Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/caa1bef5-7394-40d5-b3bd-4a3671e26388.cer
File:                     caa1bef5-7394-40d5-b3bd-4a3671e26388.cer (raw, json)
Hash identifier:          Da30ZNv7m0DBpTkoR0hTNJBvCX9/9zYGo0n+XPeAU2k=
Subject key identifier:   6A:1C:39:5A:A1:EE:97:94:50:E8:CD:6F:63:83:EE:4C:BF:EA:5D:F1
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583CDDD85E489F6BE9ABC8767E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/caa1bef5-7394-40d5-b3bd-4a3671e26388/caa1bef5-7394-40d5-b3bd-4a3671e26388.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/caa1bef5-7394-40d5-b3bd-4a3671e26388/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Feb 2022 14:58:43 +0000
Certificate not after:    Sat 07 Feb 2032 14:58:43 +0000
Subordinate resources:    AS: 400387
                          IP: 23.131.152.0/24
                          IP: 2602:fbce::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:dd:d8:5e:48:9f:6b:e9:ab:c8:76:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb  7 14:58:43 2022 GMT
            Not After : Feb  7 14:58:43 2032 GMT
        Subject: CN=caa1bef5-7394-40d5-b3bd-4a3671e26388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e7:8d:86:7e:e4:8d:50:6f:b7:37:50:f5:4c:
                    da:6c:78:b0:2a:9a:7b:1a:6e:63:4c:96:49:ef:be:
                    31:e7:b4:31:54:80:95:8c:ce:16:b2:6b:d9:d3:39:
                    1a:02:26:77:a0:1c:71:47:5a:d5:49:de:96:24:dd:
                    2d:fb:f5:d1:2a:69:01:8a:21:da:2c:a2:bc:c5:dd:
                    c5:db:a2:7e:d4:0f:3d:94:4b:5a:73:b6:0b:98:e1:
                    05:8a:29:02:1a:c3:b4:23:8a:3f:21:85:45:e7:db:
                    92:2d:47:f9:e5:74:c3:94:87:d5:29:db:8d:9a:d0:
                    e7:13:41:7c:b9:40:16:f4:bc:c6:a1:7b:9a:b7:aa:
                    e3:5c:62:18:4b:d1:82:b3:fb:4e:c6:db:dc:b6:16:
                    1d:be:04:1e:47:e1:93:1e:b1:c2:57:e6:03:1a:98:
                    e7:cb:22:ef:33:38:2f:93:e8:40:9d:0b:f2:e3:75:
                    2c:22:9f:ad:9a:83:74:88:5f:3f:c7:f0:dd:a8:74:
                    f6:c7:84:aa:0e:1d:25:93:bb:8d:6d:3b:2e:cc:dd:
                    b3:2c:e9:86:8f:d3:81:5b:42:1e:ee:27:0d:e8:be:
                    f6:cd:42:4f:f7:f3:fb:f8:ab:8c:a2:ea:c8:a0:21:
                    f5:e8:05:ba:b0:e2:3a:9a:14:e5:20:44:8e:bd:9c:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1C:39:5A:A1:EE:97:94:50:E8:CD:6F:63:83:EE:4C:BF:EA:5D:F1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/caa1bef5-7394-40d5-b3bd-4a3671e26388/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/caa1bef5-7394-40d5-b3bd-4a3671e26388/caa1bef5-7394-40d5-b3bd-4a3671e26388.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.152.0/24
                IPv6:
                  2602:fbce::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400387

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:26:26:60:88:0e:aa:b1:54:d1:8f:d3:5c:0e:42:78:e2:6c:
         40:ca:7e:30:59:fe:50:65:ec:b9:46:90:6e:75:77:2a:d4:36:
         cc:33:dd:7e:c4:38:5c:4b:9e:d6:fc:33:d6:f6:c5:ec:13:00:
         b7:3f:85:59:29:2d:a3:8f:42:7c:3a:32:60:85:f3:46:15:5e:
         5b:e8:4e:a5:55:9f:62:dd:3b:4b:93:cd:60:46:41:8f:6f:a8:
         83:f9:3c:d8:3e:80:0e:6f:8d:43:1d:2a:77:3e:41:3b:b1:07:
         e9:63:8a:a1:a4:6d:f5:26:d0:c6:2a:1f:32:94:29:a0:5d:18:
         d1:eb:8a:94:68:00:0b:f2:63:a9:5c:10:5d:b2:77:f3:ef:43:
         f2:cc:e7:8e:63:2b:3c:f9:96:5f:46:c5:a3:5d:6b:37:f3:99:
         ad:dc:44:26:28:64:bf:1c:dd:f0:81:5c:b0:2d:39:8e:b3:df:
         1b:24:93:2c:38:2a:fe:c8:ab:a1:19:18:f8:f9:6d:11:28:d5:
         6a:c0:09:d8:d9:d1:db:04:9f:74:c5:b4:ee:ee:8d:3f:e6:f1:
         65:3a:4c:e3:69:dc:e7:21:34:10:de:f3:b0:bd:d0:e3:0a:e7:
         d9:6e:e2:f9:2d:e8:5e:03:ea:87:a7:47:20:32:89:f0:dc:cc:
         42:c5:66:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:40 2023 by rpki-client on console-ams.rpki-client.org