Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad.cer
File:                     53e1e100-f122-416c-8a32-e10c835a78ad.cer (raw, json)
Hash identifier:          hdGWCwzZLUrbhgKDbsdEMky+oQNPkLFkFhFhwM/+Erk=
Subject key identifier:   9E:F4:3E:72:1D:5F:5A:FA:02:81:C2:75:34:75:40:1C:CD:C3:DE:87
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328583C096688E3FCF0F36E0DF94F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/53e1e100-f122-416c-8a32-e10c835a78ad.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 20 Jul 2020 13:48:59 +0000
Certificate not after:    Sat 20 Jul 2030 13:48:59 +0000
Subordinate resources:    AS: 7265
                          AS: 11693
                          AS: 12015
                          AS: 12026
                          AS: 12083
                          AS: 16727
                          AS: 29737
                          AS: 29780
                          AS: 29859
                          AS: 29895
                          IP: 23.28.0.0/16
                          IP: 24.35.0.0/18
                          IP: 24.35.96.0/19
                          IP: 24.42.128.0 -- 24.42.227.255
                          IP: 24.42.229.0 -- 24.42.255.255
                          IP: 24.96.0.0/16
                          IP: 24.192.0.0/16
                          IP: 24.214.0.0 -- 24.214.72.255
                          IP: 24.214.74.0 -- 24.214.147.255
                          IP: 24.214.150.0 -- 24.214.181.255
                          IP: 24.214.184.0/24
                          IP: 24.214.187.0 -- 24.214.190.255
                          IP: 24.214.192.0 -- 24.214.198.255
                          IP: 24.214.200.0 -- 24.214.228.255
                          IP: 24.214.230.0 -- 24.214.239.255
                          IP: 24.214.241.0 -- 24.214.255.255
                          IP: 24.236.64.0/18
                          IP: 50.4.0.0/16
                          IP: 64.53.128.0/17
                          IP: 64.233.192.0/18
                          IP: 65.60.128.0/17
                          IP: 66.29.192.0/19
                          IP: 66.203.224.0/20
                          IP: 66.216.192.0/19
                          IP: 67.149.0.0/16
                          IP: 68.179.128.0/18
                          IP: 69.1.0.0/18
                          IP: 69.14.0.0/16
                          IP: 69.47.0.0/16
                          IP: 69.73.0.0/17
                          IP: 69.171.192.0/20
                          IP: 72.15.64.0/18
                          IP: 74.81.192.0/19
                          IP: 74.199.0.0/17
                          IP: 75.76.0.0 -- 75.76.46.255
                          IP: 75.76.48.0 -- 75.76.129.255
                          IP: 75.76.132.0/22
                          IP: 75.76.138.0 -- 75.76.160.255
                          IP: 75.76.163.0/24
                          IP: 75.76.172.0/24
                          IP: 75.76.174.0/24
                          IP: 75.76.176.0/24
                          IP: 75.76.178.0 -- 75.76.255.255
                          IP: 75.118.0.0/16
                          IP: 76.73.128.0 -- 76.73.193.255
                          IP: 76.73.195.0 -- 76.73.200.255
                          IP: 76.73.204.0 -- 76.73.255.255
                          IP: 96.27.0.0/16
                          IP: 143.59.0.0/16
                          IP: 170.103.0.0/18
                          IP: 207.98.128.0 -- 207.98.248.255
                          IP: 207.98.250.0 -- 207.98.255.255
                          IP: 208.74.232.0/22
                          IP: 216.47.192.0/19
                          IP: 216.130.128.0/19
                          IP: 216.186.128.0/19
                          IP: 216.186.161.0 -- 216.186.255.255
                          IP: 2606:1100::/32
                          IP: 2607:3d00::/28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:09:66:88:e3:fc:f0:f3:6e:0d:f9:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jul 20 13:48:59 2020 GMT
            Not After : Jul 20 13:48:59 2030 GMT
        Subject: CN=53e1e100-f122-416c-8a32-e10c835a78ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:80:d6:f9:56:b7:3e:6f:e0:1e:a4:22:a3:14:
                    5f:44:c8:c9:22:58:cc:5d:72:e3:c3:06:10:63:f8:
                    71:41:d0:43:74:9f:3f:ef:26:e5:99:9f:77:85:75:
                    b0:21:1b:e1:55:8d:e4:9d:02:31:bd:11:b5:55:8b:
                    a8:dc:21:b6:29:77:47:5e:d8:30:87:af:36:77:94:
