Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300.cer
File:                     d25162b3-7899-4412-8d2b-385913c82300.cer (raw, json)
Hash identifier:          ltbdogPq7kwCmLd1WTkjX6uzqu9/Q3JGI+BirWV9PRA=
Subject key identifier:   3A:68:24:34:5D:61:11:10:6E:0E:0E:C8:9C:FB:72:38:4B:02:3A:21
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D41AA8703B20BE5EF67989E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300/d25162b3-7899-4412-8d2b-385913c82300.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 16 Mar 2022 15:39:14 +0000
Certificate not after:    Tue 16 Mar 2032 15:39:14 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0 -- 149.112.154.255
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:41:aa:87:03:b2:0b:e5:ef:67:98:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 16 15:39:14 2022 GMT
            Not After : Mar 16 15:39:14 2032 GMT
        Subject: CN=d25162b3-7899-4412-8d2b-385913c82300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:72:01:50:0a:55:80:c9:be:ca:94:39:90:
                    95:15:64:5f:cd:30:fc:e5:52:f2:53:7b:1a:53:6c:
                    c1:b5:c8:77:e4:79:3a:9b:33:f2:13:45:70:0a:57:
                    39:83:36:27:1f:60:af:ca:0c:0c:18:cb:b2:70:f9:
                    0c:1a:f2:a5:d3:d9:ab:37:88:ec:23:31:92:5e:09:
                    ec:a7:20:3a:f3:bf:92:5f:7d:e9:c3:61:22:00:e5:
                    64:fc:50:8c:da:1b:a7:b4:2c:e3:69:c3:8d:0d:5c:
                    6a:0d:ce:04:fd:a8:82:7b:c0:50:1e:98:cc:2f:5b:
                    b9:c5:36:06:b7:dd:ef:ab:f2:8e:84:40:b5:6b:63:
                    60:b1:25:9f:ea:d0:24:be:d4:d2:b7:b0:f5:70:bb:
                    30:29:8d:11:c2:21:70:24:bc:30:3b:23:d0:d4:a5:
                    c3:21:53:a5:4e:2d:8d:0a:be:38:4c:5e:9e:49:b7:
                    74:56:a2:37:11:04:99:07:8e:4b:35:d6:54:1b:e1:
                    12:58:aa:4f:9b:51:9d:c1:4c:01:4f:65:a9:47:f1:
                    88:18:48:03:07:39:17:1e:77:e6:eb:95:f3:0b:13:
                    36:13:6a:f7:dc:95:75:b8:fd:83:fa:f1:99:22:c8:
                    3a:c4:3b:09:7c:90:e3:dc:ea:93:11:91:88:62:d5:
                    57:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:68:24:34:5D:61:11:10:6E:0E:0E:C8:9C:FB:72:38:4B:02:3A:21
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300/d25162b3-7899-4412-8d2b-385913c82300.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0-149.112.154.255
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:36:2d:26:c2:f6:43:60:5d:a2:23:b5:61:d3:0a:c7:7d:
         5c:73:7e:1a:d4:60:88:78:06:5a:db:6f:cb:05:5b:f6:2f:86:
         f5:44:45:7d:dd:4c:02:26:ab:24:82:92:27:6b:e0:cd:c5:dd:
         37:2e:f7:65:64:ff:c9:7e:96:7c:4c:7b:14:10:de:a2:66:0e:
         4c:ca:a3:f3:70:48:1b:6c:54:f6:3e:98:e5:9e:01:1f:47:b5:
         f2:18:14:c6:a2:c7:e4:5b:63:4e:84:23:0c:04:e8:83:fd:99:
         c1:41:6a:f5:41:a5:6c:e6:57:9f:54:42:9a:85:9e:2a:7d:80:
         26:3c:f4:6a:69:d3:04:7b:87:c1:07:e0:66:1b:ee:fb:ec:a7:
         59:2c:9e:3f:44:ae:be:55:63:4b:b9:17:51:1b:7f:bb:e4:10:
         b4:ff:be:3e:56:24:76:b0:aa:8f:ef:69:7f:13:22:43:58:e8:
         fc:04:f0:95:8e:9d:22:d4:48:ad:89:65:60:13:3e:35:84:f3:
         81:92:0f:9a:a4:e7:dd:8d:d4:9e:c5:39:7a:aa:b1:88:13:2d:
         32:15:21:a9:0b:a0:cf:a3:54:e0:38:f5:85:37:d1:77:a7:1e:
         e7:7b:cb:b1:33:e8:02:5e:3c:36:2c:cb:9e:04:97:5a:83:44:
         77:c7:51:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:40 2023 by rpki-client on console-ams.rpki-client.org