Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6e4d9037fb22c58c2757e6ba0e14c6c8b6aeb34d7.cer
File:                     dc24fd57e6e4d9037fb22c58c2757e6ba0e14c6c8b6aeb34d7.cer (raw, json)
Hash identifier:          D23UmpGNqSeDBWYH8OS9paCwRr2jZBe5cxGEREFFoiM=
Subject key identifier:   B5:AD:81:45:54:A7:F7:2A:DA:81:BE:65:F5:96:80:38:AE:02:9C:31
Authority key identifier: 99:03:6F:13:D4:8D:28:E3:D7:EA:C6:18:05:FB:6F:FC:7B:D3:D3:77
Certificate issuer:       /CN=cc1d4521-b619-4ca7-b66a-41b5dba13caa
Certificate serial:       010D0C9F4328583F93643B67975CF13ADA7CBA40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa.cer
Manifest:                 rsync://rpki.august.tw/repo/localname/12/B5AD814554A7F72ADA81BE65F5968038AE029C31.mft
caRepository:             rsync://rpki.august.tw/repo/localname/12
Notify URL:               https://rpki.august.tw/rrdp/notification.xml
Certificate not before:   Sat 15 Oct 2022 08:10:14 +0000
Certificate not after:    Fri 17 Jan 2025 09:10:14 +0000
Subordinate resources:    AS: 13586

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:93:64:3b:67:97:5c:f1:3a:da:7c:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1d4521-b619-4ca7-b66a-41b5dba13caa
        Validity
            Not Before: Oct 15 08:10:14 2022 GMT
            Not After : Jan 17 09:10:14 2025 GMT
        Subject: CN=dc24fd57e6e4d9037fb22c58c2757e6ba0e14c6c8b6aeb34d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:45:dc:cb:35:76:65:6f:d0:42:ed:c5:13:
                    66:1d:1a:d9:f8:42:89:b7:8c:83:20:d6:46:03:e1:
                    d2:38:be:71:64:05:b0:bd:d3:cb:2f:52:ac:db:08:
                    95:63:29:47:04:e8:91:99:e8:7f:59:a2:32:07:4d:
                    45:d2:ad:f3:cf:24:37:49:11:52:29:30:f4:e2:9b:
                    fc:84:61:ac:1c:85:3d:3f:d5:37:a3:aa:62:2b:ee:
                    16:fc:4f:67:01:78:11:c2:39:89:91:49:54:bb:f1:
                    1d:cd:b9:7a:ac:0d:36:d0:91:a4:82:a5:b6:6d:3b:
                    48:a3:be:0e:72:7d:fc:62:da:e6:89:47:02:e6:ff:
                    e6:2b:6c:d1:66:ea:4e:a3:28:f9:03:c5:bd:74:21:
                    0f:4b:94:01:ba:72:5c:59:ed:5b:32:09:11:ea:be:
                    90:bb:55:9d:4a:c7:3b:01:e6:4a:fc:83:f1:01:04:
                    e3:2d:43:97:53:86:8e:6d:55:3b:25:38:86:3d:6a:
                    2b:af:25:09:a8:de:3f:27:1a:9a:df:67:3b:55:ae:
                    ae:52:5f:83:f2:b2:fd:d0:75:27:0b:7f:06:fe:c0:
                    f0:ad:b3:2b:73:14:b0:7e:25:1f:bd:9a:a4:cb:ba:
                    23:6d:3b:33:16:19:f6:40:9c:e9:84:50:cb:56:10:
                    a9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AD:81:45:54:A7:F7:2A:DA:81:BE:65:F5:96:80:38:AE:02:9C:31
            Subject Information Access:
                CA Repository - URI:rsync://rpki.august.tw/repo/localname/12
                RPKI Manifest - URI:rsync://rpki.august.tw/repo/localname/12/B5AD814554A7F72ADA81BE65F5968038AE029C31.mft
                RPKI Notify - URI:https://rpki.august.tw/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/cc1d4521-b619-4ca7-b66a-41b5dba13caa.crl

            X509v3 Authority Key Identifier:
                keyid:99:03:6F:13:D4:8D:28:E3:D7:EA:C6:18:05:FB:6F:FC:7B:D3:D3:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13586

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:dd:58:3c:c8:88:e9:66:b9:23:17:cc:d3:94:77:71:08:
         dc:de:9f:d1:65:cd:79:5a:29:4c:f1:ce:20:ae:29:f1:78:60:
         73:9e:ed:42:8e:62:8f:b0:3f:ad:ab:ed:a0:03:af:09:eb:8f:
         a7:0a:62:0c:84:42:67:ee:d8:1a:32:fb:b1:1b:f7:c7:e6:2c:
         0f:2c:e4:65:2e:24:61:ba:35:d5:79:cc:50:38:b6:9a:12:d2:
         bd:03:3a:00:69:9a:2d:eb:1a:85:6d:19:6e:5b:19:21:f0:0b:
         1a:2e:dc:bf:ac:b2:9d:0c:6b:9c:ae:68:92:40:35:fd:90:7b:
         a1:1a:96:a2:7e:6f:68:e6:35:e3:eb:bc:17:14:03:e9:41:bc:
         8f:9d:bf:ca:d5:7e:7e:2d:28:8c:87:f7:c4:c5:e6:49:bf:e5:
         2e:01:7d:6b:4b:14:b0:b0:6b:8f:e5:43:4d:f0:f0:c3:2a:c0:
         77:67:44:8e:ff:61:af:39:6c:93:78:04:b7:a0:d5:85:1b:80:
         4f:26:0a:6d:0b:a3:e3:d7:ea:22:bb:da:76:47:07:79:17:27:
         19:0a:e4:25:2d:9d:09:9b:a2:13:77:6b:28:36:e1:6b:f9:ec:
         5b:23:4f:23:56:26:85:15:5e:c2:d7:e4:ed:6a:b4:2f:c2:dd:
         74:fe:23:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----