Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e67ee49e846e2c1c697a04c9a8a555f0f771108227.cer
File:                     dc24fd57e67ee49e846e2c1c697a04c9a8a555f0f771108227.cer (raw, json)
Hash identifier:          05GVABvW2mmYCQv0OaKSa+yPfiCdo5Nt/v4RYpZd3QA=
Subject key identifier:   E4:36:B6:9E:7F:DF:F8:8A:3E:01:8B:6C:82:58:F6:45:A5:66:56:AC
Authority key identifier: 99:03:6F:13:D4:8D:28:E3:D7:EA:C6:18:05:FB:6F:FC:7B:D3:D3:77
Certificate issuer:       /CN=cc1d4521-b619-4ca7-b66a-41b5dba13caa
Certificate serial:       010D0C9F4328583D2ECD418C2F9CA8E663E498F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa.cer
Manifest:                 rsync://rpki.august.tw/repo/localname/1/E436B69E7FDFF88A3E018B6C8258F645A56656AC.mft
caRepository:             rsync://rpki.august.tw/repo/localname/1
Notify URL:               https://rpki.august.tw/rrdp/notification.xml
Certificate not before:   Wed 09 Mar 2022 21:51:19 +0000
Certificate not after:    Tue 09 Mar 2032 21:51:19 +0000
Subordinate resources:    AS: 13586

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2e:cd:41:8c:2f:9c:a8:e6:63:e4:98:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1d4521-b619-4ca7-b66a-41b5dba13caa
        Validity
            Not Before: Mar  9 21:51:19 2022 GMT
            Not After : Mar  9 21:51:19 2032 GMT
        Subject: CN=dc24fd57e67ee49e846e2c1c697a04c9a8a555f0f771108227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:ce:e1:ee:5c:81:1a:44:60:51:a9:03:9e:
                    19:87:2f:93:dd:27:a2:e2:b7:73:5c:39:fb:a6:3d:
                    76:9b:a3:63:61:15:b0:ec:3b:7b:66:d1:10:24:59:
                    4a:55:ce:13:0e:61:f6:16:30:fb:af:1d:1f:ac:f2:
                    b7:f4:cc:35:5e:d4:c0:59:92:b8:83:96:ff:6f:de:
                    8f:67:f1:87:de:30:12:f6:7b:28:47:48:d0:0c:e9:
                    17:fc:09:c3:b8:03:30:26:32:60:d9:ef:35:cb:03:
                    41:ce:0b:7f:0f:7a:f8:e4:cb:0e:e7:df:61:a4:5f:
                    6a:13:3e:4c:1a:ed:d8:e4:1e:98:87:8a:18:0a:76:
                    80:4d:9d:f5:d2:20:be:0a:fe:d9:6d:9e:d7:39:91:
                    6c:a9:5b:48:36:b0:fd:9f:ab:b5:c5:e0:91:6c:72:
                    21:34:d9:7b:42:5e:ec:11:cd:95:a5:4c:9a:88:94:
                    e6:3c:2b:ce:ed:7f:e0:c4:dc:bf:c7:58:eb:b5:8b:
                    8c:8e:33:1f:a5:9e:a3:b7:f7:2e:c5:8f:6b:47:d4:
                    29:69:69:73:d1:3a:db:47:e6:83:59:b6:3e:b1:cc:
                    43:af:fb:40:b1:4b:96:65:07:e1:c9:dd:9b:3f:fe:
                    a9:76:01:fc:f5:3c:1f:b3:ed:a2:29:73:68:c7:c0:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:36:B6:9E:7F:DF:F8:8A:3E:01:8B:6C:82:58:F6:45:A5:66:56:AC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.august.tw/repo/localname/1
                RPKI Manifest - URI:rsync://rpki.august.tw/repo/localname/1/E436B69E7FDFF88A3E018B6C8258F645A56656AC.mft
                RPKI Notify - URI:https://rpki.august.tw/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/cc1d4521-b619-4ca7-b66a-41b5dba13caa.crl

            X509v3 Authority Key Identifier:
                keyid:99:03:6F:13:D4:8D:28:E3:D7:EA:C6:18:05:FB:6F:FC:7B:D3:D3:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13586

