Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4bb0d782-d0e5-47d2-bbc8-5a8060d4697e.cer
File:                     4bb0d782-d0e5-47d2-bbc8-5a8060d4697e.cer (raw, json)
Hash identifier:          SDyNp2yuCs6ArJkscj9Ih9qWevxpu7AarpNKnaNjF6Y=
Subject key identifier:   4F:48:00:7F:01:D9:AE:28:87:48:FE:63:F7:D0:47:F4:E0:6B:AE:7F
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584229D2A700C3F8F7C3D79DB300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4bb0d782-d0e5-47d2-bbc8-5a8060d4697e/4bb0d782-d0e5-47d2-bbc8-5a8060d4697e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4bb0d782-d0e5-47d2-bbc8-5a8060d4697e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 09 Jun 2023 14:57:51 +0000
Certificate not after:    Thu 11 Sep 2025 14:57:51 +0000
Subordinate resources:    AS: 20467

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:29:d2:a7:00:c3:f8:f7:c3:d7:9d:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun  9 14:57:51 2023 GMT
            Not After : Sep 11 14:57:51 2025 GMT
        Subject: CN=4bb0d782-d0e5-47d2-bbc8-5a8060d4697e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:48:7d:e3:b2:27:90:e6:09:e3:44:2e:e7:
                    fb:a7:91:97:22:c6:be:16:e3:6f:18:24:12:c3:b2:
                    c6:ca:98:bc:49:92:25:7d:c8:78:7e:91:19:fb:b7:
                    f8:0b:ec:ad:15:ca:7f:80:2a:37:05:95:7c:97:64:
                    6a:b0:a2:0d:a3:00:81:00:13:59:f4:ae:bd:8c:8b:
                    63:da:ef:9f:36:d3:a9:39:47:94:8f:bc:9d:22:5f:
                    31:de:15:6b:ee:ae:aa:f9:05:3b:57:1a:c7:ea:cd:
                    4c:64:07:48:45:9e:e2:ef:fe:6d:f7:7d:7a:a5:d7:
                    af:0d:1a:ac:07:09:d8:3e:d2:ee:e4:fa:12:cd:35:
                    22:1b:32:62:39:6f:44:4c:ab:ef:03:22:13:79:8c:
                    63:e3:9f:66:fa:5e:64:32:52:69:e2:a6:43:a1:26:
                    47:59:e2:d7:f3:43:ed:6c:b9:ef:58:03:52:5b:b7:
                    4e:c9:f2:f2:56:10:78:b3:90:c3:34:7b:8b:49:98:
                    33:fd:a0:8a:f6:89:9b:a5:3d:c0:05:eb:20:13:bb:
                    df:fd:fd:98:cc:38:55:f7:87:12:26:f5:d5:13:ac:
                    4c:c6:1e:5d:52:a3:0a:22:7b:e2:8f:ef:7b:76:a7:
                    15:25:b9:4f:cb:2a:a0:34:b1:ea:0a:ab:35:38:0e:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:48:00:7F:01:D9:AE:28:87:48:FE:63:F7:D0:47:F4:E0:6B:AE:7F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4bb0d782-d0e5-47d2-bbc8-5a8060d4697e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4bb0d782-d0e5-47d2-bbc8-5a8060d4697e/4bb0d782-d0e5-47d2-bbc8-5a8060d4697e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20467

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0e:1e:7d:b8:b0:59:58:94:92:fd:66:28:6f:be:c4:84:e1:
         df:05:81:f5:a5:07:3a:95:8c:ce:0d:2f:ba:7b:36:87:2e:0c:
         b6:f0:10:ee:76:62:5d:7e:9c:12:10:7e:f4:bd:2a:e1:05:f6:
         17:f3:2c:2f:cb:7a:32:5b:78:81:4f:1e:d8:77:45:e1:fc:0c:
         9c:6d:9b:92:6e:dc:85:a2:7e:73:9f:31:4f:e5:2c:8b:c2:e1:
         da:5a:19:d2:b7:41:d3:93:76:fe:05:ba:d3:ec:b1:8e:a8:ac:
         64:d4:9d:c1:5f:ec:bb:8a:b7:16:43:93:49:2e:09:7e:8a:5e:
         ed:1f:11:f2:a2:e7:96:14:69:ac:df:13:1a:9e:1e:e6:c2:68:
         48:89:9a:84:69:d2:df:41:08:b2:d7:73:a9:c0:49:e0:4d:55:
         f1:55:4d:c4:fd:0b:8b:b9:6b:85:07:36:4c:fa:85:85:4d:ca:
         2c:bc:ba:d4:0f:53:f4:04:a8:7c:ad:ad:a1:ee:ba:4c:1a:a1:
         5f:4f:88:ad:46:b4:0f:c6:3f:f4:c3:d9:71:7d:09:b8:0b:55:
         e8:89:9d:49:6b:ba:3d:b1:fa:78:79:8f:3b:97:b2:9e:bb:19:
         02:e6:27:6c:ab:9f:d2:73:a9:e2:ee:c6:a6:16:c1:11:c0:87:
         e5:b4:bb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 18:05:26 2023 by rpki-client on console-ams.rpki-client.org