Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
File:                     a4994aff-79e3-4800-875a-f4a951d7af28.cer (raw, json)
Hash identifier:          3nxz+VMbYBXMoAhztb4Jb15ZYJh0GGZ8Fhdfc57Ft/c=
Subject key identifier:   4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E4834E4B71C32F73D5D1EA00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Wed 25 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 19039
                          IP: 162.217.24.0/21
                          IP: 199.68.216.0/22
                          IP: 199.101.168.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4e:4b:71:c3:2f:73:d5:d1:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 25 19:06:39 2025 GMT
        Subject: CN=a4994aff-79e3-4800-875a-f4a951d7af28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3e:2e:43:eb:5f:86:4d:5a:a8:12:a7:48:2a:
                    e6:f9:0c:48:4c:d5:30:db:15:c7:a0:23:be:d9:d1:
                    87:6e:35:09:91:66:b0:58:db:33:91:99:ac:d5:91:
                    a7:86:7a:39:05:41:e5:59:05:61:09:d2:2b:64:1d:
                    cf:b5:d5:2a:9b:86:a9:03:f2:70:67:46:7d:4f:7c:
                    79:27:50:bd:66:d1:18:c8:f4:18:ed:60:9d:f2:7e:
                    d1:14:3c:ed:a1:84:0a:8b:fa:37:3a:93:41:5d:3e:
                    10:b7:af:1b:df:a2:fb:3c:2a:71:9a:f2:09:6d:b9:
                    d3:3a:17:c5:13:a1:0a:13:a0:ce:63:f0:1a:f9:13:
                    c1:1d:e5:59:e2:c0:9f:d7:e2:98:12:8c:14:6b:46:
                    76:e8:0c:5c:1c:f9:0f:4c:fd:8c:69:af:be:3d:c1:
                    72:23:1d:54:11:55:1b:de:9a:3d:43:2f:18:08:a2:
                    1d:b1:f1:f2:64:bf:56:86:a6:e5:3a:d3:6c:1d:93:
                    81:4e:ee:71:ae:c3:29:39:7d:01:f9:ed:c8:73:f4:
                    df:83:88:49:00:6f:3a:06:04:f7:0b:93:59:b9:6e:
                    ff:c7:74:00:58:0e:15:b3:cd:96:83:cd:04:f6:c6:
                    a1:d6:2c:c4:cb:c3:9d:af:1f:17:f8:fd:60:c5:a9:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.24.0/21
                  199.68.216.0/22
                  199.101.168.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19039

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:63:bd:f0:50:11:1f:af:2d:2e:7a:22:0e:7c:ee:3e:37:81:
         23:99:6b:36:b6:42:47:fe:64:09:6b:92:68:71:b5:30:6d:e0:
         fa:34:7d:52:a1:3e:93:dd:0e:12:bf:27:b0:dc:02:09:a2:be:
         fd:ac:97:7f:21:7d:e0:ae:3e:fc:5f:08:e2:91:69:f1:56:76:
         81:6b:b1:a1:3b:72:d4:a8:d7:e5:f7:cd:39:4d:ec:5c:d6:cc:
         e5:7c:f9:f0:d7:82:8f:a9:ac:9c:c8:ef:d5:e7:0a:5c:8e:be:
         97:59:78:6b:bb:f5:c8:0a:36:a8:fb:1b:4d:1f:14:81:0a:91:
         a9:e5:8a:ea:8b:31:9a:46:d0:59:2a:87:72:42:ed:88:0d:15:
         b4:06:1d:9d:68:9c:4e:c9:16:2e:aa:eb:79:ad:ff:f0:7e:d4:
         d0:38:26:48:09:2c:d5:8e:86:d7:ac:e5:27:85:bb:81:f6:ba:
         1b:59:ed:38:ec:b2:fa:7d:4a:09:00:f4:6e:d2:05:ca:63:e1:
         a1:f9:93:f5:c7:b8:fc:de:2c:47:c3:4d:b9:49:1e:01:9e:33:
         22:80:41:84:21:f2:8b:be:20:cd:41:76:b7:de:3f:f5:dc:dd:
         1a:71:08:6c:4d:60:9f:72:c0:f5:bc:97:84:34:1d:32:07:6f:
         6f:51:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 12:58:14 2023 by rpki-client on console-fra.rpki-client.org