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:07:5d:e2:37:e4:a4:b1:fe:1a:bb:11:fe:e9:a8:de:b5:8f:
         a8:9e:8f:7d:76:5b:bd:ea:ce:98:4f:7e:c7:48:39:20:60:3d:
         4e:38:a7:93:45:d0:02:06:b0:40:76:0b:d3:6b:7c:d9:6b:ee:
         81:3b:ae:16:56:01:9c:64:4f:a4:a4:1c:d3:26:24:4f:e5:a0:
         95:3e:78:32:fa:2d:35:90:89:42:34:5b:4b:df:42:37:57:14:
         93:01:21:d6:31:8c:51:79:e6:ae:eb:ed:3a:39:c6:48:0a:10:
         6b:b3:06:76:75:df:bd:06:66:0f:11:3e:bd:a5:19:04:e3:07:
         6a:97:98:ec:c5:45:c0:cb:fa:ad:7c:8a:19:76:1f:8a:01:de:
         00:ff:49:f6:f4:f2:7e:5f:58:e3:b0:a9:cd:42:2c:06:14:7a:
         eb:b3:ec:e2:93:72:ad:b2:56:14:a1:e0:1a:56:f2:86:c2:84:
         e3:f0:f2:be:fa:4e:6f:95:fe:a4:71:d1:f1:e7:04:16:30:75:
         1c:13:dc:ad:94:59:4e:f5:96:8a:17:63:ef:05:94:57:35:db:
         96:d3:a5:9c:d5:07:02:9c:b3:8d:11:b8:12:fc:e7:74:94:6b:
         f6:bf:2b:b0:67:cd:3c:22:27:44:2f:4f:2c:e6:c4:84:9c:ea:
         d2:e6:38:bf
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWD0uzUGML5yo5mPkmPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MxZDQ1MjEtYjYxOS00Y2E3LWI2NmEtNDFiNWRiYTEz
Y2FhMB4XDTIyMDMwOTIxNTExOVoXDTMyMDMwOTIxNTExOVowPTE7MDkGA1UEAxMy
ZGMyNGZkNTdlNjdlZTQ5ZTg0NmUyYzFjNjk3YTA0YzlhOGE1NTVmMGY3NzExMDgy
MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/87h7lyBGkRgUakD
nhmHL5PdJ6Lit3NcOfumPXabo2NhFbDsO3tm0RAkWUpVzhMOYfYWMPuvHR+s8rf0
zDVe1MBZkriDlv9v3o9n8YfeMBL2eyhHSNAM6Rf8CcO4AzAmMmDZ7zXLA0HOC38P
evjkyw7n32GkX2oTPkwa7djkHpiHihgKdoBNnfXSIL4K/tltntc5kWypW0g2sP2f
q7XF4JFsciE02XtCXuwRzZWlTJqIlOY8K87tf+DE3L/HWOu1i4yOMx+lnqO39y7F
j2tH1ClpaXPROttH5oNZtj6xzEOv+0CxS5ZlB+HJ3Zs//ql2Afz1PB+z7aIpc2jH
wAbrAgMBAAGjggNcMIIDWDAdBgNVHQ4EFgQU5Da2nn/f+Io+AYtsglj2RaVmVqww
geEGCCsGAQUFBwELBIHUMIHRMDMGCCsGAQUFBzAFhidyc3luYzovL3Jwa2kuYXVn
dXN0LnR3L3JlcG8vbG9jYWxuYW1lLzEwYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBr
aS5hdWd1c3QudHcvcmVwby9sb2NhbG5hbWUvMS9FNDM2QjY5RTdGREZGODhBM0Uw
MThCNkM4MjU4RjY0NUE1NjY1NkFDLm1mdDA4BggrBgEFBQcwDYYsaHR0cHM6Ly9y
cGtpLmF1Z3VzdC50dy9ycmRwL25vdGlmaWNhdGlvbi54bWwwDwYDVR0TAQH/BAUw
AwEB/zCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHFcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDktYWNjZS0xMzcyMjdl
OTcxYWMvY2MxZDQ1MjEtYjYxOS00Y2E3LWI2NmEtNDFiNWRiYTEzY2FhL2NjMWQ0
NTIxLWI2MTktNGNhNy1iNjZhLTQxYjVkYmExM2NhYS5jcmwwHwYDVR0jBBgwFoAU
mQNvE9SNKOPX6sYYBftv/HvT03cwDgYDVR0PAQH/BAQDAgEGMIHABggrBgEFBQcB
AQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j
YzFkNDUyMS1iNjE5LTRjYTctYjY2YS00MWI1ZGJhMTNjYWEuY2VyMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAjUSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIkHXeI35KSx/hq7Ef7pqN61j6ie
j312W73qzphPfsdIOSBgPU44p5NF0AIGsEB2C9NrfNlr7oE7rhZWAZxkT6SkHNMm
JE/loJU+eDL6LTWQiUI0W0vfQjdXFJMBIdYxjFF55q7r7To5xkgKEGuzBnZ1370G
Zg8RPr2lGQTjB2qXmOzFRcDL+q18ihl2H4oB3gD/Sfb08n5fWOOwqc1CLAYUeuuz
7OKTcq2yVhSh4BpW8obChOPw8r76Tm+V/qRx0fHnBBYwdRwT3K2UWU71looXY+8F
lFc125bTpZzVBwKcs40RuBL853SUa/a/K7BnzTwiJ0QvTyzmxISc6tLmOL8=
-----END CERTIFICATE-----