Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/956968d7-f6f8-44a1-90d1-bb7785293db4.cer
File:                     956968d7-f6f8-44a1-90d1-bb7785293db4.cer (raw, json)
Hash identifier:          DWNgS24Ns2M/KN60nyTJRcXNXPmkOs9eXO4aA/F8Wc0=
Subject key identifier:   82:A6:25:DF:26:06:23:1E:4A:CF:B4:CD:34:DF:83:5D:38:E6:E6:BD
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D873C5544374BD4F11D42ECE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/956968d7-f6f8-44a1-90d1-bb7785293db4/956968d7-f6f8-44a1-90d1-bb7785293db4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/956968d7-f6f8-44a1-90d1-bb7785293db4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 10 Apr 2022 14:06:16 +0000
Certificate not after:    Sat 10 Apr 2032 14:06:16 +0000
Subordinate resources:    AS: 13737
                          IP: 104.244.208.0/22
                          IP: 2620:11f:7000::/44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:87:3c:55:44:37:4b:d4:f1:1d:42:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr 10 14:06:16 2022 GMT
            Not After : Apr 10 14:06:16 2032 GMT
        Subject: CN=956968d7-f6f8-44a1-90d1-bb7785293db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:c0:14:70:2f:61:c4:8c:23:32:a3:8b:b0:
                    9b:87:94:f9:bb:d0:5e:7e:fa:1f:18:c0:aa:ac:82:
                    aa:59:10:69:85:25:40:b6:c5:2c:9b:a8:6e:42:15:
                    9c:5c:73:2b:74:e1:46:78:f9:3d:1d:c7:bb:b6:c9:
                    11:2d:ef:62:aa:80:aa:c5:c2:60:d4:f9:ff:7a:a8:
                    a0:2a:d3:97:9c:0a:0c:fe:eb:be:35:1e:02:27:e5:
                    72:2f:9f:73:d3:45:63:10:aa:dc:7f:95:08:83:58:
                    c4:e8:d1:f4:85:b6:e4:c0:5f:cb:a6:75:18:4d:60:
                    ce:ac:30:2b:0b:05:61:ac:e3:6e:78:a1:b4:7a:33:
                    fc:bf:18:63:1c:66:49:46:4f:4a:4b:d6:61:e3:80:
                    ef:9b:de:f8:68:b7:ff:db:1e:fb:e7:ec:16:fb:9c:
                    5c:fe:79:52:6b:ea:ac:c6:d5:75:89:6f:88:de:7e:
                    e1:3c:2c:a5:25:ff:6d:96:92:07:f4:98:04:bf:13:
                    a2:05:44:7e:d6:6d:aa:81:db:f9:a7:2e:a4:3a:2c:
                    36:eb:46:77:e4:b6:12:01:e4:1e:c4:51:d8:12:25:
                    c0:31:29:72:ef:cf:7c:f4:bb:b8:f2:9d:c9:04:7b:
                    1c:3a:9e:66:7e:77:66:53:08:48:b3:97:16:6e:ef:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A6:25:DF:26:06:23:1E:4A:CF:B4:CD:34:DF:83:5D:38:E6:E6:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/956968d7-f6f8-44a1-90d1-bb7785293db4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/956968d7-f6f8-44a1-90d1-bb7785293db4/956968d7-f6f8-44a1-90d1-bb7785293db4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.208.0/22
                IPv6:
                  2620:11f:7000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13737

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e8:61:3e:e5:68:89:da:0e:cb:1d:92:92:d7:2c:74:c3:99:
         eb:35:0a:8a:08:06:02:64:f2:ba:f9:67:14:86:69:0a:8c:34:
         c3:38:03:57:0d:78:7e:41:e0:1b:5f:76:bd:2b:06:b1:a4:1f:
         05:f6:8a:de:3c:cc:84:47:c3:5a:dd:c8:2b:bd:89:f6:28:2d:
         0c:cb:fa:df:14:24:65:cc:66:d3:75:6c:a0:00:06:4c:15:d2:
         53:85:f6:8a:62:ee:57:40:a0:5a:ce:f1:cf:33:8c:02:c0:5a:
         30:6c:de:7c:9a:46:0f:84:44:dc:a1:06:57:df:29:06:e9:8d:
         38:4b:ca:af:03:d6:5d:c9:51:27:50:b2:16:b9:8f:ee:e0:21:
         ef:7b:f7:99:06:a0:47:60:32:86:7c:9b:6b:2a:00:b2:ee:7c:
         e7:7e:13:52:b3:8e:9a:87:fb:2f:5a:80:02:89:af:00:5f:0f:
         ed:17:29:60:3d:8a:92:22:5a:5b:a7:e0:a5:91:1f:eb:95:e7:
         9f:ab:77:c1:fd:0e:96:3d:20:d6:d7:41:c3:03:d4:07:37:44:
         59:14:80:63:83:d1:57:db:67:96:f7:9c:5e:27:0e:13:b1:e9:
         23:9c:16:20:c4:b2:df:21:08:ef:ae:32:5d:b6:dd:89:6f:16:
         60:c9:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:45 2023 by rpki-client on console-fra.rpki-client.org