Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46cec5f8-55c6-46b7-b5cd-a271ac2b4ec2.cer
File:                     46cec5f8-55c6-46b7-b5cd-a271ac2b4ec2.cer (raw, json)
Hash identifier:          yjQhPonwsbRlHvfC+GXZKJ9H8satx7PdLSm6kbksixQ=
Subject key identifier:   0A:71:76:F8:3F:A7:FD:30:6E:3B:32:AB:67:31:25:A2:78:50:94:63
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328583DD0882F99E7BB1BD547AA4760
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46cec5f8-55c6-46b7-b5cd-a271ac2b4ec2/46cec5f8-55c6-46b7-b5cd-a271ac2b4ec2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46cec5f8-55c6-46b7-b5cd-a271ac2b4ec2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Apr 2021 20:47:57 +0000
Certificate not after:    Tue 22 Apr 2031 20:47:57 +0000
Subordinate resources:    AS: 30644
                          AS: 39967
                          IP: 104.152.140.0/22
                          IP: 134.195.42.0/24
                          IP: 163.123.192.0/22
                          IP: 172.111.32.0/22
                          IP: 2602:fd00::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d0:88:2f:99:e7:bb:1b:d5:47:aa:47:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Apr 22 20:47:57 2021 GMT
            Not After : Apr 22 20:47:57 2031 GMT
        Subject: CN=46cec5f8-55c6-46b7-b5cd-a271ac2b4ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:36:2e:5f:3a:21:32:c7:c4:9a:15:b9:f7:61:
                    42:de:85:1b:07:76:1c:9e:78:bd:af:2e:6b:9a:a1:
                    7d:f0:5c:60:1b:09:62:d6:4e:2d:a8:9f:07:1a:27:
                    0c:e1:63:8f:cd:fb:0d:12:02:7b:cd:8d:f2:f1:be:
                    0b:c8:d1:5e:c7:f1:08:1c:8c:16:da:c4:52:d6:ed:
                    5e:79:e0:24:3a:9b:87:55:4c:a5:9b:b9:99:33:66:
                    9e:c7:98:8f:b8:39:7a:3b:be:94:90:19:22:c9:fa:
                    77:88:d4:39:05:23:83:86:c5:5c:66:d9:75:be:f3:
                    e4:71:29:09:e3:49:16:fe:7a:d9:2d:b9:7a:8b:31:
                    93:9f:c2:08:64:fa:80:29:89:cb:8e:36:45:71:08:
                    c7:d7:eb:2e:a2:90:5b:ec:3f:d9:4f:41:ba:2f:28:
                    36:bd:7a:03:94:6c:5b:e5:5a:ae:b2:e5:c6:ef:16:
                    1a:ae:2f:62:29:81:1b:2c:48:db:ba:e1:6d:ae:15:
                    04:33:f0:3b:70:8d:e6:27:22:3a:6a:75:37:85:39:
                    5b:11:a1:de:9b:36:43:e3:54:cf:31:7d:6d:7d:04:
                    48:2e:3b:ed:1d:c6:a4:e6:f9:9b:23:e1:27:52:f5:
                    3e:4f:98:6a:21:07:7b:d1:08:e5:de:91:fe:c2:f2:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:71:76:F8:3F:A7:FD:30:6E:3B:32:AB:67:31:25:A2:78:50:94:63
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46cec5f8-55c6-46b7-b5cd-a271ac2b4ec2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46cec5f8-55c6-46b7-b5cd-a271ac2b4ec2/46cec5f8-55c6-46b7-b5cd-a271ac2b4ec2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.140.0/22
                  134.195.42.0/24
                  163.123.192.0/22
                  172.111.32.0/22
                IPv6:
                  2602:fd00::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30644
                  39967

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ce:e0:de:68:5f:de:b7:e9:fd:f7:8f:3b:06:57:fc:ef:b8:
         b3:89:fc:05:c1:53:06:1b:57:21:b5:da:be:3d:44:c7:95:ce:
         0c:1c:7b:bb:87:aa:74:c1:68:fa:83:b8:9d:0c:7a:71:42:fa:
         63:f1:59:34:97:93:01:93:74:52:5f:7e:42:b2:8f:1e:9e:4f:
         87:de:41:71:42:4e:88:a1:ca:d2:27:76:b4:8e:0c:d3:cd:c4:
         70:ce:3f:33:17:1f:8c:cd:ef:73:e2:ed:06:c3:e0:ba:a6:07:
         c5:82:32:f5:03:db:96:da:90:9a:df:cb:36:c1:0d:e6:5b:29:
         e8:9d:3b:f2:9a:18:13:15:c7:31:c7:0c:8a:dd:00:f2:44:40:
         56:c9:41:3d:fa:06:3e:bc:d8:27:73:fb:97:9b:40:d8:74:b8:
         3b:f2:ba:af:26:30:91:e5:79:fa:31:7d:da:09:41:d0:44:c6:
         a5:26:ab:cd:92:5a:d8:f9:9b:99:94:7b:d8:62:aa:39:a5:98:
         2f:4e:de:05:ec:e3:45:7c:20:a2:28:72:28:bc:32:71:bf:d5:
         cd:b2:28:12:07:3a:90:07:98:a8:0b:de:5f:08:1c:66:c6:51:
         b0:d7:c6:0c:b7:b5:53:49:d6:95:85:3b:90:87:15:b9:96:e4:
         52:40:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:07 2023 by rpki-client on console-fra.rpki-client.org