Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4a854d4-aa08-416d-a403-4b7cee7c539f.cer
File:                     e4a854d4-aa08-416d-a403-4b7cee7c539f.cer (raw, json)
Hash identifier:          DvdT9K9eX6trf/JaHfi5UsTSw3QBlLwouk9wTkq0B+M=
Subject key identifier:   A5:FD:C2:29:76:27:90:48:D2:63:95:F3:70:BF:16:9C:5E:F9:78:58
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584229F19B6711C3E7A2281A6E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4a854d4-aa08-416d-a403-4b7cee7c539f/e4a854d4-aa08-416d-a403-4b7cee7c539f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4a854d4-aa08-416d-a403-4b7cee7c539f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 09 Jun 2023 16:00:13 +0000
Certificate not after:    Sun 05 Jan 2025 20:06:39 +0000
Subordinate resources:    IP: 2602:ff4e::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:29:f1:9b:67:11:c3:e7:a2:28:1a:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jun  9 16:00:13 2023 GMT
            Not After : Jan  5 20:06:39 2025 GMT
        Subject: CN=e4a854d4-aa08-416d-a403-4b7cee7c539f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c8:c9:59:93:6e:61:bb:46:42:32:8d:b6:fc:
                    3a:da:bf:cd:23:cb:27:48:91:c2:33:21:0d:d5:13:
                    a4:d2:3d:f4:29:e0:14:dd:0f:b8:68:dc:11:61:ed:
                    c8:9e:bc:c5:c6:23:c8:97:c8:d2:64:71:75:ce:53:
                    ab:93:34:d2:da:0b:7e:08:37:be:de:21:15:dc:94:
                    24:48:e0:bf:4f:14:bf:c1:7c:20:2e:42:b0:66:22:
                    1e:db:4b:27:b5:9c:c0:70:9e:95:17:38:82:29:98:
                    06:3b:63:64:8f:8a:52:fb:b2:c2:3e:fc:c5:30:66:
                    48:d8:f5:5e:39:e1:b6:49:fd:59:4b:49:81:ce:14:
                    69:ba:f6:8d:ca:2b:b9:e2:7c:de:f1:53:50:3a:f3:
                    5a:48:aa:7d:38:02:35:1c:e2:ac:17:cd:9b:d5:cd:
                    f7:f3:de:f9:3b:4b:bc:c0:3d:f3:08:52:00:9b:e5:
                    dc:4d:86:16:ff:25:c5:10:03:80:bc:9a:2f:ce:a8:
                    30:6f:ce:ec:50:26:42:c5:b3:b8:c2:35:03:57:b1:
                    a6:d9:60:a2:aa:f4:48:14:dc:1c:ed:b8:e9:7f:30:
                    76:dc:1c:37:33:7a:39:50:cc:59:12:9e:77:25:c9:
                    8c:df:62:eb:c9:32:cb:9a:b8:06:80:d1:b3:57:a9:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FD:C2:29:76:27:90:48:D2:63:95:F3:70:BF:16:9C:5E:F9:78:58
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4a854d4-aa08-416d-a403-4b7cee7c539f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e4a854d4-aa08-416d-a403-4b7cee7c539f/e4a854d4-aa08-416d-a403-4b7cee7c539f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff4e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a9:79:26:b4:cc:75:73:a7:21:0d:f2:6b:d9:63:05:75:a5:
         13:f2:3e:31:d8:32:62:5c:26:08:61:f2:f7:d2:d4:3e:a5:cf:
         89:b0:51:76:eb:45:cb:51:f5:8e:be:41:1b:3f:08:e2:59:a5:
         9f:1a:0c:63:d8:36:67:3e:1d:db:ae:01:88:9b:cc:08:06:dc:
         30:fc:60:01:7e:3e:18:51:05:9c:40:09:a0:d9:b8:6f:09:99:
         45:88:12:a4:e7:81:76:39:25:c8:55:00:56:5a:61:4c:77:10:
         06:60:2d:41:9b:5a:ab:60:84:83:e1:1b:8d:76:22:df:33:dd:
         bd:ad:9c:5a:f2:b4:e1:6c:1f:a0:31:11:4a:a2:1f:40:51:99:
         cb:8f:43:ff:55:69:61:af:39:1e:a5:34:bb:9b:6d:4c:39:f1:
         49:ae:47:70:05:87:ba:b6:04:2c:a3:ce:36:76:5e:d4:4f:e2:
         d8:05:64:34:73:b0:a7:3c:d2:55:3f:1d:8f:1c:71:82:35:84:
         c9:5e:b2:a8:8b:59:74:ce:78:3a:3c:0b:d2:8c:61:85:61:1c:
         13:04:fc:97:c1:44:23:a8:9e:4e:41:07:79:b5:56:05:8c:fd:
         a6:67:e9:03:2b:01:9d:de:0b:72:50:99:b4:a1:74:24:06:8a:
         49:76:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 22:11:47 2023 by rpki-client on console-fra.rpki-client.org