Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2b0639-c223-4821-87a6-c57af338afde.cer
File:                     aa2b0639-c223-4821-87a6-c57af338afde.cer (raw, json)
Hash identifier:          iJ02bSHLMq5PqcF3qMYrq9i4gqbrCpDbtb/y68m5qvQ=
Subject key identifier:   2E:65:48:35:EE:E7:6B:29:C9:CD:45:6A:00:A5:B2:E6:A0:D0:65:3C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858430F73A85D868BA586C1896E40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2b0639-c223-4821-87a6-c57af338afde/aa2b0639-c223-4821-87a6-c57af338afde.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2b0639-c223-4821-87a6-c57af338afde/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 30 Aug 2023 21:02:22 +0000
Certificate not after:    Tue 02 Dec 2025 22:02:22 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0f:73:a8:5d:86:8b:a5:86:c1:89:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 30 21:02:22 2023 GMT
            Not After : Dec  2 22:02:22 2025 GMT
        Subject: CN=aa2b0639-c223-4821-87a6-c57af338afde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:88:63:71:72:97:74:21:61:eb:f8:2f:82:
                    64:1b:58:d7:1c:30:b0:1f:ec:2a:4c:10:74:9d:20:
                    b6:20:c9:4c:a0:5e:ef:77:e8:30:45:be:47:ec:d0:
                    e6:eb:b9:49:a9:79:0b:da:29:53:26:67:b8:92:cb:
                    fb:3b:2b:91:03:64:c4:23:a3:8a:99:46:d8:46:2a:
                    3b:f8:eb:ec:ce:6a:3e:16:35:ff:8a:d8:c4:3b:13:
                    1a:e3:d6:ca:44:9a:b6:cd:27:d8:c4:3f:44:2f:73:
                    95:d1:d7:c3:34:2b:a4:9b:af:60:d9:6f:c0:85:c8:
                    02:cf:23:4c:eb:c5:62:1d:51:89:e5:89:79:a2:a0:
                    26:18:8d:09:8f:34:3e:98:03:49:67:75:ce:8a:0e:
                    31:4c:90:13:c1:25:31:29:b3:e0:fc:09:c1:c2:55:
                    5c:91:cb:0b:67:56:e0:8f:a3:82:d1:36:60:a9:23:
                    a6:e1:42:e2:9c:51:8c:33:30:98:3c:02:ed:0e:f5:
                    e5:9c:19:6e:28:b7:1a:53:1b:a6:dd:91:95:a1:ae:
                    45:4d:8d:89:7b:48:b4:d8:12:bf:8b:eb:2b:fd:f3:
                    45:07:7a:3f:88:2f:12:60:ec:94:15:0f:65:78:11:
                    80:a5:b0:39:ea:03:e4:2c:4a:85:86:12:c8:01:5e:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:65:48:35:EE:E7:6B:29:C9:CD:45:6A:00:A5:B2:E6:A0:D0:65:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2b0639-c223-4821-87a6-c57af338afde/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2b0639-c223-4821-87a6-c57af338afde/aa2b0639-c223-4821-87a6-c57af338afde.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:0c:01:26:79:1b:24:b4:ef:3e:88:ac:5a:17:c3:2b:84:af:
         19:ab:79:76:dd:0a:6b:c7:8f:94:34:d6:89:de:2b:38:23:cc:
         8b:c3:3e:b6:3b:6d:ea:8c:34:b5:6f:b1:63:c5:1c:e2:5a:43:
         21:ca:f0:4b:b8:84:bb:31:6b:33:23:f0:68:dd:83:9e:dc:73:
         ce:67:f3:3b:14:39:33:5d:07:f2:83:1b:c1:fd:6e:a1:bb:c7:
         ed:60:39:67:38:3e:f3:de:ed:00:c3:c6:f3:c8:0b:91:74:a6:
         3d:09:de:7c:fe:0a:dd:a2:fc:3a:4c:f3:4b:4a:14:d5:4c:76:
         92:1e:6f:ae:57:07:bd:47:6a:09:de:57:68:c2:97:2f:4d:83:
         1a:31:66:da:fd:b6:64:c2:eb:17:e8:a6:8d:f2:2a:1a:5b:b9:
         de:37:7c:d0:db:86:cd:ef:91:80:b6:73:61:b8:c7:7c:a3:5a:
         1e:55:7c:57:75:48:97:48:69:af:19:2e:8d:13:2c:0e:b3:61:
         2d:cf:41:6d:9e:1a:33:90:07:26:a1:f0:1f:f5:41:7a:fc:28:
         35:38:bb:df:bb:40:32:97:00:19:40:7d:6d:2b:59:46:fa:e8:
         c7:3d:99:ff:7e:c6:84:d2:bc:9c:17:4e:90:21:a7:d3:3a:dc:
         cd:30:d5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 21:58:21 2023 by rpki-client on console-ams.rpki-client.org