Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e.cer
File:                     aacd3976-025b-42e3-9558-71c5a795726e.cer (raw, json)
Hash identifier:          od+6nJ0uG/9xm+ZKkzgpclsTAZDlj3qh4RsZB1isGNk=
Subject key identifier:   99:B6:CC:0E:1F:42:D2:73:88:0F:E8:A5:47:C8:E5:EB:B6:1E:91:9D
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D63B79FFA8CE33040B0EEA780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e/aacd3976-025b-42e3-9558-71c5a795726e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 28 Mar 2022 20:45:35 +0000
Certificate not after:    Sun 28 Mar 2032 20:45:35 +0000
Subordinate resources:    AS: 16654
                          IP: 162.219.204.0/22
                          IP: 208.64.76.0/22
                          IP: 208.85.176.0/21
                          IP: 2602:fe47::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:63:b7:9f:fa:8c:e3:30:40:b0:ee:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 28 20:45:35 2022 GMT
            Not After : Mar 28 20:45:35 2032 GMT
        Subject: CN=aacd3976-025b-42e3-9558-71c5a795726e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:65:51:c2:41:e3:f6:aa:b1:b9:40:6e:35:80:
                    ce:49:d1:fd:d0:bf:10:da:25:a9:dc:de:65:be:49:
                    09:55:39:65:98:b8:76:73:d6:e1:db:dc:2c:2f:4c:
                    d1:3c:a7:d7:49:e8:3a:15:7f:9b:ba:a4:23:a1:dc:
                    8d:ed:13:2d:d9:7c:ee:d6:c3:5b:ff:93:b8:bc:e3:
                    bd:96:4a:83:b8:b0:ee:ba:c3:5f:26:3f:17:6d:68:
                    a6:e6:6b:8a:d7:14:cc:01:db:6e:07:4e:75:75:99:
                    b3:39:61:da:b2:68:cb:8f:79:e7:2b:ef:c0:d9:01:
                    a0:e0:a4:1e:d7:51:64:e2:44:00:04:84:9a:38:c0:
                    81:c6:da:0f:56:18:f5:31:b9:98:a9:4d:ae:32:35:
                    8e:db:b6:aa:1a:b3:a0:3c:dc:76:10:c4:cd:10:81:
                    9e:40:ea:4a:c8:2b:0f:8b:e6:55:1f:e5:5b:54:db:
                    0f:c9:af:57:b7:49:fb:7a:07:3b:4b:b8:f6:8e:60:
                    8a:8d:df:fc:22:19:81:ed:5e:7f:d2:fb:c7:9c:b0:
                    3d:53:2d:ac:e1:2b:58:a8:4a:d7:1c:ec:da:62:ec:
                    1a:7c:54:23:0a:65:a0:69:f4:58:04:56:44:aa:61:
                    e2:77:37:cd:7f:e9:5e:37:18:8e:ad:5a:5d:cb:9e:
                    6a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B6:CC:0E:1F:42:D2:73:88:0F:E8:A5:47:C8:E5:EB:B6:1E:91:9D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e/aacd3976-025b-42e3-9558-71c5a795726e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.204.0/22
                  208.64.76.0/22
                  208.85.176.0/21
                IPv6:
                  2602:fe47::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16654

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:40:b3:e2:cd:aa:a7:24:6a:aa:2b:ea:2e:96:8e:51:ab:90:
         47:93:4f:dc:1d:a0:01:90:2a:a2:68:86:23:db:bd:4e:9c:31:
         5f:fb:2a:0a:49:6b:f6:90:db:0f:ee:b0:73:e3:cc:16:25:fb:
         cd:03:26:d3:77:fb:5f:3e:0c:17:3e:ec:cf:23:e6:09:b7:53:
         61:b0:22:5d:32:5d:15:5e:ae:65:27:0c:1e:04:c7:a1:fc:44:
         35:3d:74:4c:b0:7e:0a:4a:33:23:43:a6:15:45:86:30:a8:fe:
         21:6c:e2:78:6e:c9:6c:6f:f1:b7:30:f9:8f:e4:e9:08:21:8f:
         38:2f:40:86:b5:cb:6a:b3:5d:0f:22:fc:55:1a:96:de:09:76:
         0a:dd:47:15:64:41:84:72:ba:37:01:3e:f6:33:fe:0b:e2:8a:
         be:77:3e:56:2b:b8:33:e0:32:6c:2c:a1:5f:e0:f1:f1:f6:83:
         fe:e6:86:ec:d3:68:74:10:82:df:d4:f3:17:a5:d1:51:d0:b7:
         83:36:d8:86:22:78:32:ac:d8:8c:6b:e5:4d:13:a0:46:23:67:
         08:95:ca:fc:b5:a1:72:94:db:d4:84:20:7e:aa:3f:32:81:1b:
         88:76:16:c3:6c:fb:52:d0:c2:24:0d:9b:d9:3f:a9:9b:75:17:
         c9:ec:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:46 2023 by rpki-client on console-fra.rpki-client.org