Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6a129c049f719530de4d9ddd21abc7afd4eaea243.cer
File:                     dc24fd57e6a129c049f719530de4d9ddd21abc7afd4eaea243.cer (raw, json)
Hash identifier:          MHjtp1tO0UGcTi8MNsAYVpb/0zOz56ZAa1jljS2BEYA=
Subject key identifier:   8E:D2:17:B7:2B:73:0B:24:92:D3:38:82:AE:01:F3:E2:D9:D6:40:1C
Authority key identifier: 99:03:6F:13:D4:8D:28:E3:D7:EA:C6:18:05:FB:6F:FC:7B:D3:D3:77
Certificate issuer:       /CN=cc1d4521-b619-4ca7-b66a-41b5dba13caa
Certificate serial:       010D0C9F432858417B64815F0912B56A59FDD100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa.cer
Manifest:                 rsync://rpki.co/repo/HYSP/12/8ED217B72B730B2492D33882AE01F3E2D9D6401C.mft
caRepository:             rsync://rpki.co/repo/HYSP/12
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 03:25:15 +0000
Certificate not after:    Fri 11 Jul 2025 03:25:15 +0000
Subordinate resources:    AS: 13586

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7b:64:81:5f:09:12:b5:6a:59:fd:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1d4521-b619-4ca7-b66a-41b5dba13caa
        Validity
            Not Before: Apr  8 03:25:15 2023 GMT
            Not After : Jul 11 03:25:15 2025 GMT
        Subject: CN=dc24fd57e6a129c049f719530de4d9ddd21abc7afd4eaea243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f6:18:fc:61:12:f9:4e:c3:e8:bd:63:51:02:
                    15:0d:f5:29:a7:ea:6d:44:fe:8f:2c:ad:c1:29:e4:
                    0e:6d:d3:e9:c5:6b:e2:f9:ea:a4:5a:8f:4f:96:5c:
                    f7:61:db:6d:1f:21:5c:b0:94:d2:dc:6d:56:31:be:
                    a9:1b:57:3f:d2:d6:9b:81:42:36:14:83:c3:88:2f:
                    c0:17:04:7b:6e:31:7b:0d:7f:22:83:ab:94:c5:67:
                    9e:72:b0:86:0e:9e:f1:3a:cb:32:28:1e:d9:4b:00:
                    a0:5d:e3:64:46:97:15:61:04:68:e2:02:c9:ae:ce:
                    3b:97:cd:cc:fd:b8:11:1f:e3:82:d0:e7:51:b0:a9:
                    ec:c5:69:4d:fb:65:4b:81:67:99:73:0b:60:6d:8d:
                    db:2d:2b:39:49:db:38:26:67:3e:19:cf:fa:14:24:
                    42:50:cd:07:41:df:cb:69:69:7c:a5:bb:23:78:0c:
                    b5:b1:dd:5d:30:8d:bd:dc:06:85:24:a4:a1:19:33:
                    50:f4:1c:ee:ae:ee:95:23:f5:4c:89:99:1a:c2:af:
                    86:83:01:1b:29:f5:6f:34:a5:83:0a:03:88:6c:f1:
                    07:82:b0:dc:49:7c:05:78:f8:e8:a0:d1:48:df:09:
                    fc:39:d0:0b:16:ad:34:41:5e:e5:e2:97:da:11:9a:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D2:17:B7:2B:73:0B:24:92:D3:38:82:AE:01:F3:E2:D9:D6:40:1C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/12
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/12/8ED217B72B730B2492D33882AE01F3E2D9D6401C.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/cc1d4521-b619-4ca7-b66a-41b5dba13caa.crl

            X509v3 Authority Key Identifier:
                keyid:99:03:6F:13:D4:8D:28:E3:D7:EA:C6:18:05:FB:6F:FC:7B:D3:D3:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13586

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:7e:ff:c9:de:ae:7e:73:c0:8a:0f:72:64:77:9e:8a:43:
         5b:25:54:ee:68:67:47:91:ae:e3:a7:24:df:2e:06:2d:21:d7:
         d2:91:09:a8:c9:dd:fa:0d:de:e4:15:8f:3c:e3:9d:f3:36:76:
         48:f3:ab:02:0b:69:1a:c6:39:59:94:45:67:f8:5c:27:f8:a9:
         4c:88:2e:b1:06:9c:64:40:fe:6d:d3:0f:2e:55:f7:fb:3b:1f:
         03:55:62:61:c1:fd:9d:ea:1a:69:ec:aa:c0:90:93:62:b4:9e:
         38:67:0b:9d:f3:00:10:90:42:db:28:41:24:10:f0:de:03:4c:
         94:be:92:55:17:71:95:f9:8c:56:57:71:25:9f:98:6c:7b:24:
         74:85:4d:82:81:51:3a:e9:cd:a4:ec:c1:6d:91:70:ba:bb:64:
         4c:8c:b5:0e:e6:dc:8e:fe:82:d9:3a:6e:b5:2a:9b:88:e5:1b:
         e8:83:e8:ad:5f:21:b2:f5:f9:e5:7d:de:ad:ed:a3:ae:46:80:
         1e:5a:07:5e:b0:5e:35:88:7a:25:fd:ee:5a:c5:ab:44:e2:6f:
         b8:2a:67:e8:3b:89:99:94:5f:79:f7:f3:5e:7e:6a:94:de:17:
         b8:e9:50:d9:7a:0e:bf:82:20:47:a1:9d:dc:cd:9b:3b:50:55:
         1c:0d:bc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----