Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2d10084-ce44-41e4-bfdb-505a2809b37d.cer
File:                     b2d10084-ce44-41e4-bfdb-505a2809b37d.cer (raw, json)
Hash identifier:          XvpespdnV/lQ+xvQ8a0x1FIWQ+em5BGSIcMOlebIyyY=
Subject key identifier:   BB:A5:16:0D:55:5F:A6:8E:15:28:AD:F7:A2:87:78:CB:31:69:84:CF
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842918E2A192232D66D19C3F940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2d10084-ce44-41e4-bfdb-505a2809b37d/b2d10084-ce44-41e4-bfdb-505a2809b37d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2d10084-ce44-41e4-bfdb-505a2809b37d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 16 Jul 2023 18:43:55 +0000
Certificate not after:    Sat 18 Oct 2025 18:43:55 +0000
Subordinate resources:    IP: 138.34.0.0/16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:91:8e:2a:19:22:32:d6:6d:19:c3:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 16 18:43:55 2023 GMT
            Not After : Oct 18 18:43:55 2025 GMT
        Subject: CN=b2d10084-ce44-41e4-bfdb-505a2809b37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a4:ed:6f:0a:9f:a2:a8:76:6e:dc:0e:a9:9f:
                    00:91:d4:05:1c:79:2f:bc:20:c0:81:a3:a5:97:3b:
                    20:c7:fc:b8:73:2c:67:56:d9:48:f2:89:83:64:be:
                    2c:be:58:ea:31:5d:55:8f:c6:1b:6e:ed:8f:e9:91:
                    f0:a7:c9:d8:32:aa:b8:e6:f9:64:1e:49:32:ab:45:
                    03:ca:a8:b7:f1:de:17:94:69:98:01:e1:f3:26:bb:
                    2c:f6:a8:45:cc:b9:cb:e0:fc:ec:a7:b8:97:9f:ac:
                    5c:de:08:3c:d7:7e:52:06:bc:18:54:19:c6:99:8d:
                    59:02:cc:fb:f6:82:7f:fd:53:7a:f2:11:cd:1c:d6:
                    5d:e2:a6:04:7b:17:59:30:99:70:5a:2b:79:16:73:
                    85:57:8a:4a:2e:f4:97:6c:19:b5:94:16:cb:d0:20:
                    6f:1b:b0:29:63:d3:76:0f:cc:56:3e:71:29:7d:d4:
                    db:5e:ea:1b:55:d0:a6:b9:ab:05:ab:70:0a:21:ff:
                    1b:04:d4:14:93:a7:45:63:44:a1:1a:32:e9:e4:89:
                    c8:ea:34:3f:1c:22:73:c1:25:db:7e:fd:a1:d8:a7:
                    64:d7:7b:4c:9c:69:7d:ba:6b:8a:49:c6:60:74:c9:
                    1a:ec:45:f3:0d:93:e8:d2:0f:c0:81:2c:45:29:08:
                    d1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A5:16:0D:55:5F:A6:8E:15:28:AD:F7:A2:87:78:CB:31:69:84:CF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2d10084-ce44-41e4-bfdb-505a2809b37d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2d10084-ce44-41e4-bfdb-505a2809b37d/b2d10084-ce44-41e4-bfdb-505a2809b37d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e3:68:5f:f0:0e:6f:56:fc:76:c4:5b:ef:80:42:fa:83:f0:
         9b:8a:04:63:ca:d4:95:51:f8:af:88:63:98:98:ce:9f:a7:94:
         9f:af:d3:ad:fd:35:27:eb:46:7f:5f:b9:ff:92:f8:0a:bb:07:
         fa:fa:b9:db:b1:89:8e:10:db:8f:c7:af:8d:88:4e:d0:cc:30:
         3f:73:5d:65:a4:d0:9c:2e:e3:20:2b:7c:f7:16:6b:44:20:96:
         d3:ff:f2:7c:9f:d7:7b:aa:5c:78:78:4f:06:03:ad:a0:8e:74:
         3d:2c:02:12:04:20:cb:d6:aa:4b:56:2a:31:ee:76:3a:98:95:
         a7:1d:27:0e:6b:b5:5e:d4:b2:67:77:f4:8e:6a:a5:f8:65:da:
         b7:55:3c:c9:4b:54:72:a1:17:0b:fd:04:93:67:ce:a2:2d:b8:
         ba:47:5b:54:b1:6c:bb:79:05:eb:19:8f:2b:cc:12:3b:f7:c7:
         68:91:29:b7:31:2a:5e:21:da:88:c5:87:4e:d8:36:aa:55:6d:
         66:34:15:50:e3:dc:97:e2:8c:5c:03:8f:80:be:d5:1f:25:0a:
         30:14:b2:f9:9b:a7:18:48:fc:64:29:8b:1b:01:94:16:95:6a:
         68:f0:6b:81:7f:e5:49:e8:37:28:fa:dd:22:52:5f:e8:9c:f1:
         c9:fc:80:34
-----BEGIN CERTIFICATE-----
MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEKRjioZIjLWbRnD+UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMDcxNjE4NDM1NVoXDTI1MTAxODE4NDM1NVowLzEtMCsGA1UEAxMk
YjJkMTAwODQtY2U0NC00MWU0LWJmZGItNTA1YTI4MDliMzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqTtbwqfoqh2btwOqZ8AkdQFHHkvvCDAgaOl
lzsgx/y4cyxnVtlI8omDZL4svljqMV1Vj8Ybbu2P6ZHwp8nYMqq45vlkHkkyq0UD
yqi38d4XlGmYAeHzJrss9qhFzLnL4Pzsp7iXn6xc3gg8135SBrwYVBnGmY1ZAsz7
9oJ//VN68hHNHNZd4qYEexdZMJlwWit5FnOFV4pKLvSXbBm1lBbL0CBvG7ApY9N2
D8xWPnEpfdTbXuobVdCmuasFq3AKIf8bBNQUk6dFY0ShGjLp5InI6jQ/HCJzwSXb
fv2h2Kdk13tMnGl9umuKScZgdMka7EXzDZPo0g/AgSxFKQjRXQIDAQABo4ID/jCC
A/owHQYDVR0OBBYEFLulFg1VX6aOFSit96KHeMsxaYTPMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i
MmQxMDA4NC1jZTQ0LTQxZTQtYmZkYi01MDVhMjgwOWIzN2QvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2IyZDEwMDg0LWNlNDQtNDFlNC1i
ZmRiLTUwNWEyODA5YjM3ZC9iMmQxMDA4NC1jZTQ0LTQxZTQtYmZkYi01MDVhMjgw
OWIzN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwCKIjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBG42hf8A5vVvx2xFvvgEL6
g/CbigRjytSVUfiviGOYmM6fp5Sfr9Ot/TUn60Z/X7n/kvgKuwf6+rnbsYmOENuP
x6+NiE7QzDA/c11lpNCcLuMgK3z3FmtEIJbT//J8n9d7qlx4eE8GA62gjnQ9LAIS
BCDL1qpLViox7nY6mJWnHScOa7Ve1LJnd/SOaqX4Zdq3VTzJS1RyoRcL/QSTZ86i
Lbi6R1tUsWy7eQXrGY8rzBI798dokSm3MSpeIdqIxYdO2DaqVW1mNBVQ49yX4oxc
A4+AvtUfJQowFLL5m6cYSPxkKYsbAZQWlWpo8GuBf+VJ6Dco+t0iUl/onPHJ/IA0
-----END CERTIFICATE-----
Generated at Thu Aug 17 22:36:46 2023 by rpki-client on console-ams.rpki-client.org