Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5cfbbc92-1d6b-41d7-83e2-4ad553755501.cer
File:                     5cfbbc92-1d6b-41d7-83e2-4ad553755501.cer (raw, json)
Hash identifier:          qu42Dn/dQCePalU15e2pxNYmKpmKsyelaW+cRXYWIdE=
Subject key identifier:   35:A2:90:78:FB:19:21:7E:A7:94:6F:FF:86:05:C8:68:CA:F6:42:C8
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858380E7D0A0F91A2FF746918CBF5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5cfbbc92-1d6b-41d7-83e2-4ad553755501/5cfbbc92-1d6b-41d7-83e2-4ad553755501.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5cfbbc92-1d6b-41d7-83e2-4ad553755501/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 24 Nov 2020 20:09:09 +0000
Certificate not after:    Sun 24 Nov 2030 20:09:09 +0000
Subordinate resources:    AS: 46811
                          AS: 396447
                          IP: 108.160.192.0/20
                          IP: 155.254.4.0/22
                          IP: 162.255.56.0/22
                          IP: 198.54.104.0/21
                          IP: 198.161.136.0/21
                          IP: 209.163.98.0/23
                          IP: 2606:e880::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:0e:7d:0a:0f:91:a2:ff:74:69:18:cb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Nov 24 20:09:09 2020 GMT
            Not After : Nov 24 20:09:09 2030 GMT
        Subject: CN=5cfbbc92-1d6b-41d7-83e2-4ad553755501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:fc:bb:2e:f5:75:7c:b4:5b:6b:91:52:1d:
                    a9:c7:67:a0:bc:ef:49:6e:07:e9:d9:d1:17:ac:c6:
                    7f:95:cb:83:5f:08:43:da:0e:cd:08:90:26:c0:01:
                    86:3e:9f:63:5c:d9:f9:55:99:e4:27:cf:3b:cb:50:
                    42:5e:d0:74:63:16:76:73:a4:fc:4d:0b:2b:bb:b1:
                    7a:c8:ff:03:5e:18:7b:63:88:4d:bb:61:d1:00:0b:
                    56:3c:6e:bf:e4:cf:86:a4:09:cf:34:9f:98:f0:19:
                    56:9a:60:6a:3e:7f:ca:31:46:d6:e8:34:73:e1:21:
                    09:db:b3:b9:26:42:20:d4:5d:25:79:1a:bb:8a:ac:
                    2d:8a:c0:a8:d4:ad:a3:a3:8f:8c:82:88:4f:26:8a:
                    75:be:e2:fd:a7:3e:33:e8:04:8a:82:42:09:1c:90:
                    d1:f6:b3:e1:ae:15:17:f0:96:bb:e8:7f:17:0d:a2:
                    9d:af:38:f0:42:e1:7c:8d:c0:2b:39:fb:fd:2f:e4:
                    d7:7f:a1:ff:61:65:31:dc:6a:be:f9:a7:17:4d:83:
                    9d:54:a0:6b:7f:94:f5:4e:f4:f5:6b:f3:d8:3e:29:
                    03:8e:c2:80:09:12:e0:c8:9c:93:a4:91:2c:81:c8:
                    0f:1e:56:7e:11:6e:45:6b:dc:55:24:16:09:08:f6:
                    bc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A2:90:78:FB:19:21:7E:A7:94:6F:FF:86:05:C8:68:CA:F6:42:C8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5cfbbc92-1d6b-41d7-83e2-4ad553755501/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5cfbbc92-1d6b-41d7-83e2-4ad553755501/5cfbbc92-1d6b-41d7-83e2-4ad553755501.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.160.192.0/20
                  155.254.4.0/22
                  162.255.56.0/22
                  198.54.104.0/21
                  198.161.136.0/21
                  209.163.98.0/23
                IPv6:
                  2606:e880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46811
                  396447

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f0:c2:c0:47:93:03:8a:7f:84:00:46:0b:56:a2:39:96:5f:
         91:b8:44:3e:29:13:72:b3:64:55:e7:b1:4c:ab:4a:42:24:48:
         41:02:71:fe:ba:93:2d:b9:dd:f7:6b:13:2b:c7:82:a2:07:f5:
         ac:74:55:ec:38:e5:96:1e:73:8c:43:f6:96:4e:43:59:df:12:
         dc:cb:0e:7e:60:9b:3d:b3:5e:aa:a5:d2:e8:1e:68:83:5a:4a:
         cc:55:57:a0:98:5d:6b:99:d2:d4:49:f1:cb:2b:24:02:ee:00:
         53:c5:f9:b6:00:c4:ce:7f:92:9f:1c:17:ff:b2:f8:e9:ff:51:
         d1:c3:05:bd:bd:b0:d7:7a:ce:2b:d0:07:a5:d5:f9:41:f4:f8:
         28:97:77:81:41:e6:c8:98:de:98:c5:14:2d:35:e8:97:8d:eb:
         cc:5f:71:14:f1:04:67:9d:28:0d:fc:3b:35:d8:db:05:89:7d:
         1c:5a:10:be:fe:a3:95:4a:e9:19:a6:7d:b2:52:43:fc:34:64:
         3d:cb:d6:72:a6:4a:24:6f:b5:55:97:fd:3a:02:0c:fb:74:a9:
         01:20:7e:d1:18:5e:8f:86:d5:b5:8e:ce:e9:80:9f:90:38:36:
         39:51:4a:d3:b8:e2:c5:23:8a:f0:54:33:9e:60:2d:45:8f:24:
         47:21:83:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:08 2023 by rpki-client on console-ams.rpki-client.org