Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bb7d36ce-781e-438a-a96a-361f84100a0d.cer
File:                     bb7d36ce-781e-438a-a96a-361f84100a0d.cer (raw, json)
Hash identifier:          V7tqCS6naWSU5Kvf2QfIX7uNq/qoNWiot6gNksxjoms=
Subject key identifier:   42:30:A5:DA:EE:1A:50:7C:19:C9:AE:F8:3B:36:D6:63:A9:62:3F:5A
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328583C81B7F452F0CB811675092100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bb7d36ce-781e-438a-a96a-361f84100a0d/bb7d36ce-781e-438a-a96a-361f84100a0d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bb7d36ce-781e-438a-a96a-361f84100a0d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 10 Dec 2020 15:47:25 +0000
Certificate not after:    Tue 10 Dec 2030 15:47:25 +0000
Subordinate resources:    AS: 31875
                          IP: 64.112.232.0/21
                          IP: 169.136.192.0/19
                          IP: 174.137.16.0/20
                          IP: 2606:2140::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:81:b7:f4:52:f0:cb:81:16:75:09:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Dec 10 15:47:25 2020 GMT
            Not After : Dec 10 15:47:25 2030 GMT
        Subject: CN=bb7d36ce-781e-438a-a96a-361f84100a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:76:59:8c:a9:83:a5:6c:62:d2:34:bd:0c:
                    9f:16:e4:ce:8f:31:25:aa:ce:3a:d1:4a:08:b0:fa:
                    e4:0f:7b:cf:d3:20:3e:f4:48:ea:5f:a4:94:8f:de:
                    16:f3:75:ca:ee:36:2d:39:e0:9d:b6:3c:3a:78:9c:
                    33:65:9a:d0:1b:e5:0c:aa:6c:fe:c2:d1:fc:b6:37:
                    22:b5:30:41:24:35:57:e4:11:61:ed:c0:79:36:ab:
                    ec:c2:dc:84:08:68:f9:b9:d0:57:95:4c:e1:95:40:
                    0c:ef:35:69:24:72:ea:5e:fd:45:e2:67:a5:1d:09:
                    41:dc:ab:9d:88:4d:4d:c2:9f:fb:6e:55:42:b3:67:
                    82:b3:32:11:d1:2d:a4:26:f0:09:cd:39:a8:70:b2:
                    aa:d7:d5:77:19:b8:32:a9:2c:7c:bf:1a:c8:40:e7:
                    00:28:c2:79:d1:68:87:58:c8:b6:36:d1:78:dd:49:
                    fd:24:27:71:c3:10:e8:c5:4d:d4:26:29:da:5c:31:
                    a5:5c:59:97:e8:c6:ee:7f:f8:b8:6a:dd:e5:a3:02:
                    71:fe:51:73:af:cb:fd:ab:e1:77:fa:dc:49:de:0e:
                    8b:41:43:12:ef:7b:9a:4c:86:56:c0:fa:2c:00:02:
                    08:bf:fd:66:b6:f8:3f:8e:a3:6e:91:c1:de:6d:e4:
                    c6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:30:A5:DA:EE:1A:50:7C:19:C9:AE:F8:3B:36:D6:63:A9:62:3F:5A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bb7d36ce-781e-438a-a96a-361f84100a0d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bb7d36ce-781e-438a-a96a-361f84100a0d/bb7d36ce-781e-438a-a96a-361f84100a0d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.232.0/21
