Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b65e9127-e37a-412c-8d3c-9523fa8aa175.cer
File:                     b65e9127-e37a-412c-8d3c-9523fa8aa175.cer (raw, json)
Hash identifier:          SnV39i9dnJgpT4PWRCkJN0hdDS/p6ySrz88uBe5l/Rw=
Subject key identifier:   8A:C0:E0:01:AD:2C:EE:19:CB:F8:59:0C:10:FC:6B:51:ED:08:4C:69
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D551B1ADCB2BC9DEC678E68E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b65e9127-e37a-412c-8d3c-9523fa8aa175/b65e9127-e37a-412c-8d3c-9523fa8aa175.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b65e9127-e37a-412c-8d3c-9523fa8aa175/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 23 Mar 2022 15:08:54 +0000
Certificate not after:    Tue 23 Mar 2032 15:08:54 +0000
Subordinate resources:    AS: 4042
                          AS: 27445
                          IP: 64.17.16.0/20
                          IP: 66.118.192.0/19
                          IP: 205.201.192.0/19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1b:1a:dc:b2:bc:9d:ec:67:8e:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 23 15:08:54 2022 GMT
            Not After : Mar 23 15:08:54 2032 GMT
        Subject: CN=b65e9127-e37a-412c-8d3c-9523fa8aa175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:0c:ed:1f:ba:1b:80:6c:0c:dc:47:1c:e7:
                    c7:e3:cf:36:77:3d:b1:d9:49:e7:5c:5b:11:4f:65:
                    f5:2d:ae:fa:18:cc:e6:48:27:d5:d1:03:8b:bf:18:
                    4d:2c:a1:d0:74:7e:43:e7:3d:5d:52:1a:45:82:81:
                    b3:ad:93:71:25:c1:5e:51:8d:86:61:b1:5d:08:3f:
                    fb:d7:51:75:8d:c1:03:84:0c:db:ee:4c:a9:53:ff:
                    52:7a:c5:d3:4d:51:c0:02:f7:3b:f5:d8:79:34:d6:
                    b0:6e:23:94:d3:30:ec:d9:98:60:ea:a9:0b:3d:1f:
                    5d:fc:de:9f:3f:1e:7d:3b:08:61:bf:04:9f:97:ff:
                    b9:e6:6b:46:09:41:27:a4:98:86:3f:eb:39:ca:fe:
                    90:46:37:39:9c:9f:ba:da:71:11:76:24:e1:fa:09:
                    9a:74:2a:e5:dc:62:d9:d5:9e:67:b9:6b:15:49:75:
                    02:12:b3:30:49:a8:b6:da:07:8c:a7:90:c1:de:9c:
                    9e:5a:39:d9:10:32:4c:d7:07:45:ef:7a:4e:f3:d7:
                    40:da:8d:71:6e:9c:1c:ac:7e:0d:8a:ad:02:2e:df:
                    8a:31:df:c3:42:b0:a3:36:5a:fe:4b:0a:80:2b:21:
                    78:06:af:13:22:8c:cc:49:27:20:bf:a8:d3:d4:da:
                    30:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C0:E0:01:AD:2C:EE:19:CB:F8:59:0C:10:FC:6B:51:ED:08:4C:69
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b65e9127-e37a-412c-8d3c-9523fa8aa175/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b65e9127-e37a-412c-8d3c-9523fa8aa175/b65e9127-e37a-412c-8d3c-9523fa8aa175.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.17.16.0/20
                  66.118.192.0/19
                  205.201.192.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4042
                  27445

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:66:36:4d:5d:a9:d6:9c:07:15:ec:5f:53:1d:9c:8a:f6:39:
         dc:82:10:20:1f:6e:a2:a8:0b:89:bd:2f:dc:36:d0:76:ca:cf:
         95:fc:1b:39:54:12:07:44:e2:c5:2d:28:c4:ac:90:10:dd:c8:
         14:e6:98:bb:db:d5:46:7c:d5:ca:2e:4b:ed:6f:fa:1f:4a:67:
         db:89:bb:07:8e:58:46:26:91:fa:51:33:6c:5c:1f:08:dd:c9:
         a6:33:43:ba:60:1f:07:26:d4:d8:99:9f:3f:29:59:d9:63:9d:
         29:70:05:ab:eb:7b:34:76:2e:e4:0f:77:e3:a1:cc:c1:4c:ed:
         4c:eb:e9:80:c7:0f:4d:65:96:f1:e9:eb:f4:77:b0:43:e5:96:
         ae:af:4a:81:4a:84:33:a3:16:be:d1:8e:c6:9e:d1:9d:51:4c:
         db:c6:c3:47:1a:6a:f4:6f:80:fe:69:5a:f4:e0:48:a5:ac:28:
         54:1b:be:99:b1:ea:a1:41:79:7d:33:4e:d8:2d:9e:da:00:c7:
         9a:bb:6a:60:93:a9:e3:77:f3:3a:bf:a3:f6:9e:19:59:1e:eb:
         bc:08:93:69:12:f5:12:66:8d:49:a3:5a:56:aa:a1:e0:7f:57:
         3e:5e:a0:6d:91:3f:b2:1e:0d:43:03:75:67:13:be:ae:21:fd:
         27:2a:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:46 2023 by rpki-client on console-fra.rpki-client.org