkNmQzMi05OWRkLTRmOWMtYWFhNC0xMDZlMjhkOTk1MmIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzgzOGQ2ZDMyLTk5ZGQtNGY5Yy1h
YWE0LTEwNmUyOGQ5OTUyYi84MzhkNmQzMi05OWRkLTRmOWMtYWFhNC0xMDZlMjhk
OTk1MmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwPwYIKwYBBQUH
AQcBAf8EMDAuMBIEAgABMAwDBALMDcgDBALQWuwwGAQCAAIwEgMHACYgAAANIAMH
ACYgALvAADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAgX8CAwCf0DBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQBuNys7mnvhaBeXaQgTDNgYeo82mLnDCsrJbIYXhLbVqtvogtjiKV/bt/9/2QNh
7N5R7DpbcUoC+X2B25DNo3iareqLCuMMHj9bcZVaGhUFJsVq4heDOboK7FsViIYt
4twcu25scVCFwixbhOEHdwQV30QWETej6H8aqdmf8RaJuK10+1bVqnbYW1KSf8Sn
aOxT/SxlHMhuHKiU6e9EuYAw5PinPwxBCrhwg985OYWYlEO34QDv3T/LiUOdOVk/
/dqO/u86dR3/qwqQJW3o/1Rw5cPhIAUsjlvcvmq85mzITkBTkXwHTOzHH8voJDoH
GXpeqZMQRE0w5kHBlNEmYGL6
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:38 2023 by rpki-client on console-ams.rpki-client.org