Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/40b58ae5-53df-4f6e-8aa9-54558ead2f2b.cer
File:                     40b58ae5-53df-4f6e-8aa9-54558ead2f2b.cer (raw, json)
Hash identifier:          Vfma0mbGS6jhNsO9ggEasXo/lUvq8S5Ak84/lk4xPts=
Subject key identifier:   04:16:B2:A8:5A:B3:8A:FC:C3:75:1F:DC:AF:00:D6:40:72:9E:AA:38
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328583F9170E62BB46B30F11F07BD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/40b58ae5-53df-4f6e-8aa9-54558ead2f2b/40b58ae5-53df-4f6e-8aa9-54558ead2f2b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/40b58ae5-53df-4f6e-8aa9-54558ead2f2b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 14 Oct 2022 15:24:08 +0000
Certificate not after:    Sun 23 Jun 2030 11:50:00 +0000
Subordinate resources:    IP: 198.102.29.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:91:70:e6:2b:b4:6b:30:f1:1f:07:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Oct 14 15:24:08 2022 GMT
            Not After : Jun 23 11:50:00 2030 GMT
        Subject: CN=40b58ae5-53df-4f6e-8aa9-54558ead2f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:82:16:8e:b6:f1:d4:b0:20:e3:a8:67:aa:
                    40:7f:bd:e0:91:1e:63:71:2b:5e:04:c6:05:53:fa:
                    8b:9d:ab:48:f1:d4:81:01:f0:d9:99:9c:e7:c2:3e:
                    a8:08:f5:c7:cb:58:cc:57:37:44:d9:0c:53:f7:28:
                    84:d5:ce:60:66:48:c9:74:7d:57:f6:e1:e7:96:2a:
                    52:c8:49:a3:57:24:e4:0e:f1:c6:d6:d7:13:8b:3e:
                    25:db:c8:7a:e2:22:04:2f:cd:c1:f9:20:93:17:e1:
                    64:33:7f:82:07:c2:51:d7:1c:e2:84:d5:53:58:ea:
                    6b:50:a4:10:9f:40:67:89:8b:00:b2:95:a4:86:85:
                    f8:c8:0d:64:8e:5e:69:cf:b7:e2:03:3c:52:37:3d:
                    d0:11:28:f7:65:80:66:b5:d9:e7:69:9a:6d:b7:38:
                    df:e6:7f:18:54:a6:19:0c:fc:ae:c5:c4:16:d7:e1:
                    51:24:ad:42:1e:70:d7:18:3b:74:c9:2c:99:34:bb:
                    3c:3f:63:e8:be:4a:1c:b8:28:bb:0f:df:27:1a:7d:
                    f3:7c:1c:df:95:ac:ca:5f:91:8a:03:75:44:48:c1:
                    fb:2d:6b:e8:5c:9a:84:a9:ea:51:4a:23:d8:e8:d4:
                    d5:e4:ed:88:97:c0:c1:ec:ea:a4:d1:60:59:50:c8:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:16:B2:A8:5A:B3:8A:FC:C3:75:1F:DC:AF:00:D6:40:72:9E:AA:38
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/40b58ae5-53df-4f6e-8aa9-54558ead2f2b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/40b58ae5-53df-4f6e-8aa9-54558ead2f2b/40b58ae5-53df-4f6e-8aa9-54558ead2f2b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.102.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a3:04:84:c2:ab:82:10:c2:59:22:bb:79:28:ee:19:0a:a1:
         50:1a:89:f9:27:8f:ae:11:a6:6d:7e:91:9f:3a:e2:e5:be:b9:
         5d:b2:50:ab:34:97:f6:bd:75:c9:02:2a:c6:ba:ea:13:9d:84:
         f9:a2:62:38:0f:fc:4e:1c:dd:71:6c:a1:91:db:c6:32:cb:b5:
         aa:bc:09:70:d4:53:f8:07:45:10:9f:d9:09:55:1f:dc:72:2f:
         3e:a7:bc:93:57:c3:84:25:5e:6d:00:8e:38:bf:e1:9b:8c:36:
         8b:0d:99:f4:3a:67:2c:65:8b:63:a6:7a:27:93:bc:10:1a:a8:
         a0:6d:45:af:2d:b1:b1:c9:f7:42:85:7f:d2:c9:de:36:69:f1:
         80:5e:60:0a:ad:e7:5b:ea:f3:7f:0f:f5:f4:cb:bc:e2:7b:88:
         23:27:69:c3:f0:22:06:98:bb:59:a2:3b:38:53:2a:23:a4:05:
         77:a0:14:05:5e:41:6c:e0:0c:5b:24:c3:75:2e:40:bd:96:9a:
         e5:e4:16:2c:e4:dc:7b:b2:6d:96:6a:fa:b1:f8:0f:f5:1a:78:
         49:24:7c:64:a8:28:b1:c7:15:48:6b:d6:c8:33:dc:49:9a:0a:
         6e:64:62:35:92:b9:bc:a6:f7:12:af:15:cf:b5:1c:d3:b0:fe:
         d8:b4:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:07 2023 by rpki-client on console-fra.rpki-client.org