Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d2b14de7-2a92-44db-ae48-2e67350a9344.cer
File:                     d2b14de7-2a92-44db-ae48-2e67350a9344.cer (raw, json)
Hash identifier:          AJTxsOoMlFmUYLLF7d581l/u8rC5yXM02rjNlGWzz5o=
Subject key identifier:   9C:D0:E0:55:DE:27:7B:3C:43:20:05:03:F6:74:FF:9D:8C:66:CE:ED
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E483123AC5EEB16295C2A200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d2b14de7-2a92-44db-ae48-2e67350a9344/d2b14de7-2a92-44db-ae48-2e67350a9344.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d2b14de7-2a92-44db-ae48-2e67350a9344/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 21 Jun 2024 19:06:39 +0000
Subordinate resources:    AS: 55002
                          AS: 398349
                          IP: 107.162.0.0/16
                          IP: 2604:e180::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:12:3a:c5:ee:b1:62:95:c2:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 21 19:06:39 2024 GMT
        Subject: CN=d2b14de7-2a92-44db-ae48-2e67350a9344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:38:ea:7a:d0:e6:d6:89:99:c5:bf:ff:43:7f:
                    b2:41:54:11:50:30:88:90:d2:76:8a:b1:89:3c:49:
                    4b:ca:1f:6f:76:5b:10:a4:d6:70:61:2f:ee:b1:85:
                    44:cb:2b:c8:3b:59:9d:62:fc:bf:7e:bb:8c:0b:9f:
                    7e:cd:70:14:95:79:68:25:c6:d2:14:27:8a:07:e6:
                    82:3e:9a:f5:2f:51:3b:77:3c:eb:a8:d9:84:86:f1:
                    5c:db:8d:0c:cb:e8:f5:25:90:4c:37:11:46:1d:7e:
                    e4:80:d3:97:78:4e:2f:92:ff:27:1a:22:e1:93:ab:
                    d1:fa:70:6a:1c:50:f9:45:2b:90:3f:aa:0b:0b:31:
                    e4:99:58:56:c8:22:32:73:b7:31:08:25:3d:7d:70:
                    13:6a:5c:b6:06:42:23:39:d1:79:c7:82:69:5b:0e:
                    0e:00:72:58:6c:6c:9c:81:6d:80:f9:ef:2d:15:51:
                    94:58:72:ad:03:b9:e3:6a:21:3e:cc:69:6c:b2:d0:
                    5b:10:7c:2a:2e:96:e9:10:ba:81:5e:1f:14:dd:d1:
                    f7:c7:6b:7e:f7:1e:f9:2d:0f:cf:0b:a9:65:33:e0:
                    e1:b2:a4:da:d7:ad:22:92:50:07:13:e6:01:91:7c:
                    a3:be:b3:3e:eb:32:9c:4f:00:b6:e4:00:bf:60:a3:
                    81:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D0:E0:55:DE:27:7B:3C:43:20:05:03:F6:74:FF:9D:8C:66:CE:ED
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d2b14de7-2a92-44db-ae48-2e67350a9344/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d2b14de7-2a92-44db-ae48-2e67350a9344/d2b14de7-2a92-44db-ae48-2e67350a9344.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.162.0.0/16
                IPv6:
