Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae96cd77-277a-4698-9373-fbd35e259747.cer
File:                     ae96cd77-277a-4698-9373-fbd35e259747.cer (raw, json)
Hash identifier:          DK5kIliHBVfNV/20etBEfwThaPCQp/NnOPZIabaQCyk=
Subject key identifier:   29:3D:78:38:2A:43:BE:D9:3C:60:BD:52:BA:9F:7A:4C:17:73:2A:9C
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D68A060F77EFAAD5831CAF880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae96cd77-277a-4698-9373-fbd35e259747/ae96cd77-277a-4698-9373-fbd35e259747.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae96cd77-277a-4698-9373-fbd35e259747/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 30 Mar 2022 14:57:47 +0000
Certificate not after:    Tue 30 Mar 2032 14:57:47 +0000
Subordinate resources:    IP: 148.59.77.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:68:a0:60:f7:7e:fa:ad:58:31:ca:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 30 14:57:47 2022 GMT
            Not After : Mar 30 14:57:47 2032 GMT
        Subject: CN=ae96cd77-277a-4698-9373-fbd35e259747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b5:a4:18:01:77:8d:6d:aa:89:31:bf:33:27:
                    9b:66:3c:8d:86:38:56:46:c4:49:54:3c:1a:49:ca:
                    9c:2c:62:35:c0:9e:70:44:0a:36:bd:61:12:d3:df:
                    a6:a8:01:5e:f6:35:86:d7:da:e6:b7:e3:19:21:38:
                    4d:a8:d2:c6:4b:ed:b8:b3:d6:b5:d7:3a:29:33:fb:
                    8d:bb:a2:7f:9b:f9:f0:1d:85:e0:0e:0f:97:6b:1a:
                    14:86:a1:62:f9:75:bd:5e:a4:3b:77:7e:76:73:27:
                    82:b6:a0:f2:63:72:2f:dc:8e:2f:61:7e:40:17:fd:
                    50:08:21:82:a9:6c:a5:19:9e:c6:6c:bb:64:49:79:
                    2d:44:2d:b4:3e:22:18:f0:40:45:11:fb:76:81:5c:
                    f0:d1:c5:5b:e5:ad:6d:0a:31:f9:7a:35:50:84:96:
                    d3:d1:85:b2:7b:4d:e8:d5:a0:dd:d1:1f:cd:30:0c:
                    10:c9:71:f5:45:4a:41:60:67:81:fd:44:d2:61:c5:
                    6b:6d:aa:7a:ee:de:a4:87:bd:17:11:86:fc:7a:7c:
                    3e:7b:01:de:9b:25:da:94:87:4f:62:d0:3f:0e:8a:
                    8d:04:64:b9:90:71:6e:a2:88:40:2f:ba:f1:8e:c6:
                    6a:ff:2e:d9:0c:ac:26:b7:64:24:4c:47:49:0d:56:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3D:78:38:2A:43:BE:D9:3C:60:BD:52:BA:9F:7A:4C:17:73:2A:9C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae96cd77-277a-4698-9373-fbd35e259747/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae96cd77-277a-4698-9373-fbd35e259747/ae96cd77-277a-4698-9373-fbd35e259747.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:0f:d8:54:a5:cf:3a:da:c1:9b:fb:60:91:c8:d3:b7:46:1a:
         9a:3b:42:55:23:a6:c3:c1:2f:08:72:49:40:78:74:c5:8c:c5:
         8f:e4:fa:d8:c7:a4:23:66:eb:bd:ed:e7:d5:ec:58:5f:97:dc:
         e5:aa:89:23:86:77:1f:35:8e:bb:99:a0:bb:d1:01:8c:53:66:
         89:12:90:07:d2:61:03:f1:34:f3:69:e6:ab:8c:0e:25:5a:55:
         a0:91:d8:5f:f2:48:d9:c3:ae:8d:8f:3d:61:ec:01:4b:df:4c:
         74:c5:74:67:ce:0f:04:37:aa:39:0f:3b:33:5f:20:db:b2:2e:
         d5:54:04:ec:df:b3:dc:14:18:24:ee:9a:c4:e3:6f:c8:0c:87:
         0d:a4:fd:da:03:0c:f8:54:47:5c:65:2f:94:f3:4e:2b:b7:6a:
         74:77:ae:e5:e3:5b:88:13:95:3b:d4:5b:d2:4c:93:85:e5:49:
         c3:94:b8:9c:15:91:a9:f1:6b:4a:34:7d:26:98:68:a1:b4:c0:
         3b:59:75:a3:6c:4e:1d:48:bb:cb:dd:cf:31:ee:8e:00:bc:f0:
         b4:3c:51:ec:47:d0:ef:71:e2:2d:37:dd:9a:83:87:bb:cb:9c:
         69:0e:8b:32:e9:60:fe:2c:7e:8e:d0:4f:22:de:72:94:3d:89:
         15:b9:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:46 2023 by rpki-client on console-fra.rpki-client.org