Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9.cer
File:                     db91d16a-b30d-47f9-ad78-f468da19daa9.cer (raw, json)
Hash identifier:          w+arCMxjPBfGUvbDuUYdjs3BXy4pJ2qMgKIwPlW92Ss=
Subject key identifier:   3E:79:12:4D:84:1A:40:DD:FE:0E:C0:15:41:55:0B:D6:A2:64:CF:BA
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E483246570B11C0BC4D31280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9/db91d16a-b30d-47f9-ad78-f468da19daa9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Tue 24 Sep 2024 19:06:39 +0000
Subordinate resources:    IP: 206.197.211.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:24:65:70:b1:1c:0b:c4:d3:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Sep 24 19:06:39 2024 GMT
        Subject: CN=db91d16a-b30d-47f9-ad78-f468da19daa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:33:7a:6e:6d:c0:e9:07:b2:d7:56:00:4e:
                    a4:ba:a9:e7:ec:c7:03:e3:03:e9:8c:2a:ed:b9:77:
                    64:24:23:80:11:42:d6:eb:1a:1b:df:72:98:d7:f8:
                    79:9b:df:e4:57:bb:7c:ab:2c:87:dc:62:b1:cf:3d:
                    96:95:ac:0a:a8:18:e3:d7:06:b7:47:87:32:3d:02:
                    ed:99:fb:b5:24:8f:7b:ba:6c:4e:7b:09:56:d1:eb:
                    a2:fa:ab:e4:23:ad:31:89:fd:c7:06:d7:04:84:f3:
                    1a:be:15:8d:3a:f1:26:c8:a2:50:11:44:73:20:7f:
                    ac:2f:dc:f2:bd:e1:65:fd:d3:e0:27:3f:85:a7:b2:
                    d7:7d:fe:5d:a0:65:61:e1:78:7b:3f:ad:f8:27:c4:
                    c0:43:c6:6d:39:23:42:1b:04:7a:6e:0d:14:76:26:
                    1f:1d:a6:52:18:3a:e8:60:59:9a:5d:a5:bf:12:0e:
                    15:63:e7:78:d5:4a:0d:99:d9:98:d8:dd:58:78:7c:
                    cb:ad:7a:91:a8:22:fc:db:34:ad:9e:0f:72:5b:96:
                    cc:a5:1b:c0:74:b2:ce:aa:55:76:a7:4b:08:38:c3:
                    82:a0:10:05:fc:6e:10:fa:89:fd:61:4f:6d:1a:9b:
                    b0:70:01:68:cd:a0:52:d0:ed:20:ba:52:57:99:8d:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:79:12:4D:84:1A:40:DD:FE:0E:C0:15:41:55:0B:D6:A2:64:CF:BA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9/db91d16a-b30d-47f9-ad78-f468da19daa9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d1:64:53:16:35:f8:e6:a4:3c:93:3a:27:ff:ba:6e:31:b8:
         b0:35:08:40:ac:4e:8e:38:fc:38:38:57:f7:b6:c9:ef:67:fe:
         a0:ad:a3:c3:15:9d:f2:1a:83:e5:f5:5c:d0:45:57:7d:16:12:
         c4:f3:79:6f:13:61:48:0f:a1:33:3a:cd:71:4a:6b:2d:ff:e3:
         6b:3d:bf:27:d9:12:20:e6:e7:ff:5d:18:60:9a:74:fb:25:df:
         ab:f9:8b:ef:8b:46:13:d9:70:7f:84:e1:64:f0:a9:00:aa:cd:
         83:5d:05:63:98:f6:d1:7f:1d:60:c8:0f:32:11:59:78:7c:8b:
         ae:b5:f9:0f:7f:3a:6d:39:28:74:75:fb:50:0b:3b:85:07:0f:
         07:49:54:6b:c3:a2:4f:9a:ca:43:4c:0b:2a:55:47:da:44:3d:
         24:32:bd:dc:00:e6:d4:5b:54:bf:61:e6:97:8d:c7:50:2c:bb:
         ce:b8:5f:cd:be:9b:74:4a:89:f1:3b:3e:eb:99:3c:9e:a7:08:
         1a:15:4b:e7:d9:15:81:e3:e5:aa:cb:59:8c:bf:67:ce:81:98:
         d3:ce:ac:55:17:2e:ea:fb:6c:99:b7:c5:13:53:47:44:24:12:
         0b:95:16:68:b2:2a:24:ce:cd:ef:b7:13:11:12:fd:8a:70:52:
         7d:d3:3c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:41 2023 by rpki-client on console-ams.rpki-client.org