                  2604:e180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55002
                  398349

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0d:79:7f:31:d5:14:fb:4a:18:7f:86:bb:d7:18:2e:62:0e:
         f5:78:f6:c7:a5:fa:c0:fa:df:72:5c:22:cf:56:97:49:c1:04:
         4b:f2:4f:64:3b:01:3e:b8:e2:62:5b:a4:b1:8e:71:c5:86:f5:
         27:3d:53:ab:62:12:19:50:28:4d:40:e9:cb:d8:9b:72:0a:97:
         0f:e9:55:42:6f:03:b7:d7:a4:4c:bc:a8:c6:cc:18:f4:be:15:
         ea:88:25:51:21:94:be:7f:ba:43:ca:d0:d9:9f:06:73:1d:bf:
         e5:82:84:d9:d2:72:98:d9:98:24:bd:c7:ed:8e:86:04:be:4d:
         ef:7e:b2:fd:24:9b:19:87:93:2b:6a:c9:d6:16:66:22:96:6d:
         7a:3e:46:98:0d:d5:40:ff:ba:f2:52:3e:78:90:9f:1f:89:52:
         7b:d0:96:87:01:87:52:a5:b9:0e:6d:92:2e:1b:16:d1:a6:91:
         d8:6d:80:5f:b4:21:60:d3:eb:4b:ad:56:18:6b:4e:13:42:32:
         65:c4:ce:3d:11:60:9b:29:96:c7:f8:d2:2d:fd:4b:b0:f1:33:
         44:f4:1c:57:1c:47:c1:5f:73:78:2e:06:fc:6a:a0:53:00:76:
         e2:c5:95:9c:dd:63:ec:bd:df:62:70:28:7f:ba:37:1e:0c:3e:
         e0:bb:37:74
-----BEGIN CERTIFICATE-----
MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEHkgxI6xe6xYpXCogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI0MDYyMTE5MDYzOVowLzEtMCsGA1UEAxMk
ZDJiMTRkZTctMmE5Mi00NGRiLWFlNDgtMmU2NzM1MGE5MzQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zjqetDm1omZxb//Q3+yQVQRUDCIkNJ2irGJ
PElLyh9vdlsQpNZwYS/usYVEyyvIO1mdYvy/fruMC59+zXAUlXloJcbSFCeKB+aC
Ppr1L1E7dzzrqNmEhvFc240My+j1JZBMNxFGHX7kgNOXeE4vkv8nGiLhk6vR+nBq
HFD5RSuQP6oLCzHkmVhWyCIyc7cxCCU9fXATaly2BkIjOdF5x4JpWw4OAHJYbGyc
gW2A+e8tFVGUWHKtA7njaiE+zGlsstBbEHwqLpbpELqBXh8U3dH3x2t+9x75LQ/P
C6llM+DhsqTa160iklAHE+YBkXyjvrM+6zKcTwC25AC/YKOB0QIDAQABo4IELjCC
BCowHQYDVR0OBBYEFJzQ4FXeJ3s8QyAFA/Z0/52MZs7tMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k
MmIxNGRlNy0yYTkyLTQ0ZGItYWU0OC0yZTY3MzUwYTkzNDQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2QyYjE0ZGU3LTJhOTItNDRkYi1h
ZTQ4LTJlNjczNTBhOTM0NC9kMmIxNGRlNy0yYTkyLTQ0ZGItYWU0OC0yZTY3MzUw
YTkzNDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLQYIKwYBBQUH
AQcBAf8EHjAcMAsEAgABMAUDAwBrojANBAIAAjAHAwUAJgThgDAfBggrBgEFBQcB
CAEB/wQQMA6gDDAKAgMA1toCAwYUDTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwDXl/MdUU+0oYf4a71xgu
Yg71ePbHpfrA+t9yXCLPVpdJwQRL8k9kOwE+uOJiW6SxjnHFhvUnPVOrYhIZUChN
QOnL2JtyCpcP6VVCbwO316RMvKjGzBj0vhXqiCVRIZS+f7pDytDZnwZzHb/lgoTZ
0nKY2ZgkvcftjoYEvk3vfrL9JJsZh5MrasnWFmYilm16PkaYDdVA/7ryUj54kJ8f
iVJ70JaHAYdSpbkObZIuGxbRppHYbYBftCFg0+tLrVYYa04TQjJlxM49EWCbKZbH
+NIt/Uuw8TNE9BxXHEfBX3N4Lgb8aqBTAHbixZWc3WPsvd9icCh/ujceDD7guzd0
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:40 2023 by rpki-client on console-ams.rpki-client.org