                  169.136.192.0/19
                  174.137.16.0/20
                IPv6:
                  2606:2140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31875

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8f:54:27:df:6d:39:e9:be:37:82:b2:a4:93:b4:86:b1:80:
         d3:b8:d1:2c:c0:b6:5b:8a:3d:4e:bf:d2:ed:95:b3:95:c0:f2:
         f8:7c:a2:71:0b:b8:bf:57:3d:4c:67:6e:ab:b3:13:42:08:6f:
         da:7c:32:97:84:52:17:9e:36:04:6b:a6:70:7e:65:9e:ff:f1:
         47:ae:06:c1:4a:62:8e:68:33:7e:3c:5c:2e:0c:22:4f:c4:78:
         81:6c:7a:c6:aa:c7:30:e4:ca:5b:38:3e:2e:4d:d9:24:3a:04:
         a6:47:7b:8e:f9:fc:ed:b6:d6:01:0e:58:c4:10:e5:d5:d0:76:
         b4:62:ad:7d:a3:95:89:1c:1c:0e:68:90:8e:72:2a:33:47:c5:
         f3:d5:5a:7c:7d:5f:e3:e1:ff:61:63:f4:d7:1e:e7:e1:49:d8:
         5b:5c:4d:23:f5:04:5e:60:0f:33:08:92:b5:d8:a2:d2:46:ec:
         2c:64:ff:c0:4f:ad:c9:a0:00:f9:5c:b8:09:e2:af:d4:1e:1d:
         1d:e7:25:08:eb:58:6f:30:3b:b4:cd:ff:60:9d:9d:35:7f:8e:
         e4:b0:e9:ae:5a:6b:d4:8f:02:70:b2:d1:38:98:4a:2c:54:e7:
         eb:3a:56:f4:92:5f:59:e0:d0:20:8b:83:70:53:4c:44:be:4c:
         d8:ea:9d:17
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWDyBt/RS8MuBFnUJIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIwMTIxMDE1NDcyNVoXDTMwMTIxMDE1NDcyNVowLzEtMCsGA1UEAxMk
YmI3ZDM2Y2UtNzgxZS00MzhhLWE5NmEtMzYxZjg0MTAwYTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlix2WYypg6VsYtI0vQyfFuTOjzElqs460UoI
sPrkD3vP0yA+9EjqX6SUj94W83XK7jYtOeCdtjw6eJwzZZrQG+UMqmz+wtH8tjci
tTBBJDVX5BFh7cB5NqvswtyECGj5udBXlUzhlUAM7zVpJHLqXv1F4melHQlB3Kud
iE1Nwp/7blVCs2eCszIR0S2kJvAJzTmocLKq19V3GbgyqSx8vxrIQOcAKMJ50WiH
WMi2NtF43Un9JCdxwxDoxU3UJinaXDGlXFmX6Mbuf/i4at3lowJx/lFzr8v9q+F3
+txJ3g6LQUMS73uaTIZWwPosAAIIv/1mtvg/jqNukcHebeTGhwIDAQABo4IENTCC
BDEwHQYDVR0OBBYEFEIwpdruGlB8Gcmu+Ds21mOpYj9aMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i
YjdkMzZjZS03ODFlLTQzOGEtYTk2YS0zNjFmODQxMDBhMGQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2JiN2QzNmNlLTc4MWUtNDM4YS1h
OTZhLTM2MWY4NDEwMGEwZC9iYjdkMzZjZS03ODFlLTQzOGEtYTk2YS0zNjFmODQx
MDBhMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBANAcOgDBAWpiMADBASuiRAwDQQCAAIwBwMFACYG
IUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICfIMwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgY9UJ99tOem+
N4KypJO0hrGA07jRLMC2W4o9Tr/S7ZWzlcDy+HyicQu4v1c9TGduq7MTQghv2nwy
l4RSF542BGumcH5lnv/xR64GwUpijmgzfjxcLgwiT8R4gWx6xqrHMOTKWzg+Lk3Z
JDoEpkd7jvn87bbWAQ5YxBDl1dB2tGKtfaOViRwcDmiQjnIqM0fF89VafH1f4+H/
YWP01x7n4UnYW1xNI/UEXmAPMwiStdii0kbsLGT/wE+tyaAA+Vy4CeKv1B4dHecl
COtYbzA7tM3/YJ2dNX+O5LDprlpr1I8CcLLROJhKLFTn6zpW9JJfWeDQIIuDcFNM
RL5M2OqdFw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:21 2023 by rpki-client on console-fra.rpki-client.org