Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44ce7141401d2e2e1f304137ad7f264e23602a2b66e.cer
File:                     15151ee44ce7141401d2e2e1f304137ad7f264e23602a2b66e.cer (raw, json)
Hash identifier:          HxJhjocfG+XxzcE3DlwSnuf7Xg83bqBePHRGqy2dWM8=
Subject key identifier:   7E:8C:EE:7E:DF:BC:07:48:5B:05:02:50:CB:53:1E:DC:7C:87:EA:63
Authority key identifier: 33:4F:35:8E:9C:D0:C9:84:FE:1D:7C:63:91:F0:A7:8D:74:4D:10:01
Certificate issuer:       /CN=c57289cd-933c-44f3-8a8a-f7a6e6095507
Certificate serial:       010D0C9F4328583D154B6E7308C0008558969440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/7E8CEE7EDFBC07485B050250CB531EDC7C87EA63.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 28 Feb 2022 18:34:32 +0000
Certificate not after:    Sat 28 Feb 2032 18:34:32 +0000
Subordinate resources:    IP: 192.219.216.0/21
                          IP: 2605:1c00::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:15:4b:6e:73:08:c0:00:85:58:96:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c57289cd-933c-44f3-8a8a-f7a6e6095507
        Validity
            Not Before: Feb 28 18:34:32 2022 GMT
            Not After : Feb 28 18:34:32 2032 GMT
        Subject: CN=15151ee44ce7141401d2e2e1f304137ad7f264e23602a2b66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b8:11:24:32:78:a0:4c:29:11:46:f5:e3:c8:
                    2e:7b:e6:0a:dc:60:b3:70:40:72:12:52:86:0a:b1:
                    b5:52:1f:35:d1:50:d5:3a:f7:8e:6b:35:ef:9e:fd:
                    74:10:b7:e0:1b:4b:c9:95:1b:8e:0c:a1:49:40:4a:
                    6d:3e:ff:c9:b1:6f:5b:38:2f:12:ca:27:40:71:8d:
                    06:8d:1c:f8:3e:26:c8:36:ac:3f:ca:87:f9:e1:26:
                    1f:3c:b9:c4:75:03:f6:1a:10:dc:68:0c:9b:bc:e0:
                    37:51:0d:07:4c:20:2a:30:52:c0:e1:b8:e0:0a:50:
                    42:1c:bb:2d:21:99:28:fa:f9:61:17:1e:0e:b1:22:
                    71:4a:1b:cc:70:7b:3c:35:bc:81:ae:4d:d9:61:ee:
                    07:3e:2a:19:73:86:cf:6e:01:48:01:f8:c1:df:bd:
                    d8:cb:75:89:0e:0b:dc:56:65:00:66:de:05:31:b6:
                    0e:6b:72:7c:7c:80:60:b9:5d:3e:f7:46:96:80:98:
                    de:ac:56:91:28:9f:8c:e0:b9:82:0c:d9:9b:ae:61:
                    cb:24:bf:09:e9:a8:b0:f8:7c:32:74:b6:f8:31:f5:
                    29:41:d9:bb:1f:6b:df:6d:04:5e:91:8e:29:69:d0:
                    d2:18:0e:ed:3b:eb:ed:28:ec:2c:ba:be:fa:ff:30:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8C:EE:7E:DF:BC:07:48:5B:05:02:50:CB:53:1E:DC:7C:87:EA:63
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/7E8CEE7EDFBC07485B050250CB531EDC7C87EA63.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/c57289cd-933c-44f3-8a8a-f7a6e6095507.crl

            X509v3 Authority Key Identifier:
                keyid:33:4F:35:8E:9C:D0:C9:84:FE:1D:7C:63:91:F0:A7:8D:74:4D:10:01

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.216.0/21
                IPv6:
                  2605:1c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:11:d0:cf:80:c7:3f:01:7c:c1:2f:ec:c2:13:e2:9f:98:47:
         f4:8b:57:46:a6:24:55:68:b4:fe:c5:25:47:27:19:db:08:93:
         47:10:ee:03:b2:4c:b6:cc:30:e8:fe:c2:5e:5e:ed:4d:78:93:
         36:67:20:cc:7a:89:c5:b6:c4:f1:aa:36:13:2e:dc:07:65:72:
         ee:81:61:e1:25:d2:51:65:aa:91:90:22:77:5a:47:8b:df:a9:
         b4:f3:d7:a5:e0:b3:4d:b0:fe:77:8a:19:c0:f4:58:f3:61:14:
         72:87:d3:74:ca:e0:74:a8:bf:f0:07:e0:7d:fc:ed:c1:6d:f2:
         50:12:3c:36:39:4e:d2:e7:d8:4e:1f:6c:c2:74:69:20:42:89:
         05:bc:47:4b:53:a2:a2:65:e0:3c:25:ac:7b:ca:4f:98:75:b3:
         e5:97:0a:d4:a3:6d:e0:f1:ed:3f:0d:43:19:8b:0c:8c:9b:88:
         f3:10:06:72:43:6e:39:35:a9:e1:aa:1b:e8:ef:e7:64:c0:9a:
         88:a9:71:3f:e0:12:df:f1:44:9f:b6:cb:72:f9:da:62:c2:ec:
         42:1a:16:a1:fa:ce:ff:2b:78:46:31:3d:f5:ee:f1:bf:38:9d:
         93:70:8e:53:af:d6:b5:e4:3a:71:0c:53:d4:dc:12:e1:da:25:
         7d:a6:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----