Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fb355609-f6dc-4bcd-a904-ef31b5927d08.cer
File:                     fb355609-f6dc-4bcd-a904-ef31b5927d08.cer (raw, json)
Hash identifier:          Fh81kjq1TwdWE2Ebfk35Hmomqn8Sk2L+rcDRloD1PQY=
Subject key identifier:   00:25:D7:6A:DC:AB:EC:F9:C3:BC:32:78:A1:A7:94:7E:EF:10:7F:B8
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858431F90B82350056EA1F821F980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fb355609-f6dc-4bcd-a904-ef31b5927d08/fb355609-f6dc-4bcd-a904-ef31b5927d08.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fb355609-f6dc-4bcd-a904-ef31b5927d08/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 05 Sep 2023 15:33:51 +0000
Certificate not after:    Mon 08 Dec 2025 16:33:51 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:1f:90:b8:23:50:05:6e:a1:f8:21:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep  5 15:33:51 2023 GMT
            Not After : Dec  8 16:33:51 2025 GMT
        Subject: CN=fb355609-f6dc-4bcd-a904-ef31b5927d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:e6:47:c1:1f:09:b0:78:d1:3d:9d:dc:d4:
                    b9:6b:36:f0:cd:aa:69:44:50:56:59:21:a4:d8:32:
                    5b:39:56:83:7c:b3:77:2c:3f:bf:a9:7d:f7:2e:2e:
                    48:f0:85:41:33:86:53:fa:e9:6e:b5:0b:a6:d3:c3:
                    fb:e2:f8:bc:39:16:00:07:0b:bd:e8:53:d7:66:32:
                    71:da:03:82:f3:d0:c0:44:09:75:f9:1f:e1:19:f7:
                    db:5e:70:c1:9d:cb:3a:e8:d4:d5:fb:7e:eb:59:fc:
                    85:2a:fa:ae:5a:4a:c3:a0:83:23:b3:02:16:64:10:
                    aa:cb:90:08:26:f4:ff:c2:ce:c6:71:65:d2:97:a0:
                    39:48:96:c5:7a:de:dd:1d:35:a7:12:3a:fc:f4:a1:
                    eb:c2:d9:a9:5e:bb:7a:7f:5a:05:fe:5e:28:e1:88:
                    bb:2a:4f:8b:3e:e1:5c:85:be:ed:e1:36:84:0f:3d:
                    a9:67:07:93:42:60:5f:7f:5f:92:08:3a:cd:5f:25:
                    da:43:32:e5:b7:a1:8b:e0:3a:a0:a5:39:f7:7f:ec:
                    c5:14:24:cd:d1:64:6d:97:a7:ce:10:9a:95:02:bb:
                    ce:b7:d4:2d:70:40:02:e2:55:fa:b8:d5:76:fa:81:
                    d1:90:4b:a2:5a:ca:e0:cc:3b:e6:76:e0:42:f2:5c:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:25:D7:6A:DC:AB:EC:F9:C3:BC:32:78:A1:A7:94:7E:EF:10:7F:B8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fb355609-f6dc-4bcd-a904-ef31b5927d08/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fb355609-f6dc-4bcd-a904-ef31b5927d08/fb355609-f6dc-4bcd-a904-ef31b5927d08.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:02:a7:ab:31:d9:53:5e:11:a4:36:01:0b:06:a9:bf:03:62:
         65:73:ac:91:9b:21:69:2b:01:37:18:ae:27:7a:13:71:b1:9c:
         44:62:3f:8c:24:f6:84:f9:dc:10:44:ab:86:c4:c6:91:fe:24:
         51:d2:c2:db:eb:7d:0c:b5:45:a1:e4:00:d2:40:f7:d2:72:8a:
         1b:e9:be:35:c7:4d:3f:f3:fa:91:ec:71:17:41:05:3a:e8:1a:
         72:5b:77:0f:67:12:2b:a0:76:1d:12:3f:70:c8:ad:db:29:c4:
         46:b7:63:3c:42:89:a3:44:ab:40:ce:e8:9c:46:7d:04:a3:17:
         ec:65:da:f5:64:96:20:8d:94:f1:3d:cf:84:d7:ef:9e:61:54:
         53:be:bf:52:72:e9:1e:f4:09:67:a6:82:61:95:23:a3:e4:b3:
         30:f8:ca:e1:7f:1c:04:93:77:24:09:3c:01:55:51:38:f0:31:
         fd:fd:9f:c4:0c:20:24:7e:ad:65:31:7a:95:19:ee:04:04:72:
         f0:3a:61:1b:f6:eb:ee:6a:46:87:94:2b:22:f7:1c:44:9f:bf:
         b2:31:fe:0b:a8:f9:82:ae:3e:31:a5:aa:ad:2e:bf:fa:44:f1:
         d8:ab:7d:f9:eb:ba:82:c1:e2:b5:28:09:46:72:ab:4f:da:40:
         95:d0:58:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 17:34:42 2023 by rpki-client on console-fra.rpki-client.org