Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ba5ea1b-fb59-460c-8aa0-7e9955eef828.cer
File:                     5ba5ea1b-fb59-460c-8aa0-7e9955eef828.cer (raw, json)
Hash identifier:          3u1eJqMVTOk8jt8ywsi/nAMJHv/jlhMjCHmVItejq3Q=
Subject key identifier:   59:83:C8:38:37:3A:43:9C:8A:3B:11:60:41:74:84:B1:47:B7:82:51
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328583B18CBB17EB42D2C5A16998E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ba5ea1b-fb59-460c-8aa0-7e9955eef828/5ba5ea1b-fb59-460c-8aa0-7e9955eef828.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ba5ea1b-fb59-460c-8aa0-7e9955eef828/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jun 2020 12:49:06 +0000
Certificate not after:    Mon 10 Jun 2030 12:49:06 +0000
Subordinate resources:    IP: 2620:65:e000::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:18:cb:b1:7e:b4:2d:2c:5a:16:99:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jun 10 12:49:06 2020 GMT
            Not After : Jun 10 12:49:06 2030 GMT
        Subject: CN=5ba5ea1b-fb59-460c-8aa0-7e9955eef828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:cc:48:4c:6b:3e:a5:ba:ad:10:d7:3c:9e:
                    f8:b1:d6:cb:0c:af:9a:d3:ee:9e:e0:ea:a8:84:50:
                    f8:61:ef:e7:93:58:7c:0f:7d:fc:9e:ca:a4:52:f2:
                    c6:85:0b:8d:01:59:b0:97:96:7c:d2:f1:5d:4c:9b:
                    37:ba:05:0b:82:a8:bf:ce:ac:87:82:c3:50:e2:61:
                    c9:e6:90:a4:ed:c6:12:6e:a3:62:b3:69:d9:5a:c1:
                    54:5b:9e:2f:e5:72:dd:78:e0:c7:09:e6:7e:f4:19:
                    3e:99:02:ea:3b:03:8e:01:d7:1d:c5:3a:a9:c5:93:
                    b8:ab:58:f6:f8:f1:74:4d:c6:da:b3:3c:d9:43:d5:
                    25:27:cf:29:54:67:95:f7:f8:c8:cd:25:74:dd:a6:
                    01:96:8b:f3:cc:2f:c1:c1:5b:e8:47:e9:ad:ef:4c:
                    58:e3:fb:76:fd:0e:85:f2:d1:36:0a:b3:18:55:1b:
                    bc:b4:7e:7f:f1:70:2a:85:df:41:94:71:be:f3:c4:
                    de:cb:c9:f1:7c:3a:0b:85:f8:83:25:90:79:4d:52:
                    99:4b:bb:b5:3f:ea:2f:73:e0:73:1d:fd:aa:46:cf:
                    50:ce:36:05:87:3e:c3:51:b4:9c:52:09:68:0f:e6:
                    98:35:37:e0:25:13:b8:b9:f6:bb:1c:df:d1:c9:68:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:83:C8:38:37:3A:43:9C:8A:3B:11:60:41:74:84:B1:47:B7:82:51
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ba5ea1b-fb59-460c-8aa0-7e9955eef828/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ba5ea1b-fb59-460c-8aa0-7e9955eef828/5ba5ea1b-fb59-460c-8aa0-7e9955eef828.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:65:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:e5:6e:d1:80:ca:cc:99:ef:af:5e:4d:5e:80:d5:1e:a0:08:
         7f:47:5c:c5:51:5d:48:98:60:c2:f7:91:da:46:86:af:c8:9e:
         ce:e6:6d:c9:aa:09:8f:0b:63:a9:1a:25:1f:2c:03:50:ff:fc:
         d4:1a:f8:66:8f:fc:67:c8:4d:85:f9:c9:45:e9:1b:37:05:9a:
         f7:de:78:eb:9d:57:48:40:72:6f:e2:4b:31:c7:fc:5c:56:10:
         d4:96:90:49:df:80:1a:a9:68:4b:87:17:0d:c1:13:0f:ae:c6:
         31:29:4b:40:79:d6:96:d6:89:f3:6c:88:bc:2f:cc:f6:e8:d5:
         70:8c:05:5b:9b:84:3f:96:cc:69:8f:4f:ae:0e:a4:81:30:76:
         64:bb:c0:cb:05:61:5e:4c:d4:a8:52:1d:aa:2c:7c:6a:0d:db:
         ed:14:02:7c:37:d8:d5:c2:51:e0:60:14:b2:fd:68:89:4c:ca:
         f6:6b:2b:6c:71:c1:a3:82:a4:d6:8a:23:45:f5:17:b0:d0:8e:
         c2:73:30:b7:ba:62:c9:b8:55:b0:01:97:bb:86:08:7e:61:46:
         ec:ff:be:ca:73:5d:41:19:4d:13:41:89:b9:1d:02:b1:c6:51:
         2e:a9:f9:1a:d5:97:16:f6:c4:51:0a:fa:1d:f9:82:49:81:7f:
         15:9a:67:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:08 2023 by rpki-client on console-ams.rpki-client.org