                    60:a6:99:4f:d5:55:3c:c4:e9:43:8a:df:7e:b5:00:
                    91:94:91:5f:03:34:a8:29:00:87:1b:6f:31:39:66:
                    4a:04:4b:28:d5:ae:ba:3e:2f:9e:d7:bd:7b:57:3a:
                    e5:61:02:24:8c:8f:0b:5c:1d:6b:f0:0b:32:9a:9f:
                    b3:f4:2a:78:0a:ca:6b:60:fc:f4:81:2d:8b:d2:17:
                    aa:c2:ce:9e:b0:08:a1:8b:c1:f8:ec:f5:ae:59:5b:
                    09:68:26:85:7a:e1:bc:dc:f5:2a:e3:45:4b:39:e5:
                    2d:c1:65:ed:87:76:ed:84:10:45:05:33:63:45:e7:
                    3b:ca:ef:c9:83:e8:9a:8c:b0:4c:5b:9d:45:2e:de:
                    b6:12:a5:cc:67:2c:0a:d6:dd:db:6e:91:30:4f:11:
                    53:56:f2:de:e2:25:7c:f0:7c:8d:f2:b9:d6:f2:a2:
                    f7:ac:1d:f5:96:38:96:d0:7c:9b:70:25:90:96:2a:
                    a4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F4:3E:72:1D:5F:5A:FA:02:81:C2:75:34:75:40:1C:CD:C3:DE:87
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/53e1e100-f122-416c-8a32-e10c835a78ad.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.28.0.0/16
                  24.35.0.0/18
                  24.35.96.0/19
                  24.42.128.0-24.42.227.255
                  24.42.229.0-24.42.255.255
                  24.96.0.0/16
                  24.192.0.0/16
                  24.214.0.0-24.214.72.255
                  24.214.74.0-24.214.147.255
                  24.214.150.0-24.214.181.255
                  24.214.184.0/24
                  24.214.187.0-24.214.190.255
                  24.214.192.0-24.214.198.255
                  24.214.200.0-24.214.228.255
                  24.214.230.0-24.214.239.255
                  24.214.241.0-24.214.255.255
                  24.236.64.0/18
                  50.4.0.0/16
                  64.53.128.0/17
                  64.233.192.0/18
                  65.60.128.0/17
                  66.29.192.0/19
                  66.203.224.0/20
                  66.216.192.0/19
                  67.149.0.0/16
                  68.179.128.0/18
                  69.1.0.0/18
                  69.14.0.0/16
                  69.47.0.0/16
                  69.73.0.0/17
                  69.171.192.0/20
                  72.15.64.0/18
                  74.81.192.0/19
                  74.199.0.0/17
                  75.76.0.0-75.76.46.255
                  75.76.48.0-75.76.129.255
                  75.76.132.0/22
                  75.76.138.0-75.76.160.255
                  75.76.163.0/24
                  75.76.172.0/24
                  75.76.174.0/24
                  75.76.176.0/24
                  75.76.178.0-75.76.255.255
                  75.118.0.0/16
                  76.73.128.0-76.73.193.255
                  76.73.195.0-76.73.200.255
                  76.73.204.0-76.73.255.255
                  96.27.0.0/16
                  143.59.0.0/16
                  170.103.0.0/18
                  207.98.128.0-207.98.248.255
                  207.98.250.0-207.98.255.255
                  208.74.232.0/22
                  216.47.192.0/19
                  216.130.128.0/19
                  216.186.128.0/19
                  216.186.161.0-216.186.255.255
                IPv6:
                  2606:1100::/32
                  2607:3d00::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7265
                  11693
                  12015
                  12026
                  12083
                  16727
                  29737
                  29780
                  29859
                  29895

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9b:9e:35:33:a8:85:ec:c2:6e:bf:2c:dd:87:fd:b1:2b:e3:
         1b:3b:71:9d:3c:68:a4:82:ea:71:f0:dc:9b:f2:c2:f9:a4:83:
         e7:d6:9d:bb:56:33:6d:5e:92:96:58:19:b6:ba:93:0f:49:6c:
         ae:2b:0a:49:fa:d5:28:ca:ca:98:00:84:c6:e2:aa:77:fb:e5:
         9e:cc:2e:d7:61:87:67:04:e5:99:97:45:43:4d:fc:d9:3d:21:
         35:bf:c8:ae:5b:05:36:6d:13:37:45:85:31:68:b3:f4:82:d0:
         a5:82:51:69:26:14:7b:91:7c:f6:05:75:92:43:db:b0:3a:33:
         05:f8:aa:4a:5f:68:f1:3e:38:ec:b2:70:73:b0:f1:bd:3a:95:
         e9:3b:fe:33:5e:c2:4d:42:5c:e6:f5:19:01:aa:35:cc:dd:f2:
         11:37:9e:ba:be:31:0f:ce:ea:5e:d4:10:17:60:f9:da:96:0f:
         a5:fc:d0:61:54:e8:b5:e6:de:0a:cc:a0:f8:dc:39:e2:4c:a6:
         f8:58:09:62:44:51:ab:98:87:75:16:70:67:88:c0:e8:c7:fa:
         8c:76:d3:7d:8c:dc:2d:f9:72:ca:ae:b4:7f:e9:22:19:88:92:
         94:0c:c7:69:60:37:cd:6f:b6:e9:b6:6b:3b:21:aa:bb:d8:d3:
         4f:a1:69:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:08 2023 by rpki-client on console-fra.rpki-client.org