Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
File:                     c097bbd1-dde1-4ee5-a727-5ee45da69052.cer (raw, json)
Hash identifier:          pYBFRmMmlCCsrWfdMoiHzZRr8+h9ZC+vbLGmwyFM24M=
Subject key identifier:   24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583B6D1FCE41E082B627A3165780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 Sep 2021 20:03:54 +0000
Certificate not after:    Mon 29 Sep 2031 20:03:54 +0000
Subordinate resources:    AS: 7768
                          IP: 157.254.0.0/16
                          IP: 199.103.94.0/23
                          IP: 206.209.208.0/20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:6d:1f:ce:41:e0:82:b6:27:a3:16:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep 29 20:03:54 2021 GMT
            Not After : Sep 29 20:03:54 2031 GMT
        Subject: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0b:7b:e4:af:c2:55:4d:49:d4:a9:6a:f2:72:
                    e2:f4:a2:74:d7:04:cd:48:83:c6:17:ca:4a:64:5b:
                    81:29:a8:c2:c3:3e:cd:26:fa:bc:88:7f:84:d0:78:
                    31:5f:27:61:ad:ce:fc:f6:0b:c3:f1:b1:ce:b2:4d:
                    47:c7:9f:4d:0f:43:e6:c0:7f:b2:b1:92:73:6f:7d:
                    48:b8:db:6e:ff:44:b9:c7:c9:c5:7b:d5:fd:9b:e5:
                    55:c9:d0:b8:d8:f8:ec:4e:52:c3:d6:3d:a6:08:8c:
                    87:9a:28:fa:8c:54:42:1b:0b:2a:bb:35:9c:7c:ad:
                    cd:a4:d0:64:80:ac:4a:59:cb:12:1b:be:21:18:8c:
                    64:85:82:3b:c5:a4:f6:cf:44:34:cb:1e:21:d7:21:
                    33:fe:6d:c8:de:76:e1:88:69:22:f7:cf:46:ea:dc:
                    a7:69:87:f2:f6:dc:2b:13:a0:e3:bf:78:2c:81:0f:
                    c6:f4:2b:98:69:be:d1:72:e0:a6:52:61:58:6c:25:
                    60:01:2c:2c:1c:a7:74:f3:9c:1b:07:57:b6:35:4c:
                    d4:88:54:a8:55:bf:ae:cd:44:8d:66:e1:97:47:91:
                    45:dd:14:ec:a8:4f:17:7f:f9:0c:f4:2d:c9:f2:f6:
                    00:a5:91:e7:39:48:d1:f9:ef:91:d6:3b:df:cb:5a:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.0.0/16
                  199.103.94.0/23
                  206.209.208.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7768

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ad:ea:1b:65:66:fc:0e:9a:82:a0:f4:88:2a:cf:24:78:f7:
         13:c7:14:64:86:ce:0f:f4:35:b6:8b:62:18:20:c8:74:d7:49:
         aa:50:7f:6e:f9:3a:c5:be:82:6c:a8:2e:58:1d:bc:34:7c:c9:
         43:18:86:c0:f9:31:87:65:60:36:2b:b3:17:4c:54:4b:f1:6a:
         ea:34:10:b9:ae:59:d3:98:89:20:51:1b:8f:2f:72:fd:3a:f6:
         8e:4d:59:1e:8a:b9:e3:a9:35:d0:23:81:a2:0b:b7:4d:31:0e:
         7b:95:c4:55:b2:28:cc:a9:d5:f4:80:01:e4:76:15:cb:e9:28:
         70:43:37:bd:ba:04:ed:49:6d:11:3c:e1:a4:d1:e0:6b:9b:b0:
         e1:f0:4e:a2:76:24:b3:2f:6d:18:2d:ba:ab:9b:4b:43:c3:13:
         35:55:08:06:20:61:76:8b:ec:94:18:39:64:27:69:92:47:5c:
         09:32:36:02:26:e6:84:6b:02:48:81:00:da:46:86:29:94:b5:
         cb:95:d8:31:83:f8:01:77:96:1d:f3:15:7f:d1:f7:e6:c6:11:
         d7:30:45:37:91:31:36:a9:58:b6:e8:0d:5e:b8:42:bd:a0:88:
         23:28:6b:f2:e1:87:50:63:12:bf:a5:5f:db:fc:32:3c:70:dc:
         d5:1f:4d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:39 2023 by rpki-client on console-ams.rpki-client.org