Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e.cer
File:                     bdffd03b-63de-4897-bce0-96cc8838b28e.cer (raw, json)
Hash identifier:          n0I/ioOuyDsEE/pLMS8/6pxF0xvZryt2wTUBoP8hZX8=
Subject key identifier:   AF:E5:86:40:67:69:C8:11:B0:A2:FC:EB:D7:43:D8:72:B2:CC:5F:BD
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D8CB14404CF726AB76D6AB080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e/bdffd03b-63de-4897-bce0-96cc8838b28e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 12 Apr 2022 13:00:55 +0000
Certificate not after:    Mon 12 Apr 2032 13:00:55 +0000
Subordinate resources:    AS: 22281
                          IP: 23.153.192.0/24
                          IP: 2602:feaa::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8c:b1:44:04:cf:72:6a:b7:6d:6a:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr 12 13:00:55 2022 GMT
            Not After : Apr 12 13:00:55 2032 GMT
        Subject: CN=bdffd03b-63de-4897-bce0-96cc8838b28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:31:7a:a4:f9:c5:be:02:8a:2d:79:60:e4:
                    0b:a9:69:f7:88:9c:8a:59:f4:92:17:77:c1:a7:cb:
                    cf:25:44:df:ec:23:22:d3:a9:cc:6c:c3:ff:09:7b:
                    4e:71:55:b8:ca:78:57:48:96:53:e6:ca:46:96:35:
                    c6:ff:e5:24:d4:5a:00:40:dc:be:a8:16:ca:55:a6:
                    fb:76:7f:5e:1e:6b:43:68:4a:58:44:ca:c1:68:f3:
                    ea:0e:49:53:da:7b:d0:26:92:f5:25:f9:0b:5f:4d:
                    5f:63:3d:25:16:d8:d7:24:00:92:f3:cc:14:11:26:
                    d9:ab:98:4f:87:9e:97:16:21:a1:24:5b:3c:91:a3:
                    8b:88:e7:49:90:bf:5b:0f:27:71:c4:dd:df:2f:ac:
                    9f:68:2b:c7:98:91:d4:b8:0e:3d:d8:7c:eb:f0:24:
                    83:81:b9:bd:6e:3e:4c:55:12:85:02:86:57:0f:f1:
                    f8:bd:ea:b4:ec:f0:31:cc:64:59:03:cc:63:b1:b2:
                    a1:b6:3d:6f:e3:7b:82:ae:b1:48:4e:22:a2:1a:87:
                    80:45:73:44:3c:ce:86:03:6a:a2:c7:59:f4:c9:0f:
                    e3:88:fc:09:a4:f3:b1:b5:16:be:65:fd:03:96:77:
                    20:de:c9:dd:e0:17:47:e3:72:8d:44:db:e4:0c:4b:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E5:86:40:67:69:C8:11:B0:A2:FC:EB:D7:43:D8:72:B2:CC:5F:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e/bdffd03b-63de-4897-bce0-96cc8838b28e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.192.0/24
                IPv6:
                  2602:feaa::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22281

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ae:a2:5f:fd:84:db:1a:ec:c1:a4:66:05:87:5b:27:05:46:
         43:79:5b:0e:ce:70:82:be:7a:01:ec:a8:51:f7:1e:78:5e:fc:
         64:35:25:14:16:d5:ce:7d:e4:56:d3:cf:e3:6b:1f:44:10:3b:
         c9:a1:55:ac:1d:cb:66:0e:10:6a:ab:b3:42:72:c8:2e:fa:b0:
         13:0b:27:e4:f9:24:38:44:f8:a6:69:ee:dd:ca:dd:84:63:f1:
         dc:c4:0b:e3:02:53:d6:8d:5b:4a:18:e5:2e:4c:f4:32:03:c9:
         38:73:f5:70:07:45:58:be:41:88:b6:f0:ba:91:66:57:92:99:
         1d:d0:b1:c7:ac:68:5a:fe:0d:95:87:53:95:e5:1a:2a:5d:47:
         d7:0d:5c:36:01:f6:28:7d:2f:ac:8b:84:cf:7e:6c:26:e2:f0:
         7e:c8:14:0e:66:6f:6b:da:af:4e:d3:ec:ee:34:6b:5c:4d:4d:
         c6:4d:41:02:21:f4:cc:58:ce:94:64:67:b4:1b:23:c6:e8:0f:
         46:4c:fd:a8:cf:d4:e5:89:30:0e:89:8e:a0:d2:40:96:5a:b9:
         d3:80:79:2c:80:6d:81:b3:04:77:12:b8:da:63:d0:86:65:8c:
         3a:79:82:63:69:23:9e:dc:7f:de:fb:99:06:7f:36:6a:57:2c:
         f1:f2:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:46 2023 by rpki-client on console-fra.rpki-client.org