Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8613df01-7b19-4439-8875-166eb9f14ac1.cer
File:                     8613df01-7b19-4439-8875-166eb9f14ac1.cer (raw, json)
Hash identifier:          HtseMz4WcShhc9qaoinRjEOlv9EBzFunUa23D3R3mBQ=
Subject key identifier:   54:41:0F:E5:DF:DA:12:AC:AA:32:00:11:58:28:EC:4A:2E:DB:E0:D4
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858430F371DF054828CCA1C1408C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8613df01-7b19-4439-8875-166eb9f14ac1/8613df01-7b19-4439-8875-166eb9f14ac1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8613df01-7b19-4439-8875-166eb9f14ac1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 30 Aug 2023 19:00:23 +0000
Certificate not after:    Thu 27 Nov 2025 18:12:25 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0f:37:1d:f0:54:82:8c:ca:1c:14:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 30 19:00:23 2023 GMT
            Not After : Nov 27 18:12:25 2025 GMT
        Subject: CN=8613df01-7b19-4439-8875-166eb9f14ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:55:09:85:47:aa:ef:af:ff:62:77:c5:d8:
                    02:2f:2c:b1:dd:0f:2f:68:0b:70:10:8d:f3:24:1f:
                    14:96:23:57:4c:91:6f:15:59:fc:58:87:99:f1:23:
                    e5:81:6e:8b:3d:68:cf:35:0d:7a:1d:82:1e:2e:94:
                    d6:b0:52:c7:29:b3:be:83:72:ff:ab:67:86:c1:07:
                    37:f8:c3:ed:42:e4:f0:e9:7a:f3:b2:44:b3:30:83:
                    e5:14:96:3c:03:ea:a8:9f:43:5b:36:58:dc:a8:c1:
                    b4:d1:a5:2e:e6:bf:1a:23:0d:15:42:c2:c6:fb:5f:
                    58:77:3c:a0:9d:a9:3c:e6:29:9e:fb:a5:3d:c8:ff:
                    f2:6f:84:ff:cd:2e:13:af:69:5e:6e:3d:7a:70:45:
                    09:7e:d6:1e:ec:3a:c6:c1:92:70:af:d9:79:68:35:
                    6b:98:3f:ae:17:4d:76:b9:54:86:a5:6f:87:f0:09:
                    82:16:d6:ae:24:5e:c3:25:d0:2d:ad:ae:f3:b2:72:
                    1f:d1:b2:a4:22:92:d6:78:d0:f9:07:7f:ef:38:d4:
                    b0:a1:a1:60:f8:cb:1e:33:3f:60:f2:eb:da:64:f2:
                    e1:01:20:c2:ac:3d:f6:82:1c:ac:61:86:cc:6c:9e:
                    7c:36:57:65:32:6f:0d:0e:1e:92:3e:75:5d:30:61:
                    42:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:41:0F:E5:DF:DA:12:AC:AA:32:00:11:58:28:EC:4A:2E:DB:E0:D4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8613df01-7b19-4439-8875-166eb9f14ac1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8613df01-7b19-4439-8875-166eb9f14ac1/8613df01-7b19-4439-8875-166eb9f14ac1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:79:a4:c3:a5:90:86:fa:2b:85:50:9f:49:8a:18:50:8c:78:
         99:ec:c4:ba:1d:be:ac:ad:1c:07:27:b4:0e:46:9d:e3:fc:5a:
         0a:4c:a3:71:fb:05:3a:2c:9b:03:07:82:e0:55:17:6a:bb:9b:
         c9:f8:fa:aa:a7:b2:b8:65:7d:20:9c:7a:02:6b:0f:d6:8e:60:
         fa:fd:9e:d2:90:ef:b5:13:da:3e:54:9d:42:e9:75:93:0c:a3:
         5a:cf:49:8e:4c:80:05:59:a4:29:2c:8e:5d:47:08:16:23:2b:
         71:87:7d:57:c1:a1:6d:11:3a:2f:7a:08:30:f6:18:17:c2:ca:
         9c:ac:6e:54:04:ee:14:55:92:25:1e:62:3a:ac:85:78:3d:aa:
         77:6b:2d:85:db:bc:b8:df:56:f8:af:0d:5c:8c:e3:0e:99:c2:
         c3:30:18:9a:5b:d8:e7:34:d8:26:2d:a0:a7:af:eb:0b:e3:cd:
         0e:c0:09:48:fc:11:75:d8:c9:2a:67:71:95:35:87:d6:b9:0f:
         67:79:51:82:73:09:3b:04:ea:68:cb:d0:1f:78:cf:b6:75:c5:
         81:a9:b5:3d:ad:d7:f6:a9:f2:c2:61:a5:31:3a:27:27:71:2f:
         94:74:b9:1e:ae:3e:d7:11:99:86:b2:2d:2e:b1:df:ca:90:6a:
         ae:f3:0a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 19:59:18 2023 by rpki-client on console-ams.rpki-client.org