Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3bfffe35-e66a-450f-8101-e7825f6d820f.cer
File:                     3bfffe35-e66a-450f-8101-e7825f6d820f.cer (raw, json)
Hash identifier:          5+aziXSIaLrzoGV+pW2s15beG8JaIHCIXH/MgDtJA+0=
Subject key identifier:   19:41:75:FD:00:EE:33:EC:E5:31:14:F4:31:D6:FA:A1:56:01:86:2A
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328583FDD410ADCD9FDBD87D8072B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3bfffe35-e66a-450f-8101-e7825f6d820f/3bfffe35-e66a-450f-8101-e7825f6d820f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3bfffe35-e66a-450f-8101-e7825f6d820f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 10 Nov 2022 19:09:09 +0000
Certificate not after:    Mon 24 Jun 2030 17:39:32 +0000
Subordinate resources:    AS: 11758
                          IP: 66.85.43.0/24
                          IP: 149.248.160.0/21
                          IP: 198.231.28.0/22
                          IP: 204.29.12.0/22
                          IP: 2607:f920::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:dd:41:0a:dc:d9:fd:bd:87:d8:07:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Nov 10 19:09:09 2022 GMT
            Not After : Jun 24 17:39:32 2030 GMT
        Subject: CN=3bfffe35-e66a-450f-8101-e7825f6d820f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:cd:e8:24:1b:07:56:d2:3b:bf:8d:03:33:
                    ab:b5:b5:ab:9e:bf:aa:65:58:41:c2:de:a8:cd:87:
                    a3:37:d2:81:93:cf:72:be:c4:1b:fb:94:03:32:94:
                    3f:c1:8a:db:16:93:dd:ea:3a:0c:fb:ab:83:ed:99:
                    5c:04:4b:d7:d0:26:1f:c2:36:e5:0a:66:60:12:b6:
                    4c:67:06:ab:c7:c6:26:0f:c6:66:94:df:b9:1c:27:
                    da:62:a7:7b:4e:b3:bd:9f:09:41:f9:c8:95:f8:fe:
                    73:7f:41:74:ad:86:86:47:4c:9c:05:a5:38:03:b2:
                    bb:f1:7c:0f:72:b0:81:b0:5f:ac:8e:6f:86:ca:39:
                    f8:7b:80:5e:88:45:37:dd:5e:e5:7e:e9:be:39:3f:
                    3b:3e:7c:2d:3c:ad:0e:70:dc:00:44:00:26:c6:c0:
                    ec:db:87:f3:df:ed:a6:32:43:15:ab:85:b7:39:da:
                    c6:ff:a7:0a:af:7d:82:6d:ca:64:b9:42:bc:1d:6d:
                    96:f6:61:57:74:b4:46:d9:59:3c:f1:22:40:b3:64:
                    36:1b:0f:c2:58:3b:bf:62:a8:74:e4:8c:36:b4:e5:
                    9e:98:a6:00:2d:a5:e4:56:b2:40:4e:1a:be:0f:2f:
                    bd:17:e1:b8:23:42:ef:80:f8:86:bc:f4:35:e3:6c:
                    c2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:41:75:FD:00:EE:33:EC:E5:31:14:F4:31:D6:FA:A1:56:01:86:2A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3bfffe35-e66a-450f-8101-e7825f6d820f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3bfffe35-e66a-450f-8101-e7825f6d820f/3bfffe35-e66a-450f-8101-e7825f6d820f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.43.0/24
                  149.248.160.0/21
                  198.231.28.0/22
                  204.29.12.0/22
                IPv6:
                  2607:f920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11758

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ea:74:df:ae:06:ad:19:76:f1:fd:3d:20:4e:29:ac:9d:94:
         5f:2f:c1:a1:8c:64:d2:49:04:9a:18:c7:db:21:65:dc:3e:4a:
         90:8d:68:0e:3c:36:b5:b2:4d:da:0a:52:9c:0f:cf:10:53:9c:
         51:5a:2c:6f:03:9b:46:e6:b0:ae:1c:f2:95:2b:bc:8b:f4:e0:
         49:63:10:c1:5c:9a:8f:d9:cd:ce:81:12:d7:d7:3b:49:97:b9:
         55:bb:08:ce:ef:62:3c:32:d0:fb:2b:8d:71:59:6d:12:d4:00:
         4a:4c:03:65:ef:d4:f0:56:eb:42:38:9c:1a:53:7f:b4:11:8f:
         c4:b1:47:c6:94:94:01:98:05:87:50:0e:3a:79:17:26:67:87:
         f3:37:83:5a:69:fe:b2:18:a3:6c:41:2f:0e:22:35:61:4d:cf:
         77:59:4c:8c:4e:46:08:83:65:e0:50:4e:f2:93:e3:5a:af:ac:
         27:d8:73:98:b1:e8:f8:46:50:82:f2:ff:eb:75:21:14:9f:62:
         f2:4a:9f:02:42:ea:64:35:6e:41:1b:14:7b:52:99:93:c5:04:
         a7:3c:08:89:af:22:7f:3d:d4:d1:2a:b8:5b:af:85:3e:05:4f:
         f9:68:c0:f7:4a:8a:19:f1:b1:b4:8d:3b:5d:e3:49:ad:dd:86:
         de:10:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:00 2023 by rpki-client on console-fra.rpki-client.org