Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ea946fd-0372-44d8-b799-58c9dc190b3e.cer
File:                     3ea946fd-0372-44d8-b799-58c9dc190b3e.cer (raw, json)
Hash identifier:          xLOvTFQE97U3+Dk9Ds0UK7DvFRiVSrorqfeSAzFK8dE=
Subject key identifier:   87:E2:7B:B9:1E:A5:91:D9:F8:46:56:75:8F:7A:14:20:D8:4D:5B:F6
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285837D1872F8E18ED84FFFCB2E700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ea946fd-0372-44d8-b799-58c9dc190b3e/3ea946fd-0372-44d8-b799-58c9dc190b3e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ea946fd-0372-44d8-b799-58c9dc190b3e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 08 Oct 2020 15:47:51 +0000
Certificate not after:    Tue 08 Oct 2030 15:47:51 +0000
Subordinate resources:    AS: 10400
                          IP: 192.206.144.0/21
                          IP: 2620:116:e000::/40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d1:87:2f:8e:18:ed:84:ff:fc:b2:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Oct  8 15:47:51 2020 GMT
            Not After : Oct  8 15:47:51 2030 GMT
        Subject: CN=3ea946fd-0372-44d8-b799-58c9dc190b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:db:4a:d2:95:d8:ff:e7:79:54:d1:3a:9e:
                    6a:2d:dc:ee:02:9a:a6:7f:e8:95:7b:96:bf:58:ab:
                    0e:29:0a:7f:7a:50:0f:f5:9e:17:cd:f4:21:ff:44:
                    fb:61:56:87:a8:f2:27:b6:b9:75:a0:06:57:1e:4b:
                    20:5c:7e:df:11:11:45:87:e9:3b:c3:0a:dc:8d:8a:
                    f7:25:b1:b3:e7:b3:fb:6b:df:7d:03:37:a1:f6:05:
                    d6:6b:80:04:70:73:ae:db:cf:4a:72:ee:5d:31:1f:
                    28:a4:b8:13:5d:fa:f6:bd:ab:79:c7:9b:42:7a:b0:
                    9c:1f:34:85:51:33:fa:ba:d5:da:1a:5b:1b:83:88:
                    06:75:8b:cd:22:be:5c:63:b3:cc:aa:09:37:99:68:
                    f6:61:54:62:80:ca:a9:fe:0e:fc:59:ea:76:f1:ee:
                    c1:95:d1:b5:b1:5c:74:78:d1:31:8b:ef:e8:5b:19:
                    97:67:0b:54:c1:06:62:8c:00:e3:6a:d8:c7:f1:1b:
                    7f:4c:8c:c0:f0:09:30:3d:47:f3:26:bb:25:b1:8a:
                    12:11:34:1d:58:87:73:dd:ac:a3:06:66:4a:f8:2e:
                    a1:5a:2e:3b:ca:aa:85:1b:3f:bb:c3:72:3e:d0:ba:
                    e7:4d:ad:ea:fc:e9:d2:54:11:c4:2c:f1:99:09:0e:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E2:7B:B9:1E:A5:91:D9:F8:46:56:75:8F:7A:14:20:D8:4D:5B:F6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ea946fd-0372-44d8-b799-58c9dc190b3e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ea946fd-0372-44d8-b799-58c9dc190b3e/3ea946fd-0372-44d8-b799-58c9dc190b3e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.144.0/21
                IPv6:
                  2620:116:e000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10400

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:31:84:4d:95:aa:c1:b3:25:c1:66:2d:3f:b5:a6:12:26:bf:
         b1:e3:ae:2c:e9:2a:9b:2a:43:f2:12:aa:b1:75:1e:e6:94:98:
         d6:66:19:b6:25:4b:4d:15:b8:93:ce:33:31:15:d9:15:ec:f6:
         80:26:29:c3:09:33:78:86:02:a0:b2:52:45:94:8c:f6:bd:85:
         b8:59:ed:16:ea:ca:46:81:1a:bb:d9:e4:cd:97:69:8b:9f:4f:
         79:61:76:ee:8e:5c:3e:2b:be:1b:32:8b:ed:17:46:93:13:f3:
         4e:b2:18:85:ef:8e:2f:3a:0d:b2:7e:98:1e:de:c8:2b:c0:44:
         0d:a5:b6:9d:c4:1b:06:c5:d4:31:68:7a:7e:bd:42:29:c8:a3:
         10:6b:b6:55:81:da:63:ce:4a:64:10:cc:b1:b3:26:0d:1c:c2:
         6b:8a:f3:fa:70:9a:e2:94:8b:c1:a8:05:e8:c5:22:fe:84:d0:
         90:16:16:24:86:86:de:ac:12:4f:52:ee:b9:e5:19:b4:cd:91:
         c3:d0:54:4f:c0:84:31:80:05:8e:06:32:97:0f:8b:61:88:ff:
         84:01:61:df:3b:b4:65:42:bf:51:a1:20:55:39:d8:c8:32:3a:
         f7:82:ae:c6:b7:8f:aa:e2:72:6b:c8:ff:fd:e8:80:df:f1:14:
         03:57:3f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:00 2023 by rpki-client on console-fra.rpki-client.org