Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a80f3806-674d-4122-9050-567e834916f6.cer
File:                     a80f3806-674d-4122-9050-567e834916f6.cer (raw, json)
Hash identifier:          pOqg+qKnrHOkPJ3cG0hxzndGwv2LoEsange/hAlDNvI=
Subject key identifier:   15:95:6E:C6:F1:5C:D6:12:16:0A:BC:C4:8E:96:E4:12:B9:BF:CE:57
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858430F41A73369C54EEFFE80DE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a80f3806-674d-4122-9050-567e834916f6/a80f3806-674d-4122-9050-567e834916f6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a80f3806-674d-4122-9050-567e834916f6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 30 Aug 2023 19:21:36 +0000
Certificate not after:    Tue 02 Dec 2025 20:21:36 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0f:41:a7:33:69:c5:4e:ef:fe:80:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 30 19:21:36 2023 GMT
            Not After : Dec  2 20:21:36 2025 GMT
        Subject: CN=a80f3806-674d-4122-9050-567e834916f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:8a:99:9a:2a:ce:7b:9c:e9:dd:a2:43:ca:
                    3c:37:cf:c6:7d:8e:c2:e2:d4:f3:00:53:14:06:69:
                    98:ef:f7:6a:b7:e2:01:e7:95:0f:80:55:f5:d0:53:
                    34:4e:91:95:70:18:6d:9f:0a:48:3f:60:82:6d:13:
                    0b:70:b2:6c:7c:c0:5e:0b:61:c3:88:e8:97:2b:a6:
                    12:2f:7e:1b:ac:0d:ce:78:28:6f:eb:3c:84:53:d2:
                    f3:96:57:99:c2:74:93:a7:de:9b:1f:fc:7f:0b:55:
                    bf:ce:e1:e0:22:24:5e:e5:f1:ba:aa:56:ff:7e:f8:
                    33:d5:45:ce:ba:6e:4d:7c:6c:08:a1:a7:a3:c8:db:
                    73:84:23:e2:60:25:9d:2d:03:09:6c:fd:a9:88:df:
                    9d:ba:54:77:9d:95:57:81:f0:6c:97:0c:91:e7:1a:
                    e5:4d:60:bb:2a:d6:4b:66:de:c7:49:42:6b:92:d8:
                    c1:ad:a6:77:28:12:94:9c:c7:f8:48:be:3f:bd:09:
                    3a:da:39:91:9a:13:ba:c9:cc:44:88:da:88:7d:4d:
                    e0:10:e2:93:0b:a4:77:15:71:9f:22:a8:c0:59:e9:
                    05:78:c3:89:d3:bc:3d:51:bb:69:5c:3e:3c:bf:99:
                    e3:cc:9d:2a:46:9e:ca:cd:10:c8:31:85:e6:49:7a:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:95:6E:C6:F1:5C:D6:12:16:0A:BC:C4:8E:96:E4:12:B9:BF:CE:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a80f3806-674d-4122-9050-567e834916f6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a80f3806-674d-4122-9050-567e834916f6/a80f3806-674d-4122-9050-567e834916f6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:eb:9e:c4:51:76:6a:de:a4:1e:64:ef:25:98:50:55:5d:f9:
         8c:b4:d3:9a:cb:b5:7d:f3:32:99:1d:71:d3:01:b3:61:db:d7:
         53:d4:a2:d8:d3:ff:72:c2:35:fa:49:8d:a5:ff:6f:70:13:13:
         2e:92:c5:30:14:9f:c6:56:9d:dc:c3:44:99:77:ca:2e:ad:10:
         40:0d:47:be:bd:37:72:cc:c3:ba:fe:05:cc:a8:5f:63:96:68:
         28:f8:7b:b7:c3:0d:2f:82:89:78:ac:57:52:0a:67:eb:39:65:
         28:ba:1f:f9:46:2f:bd:1a:e4:7e:50:e9:bd:54:46:b0:88:a8:
         c7:2e:ec:ce:8c:7f:36:f6:4a:d6:b0:a5:5a:31:d7:85:15:42:
         8f:97:6e:f4:91:19:9f:d3:5c:66:0a:ed:e1:43:43:11:55:de:
         0a:a6:34:5a:1b:d5:37:77:bd:9d:db:ce:d7:a2:6f:5b:4c:41:
         5b:fb:76:67:b5:a1:dc:a4:6e:b9:ad:6e:92:6b:0b:0a:62:62:
         f7:4f:95:d9:8f:5c:a4:ac:58:0d:eb:a7:d1:8d:92:61:47:d1:
         c3:97:82:90:ed:b6:e6:2f:fb:e8:10:95:36:97:42:63:8f:0c:
         a4:7b:7f:23:d6:e7:21:4b:e1:58:63:9a:28:79:8b:38:47:d6:
         82:ba:b5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 20:30:47 2023 by rpki-client on console-ams.rpki-client.org