Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606.cer
File:                     0afacf20-2411-4ca3-ba34-f7e297cdb606.cer (raw, json)
Hash identifier:          l6KzbbtSKZWk0lVe/5KZNg1JzqhRLueBURseOUBtQbs=
Subject key identifier:   72:01:4A:0C:67:9C:38:7B:C2:A5:09:3A:83:77:F4:80:A8:01:24:EE
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583D8A1AB6DEAF0DB41EECE16100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/0afacf20-2411-4ca3-ba34-f7e297cdb606.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 08 Jan 2021 15:30:42 +0000
Certificate not after:    Wed 08 Jan 2031 15:30:42 +0000
Subordinate resources:    IP: 23.130.136.0/22
                          IP: 172.99.232.0/23
                          IP: 204.10.192.0/22
                          IP: 2602:fcd3::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8a:1a:b6:de:af:0d:b4:1e:ec:e1:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan  8 15:30:42 2021 GMT
            Not After : Jan  8 15:30:42 2031 GMT
        Subject: CN=0afacf20-2411-4ca3-ba34-f7e297cdb606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:26:83:90:a1:d0:a1:ad:60:db:c7:64:fd:20:
                    49:b8:05:1c:c7:42:ed:df:90:ee:08:9a:02:49:2e:
                    99:79:f7:80:83:9f:3c:a0:08:55:13:70:a6:07:12:
                    92:78:e4:7c:be:2f:a9:17:15:2f:8f:14:c6:a0:4a:
                    4f:f7:29:fe:c1:c5:e3:0b:84:fb:cc:c9:7f:35:bd:
                    f9:78:b1:2c:b0:60:50:c3:94:de:e3:eb:5d:64:16:
                    d9:4e:14:41:5f:a2:68:f4:eb:34:72:cd:b1:87:49:
                    a5:56:89:ea:64:e5:79:d5:34:f3:42:fc:4a:6a:88:
                    89:ab:07:8e:40:d5:f7:2d:d2:fc:0b:87:39:94:3a:
                    b4:b9:6c:d5:69:e2:55:8c:1c:3e:1a:b3:41:ff:5c:
                    b8:60:16:77:ab:18:74:b9:2e:53:86:c4:de:1b:d2:
                    29:2f:af:69:5b:eb:d8:01:2c:e6:88:a5:d5:37:f2:
                    ec:e3:24:28:f8:14:b6:3d:6b:b6:28:a0:a3:85:f1:
                    97:1e:86:40:f6:60:46:09:d7:aa:89:f3:21:1c:05:
                    63:2d:6b:bd:d8:85:3d:a6:2c:72:60:ab:f3:c5:72:
                    18:8f:09:1a:84:33:fb:52:2c:83:b5:79:85:39:6a:
                    50:af:76:f0:0d:df:5a:e4:50:96:e7:fa:12:16:8b:
                    ac:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:01:4A:0C:67:9C:38:7B:C2:A5:09:3A:83:77:F4:80:A8:01:24:EE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/0afacf20-2411-4ca3-ba34-f7e297cdb606.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.136.0/22
                  172.99.232.0/23
                  204.10.192.0/22
                IPv6:
                  2602:fcd3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:1e:4d:ad:52:ff:b1:4f:e1:df:ca:8a:5f:36:d4:e4:2d:ce:
         8e:7f:d9:89:e3:24:85:be:e3:5d:48:ad:88:96:42:3c:78:f4:
         67:db:cc:99:02:1a:f9:4c:ac:5e:bf:05:ed:c2:f7:fb:58:fc:
         ea:c8:c9:d7:f1:91:9b:f3:31:65:e6:3b:6e:6d:59:93:63:91:
         65:ef:fa:8f:7c:49:72:eb:e4:ff:04:8e:63:d9:ae:91:c0:27:
         28:f7:c5:33:cc:19:eb:8d:9e:bc:ec:a5:27:4c:b6:f5:27:ac:
         e1:d5:65:a5:61:00:15:3f:28:31:d1:d0:c5:86:85:8e:7d:52:
         36:d7:84:b0:5f:95:11:fc:ba:60:c3:cc:83:e4:2b:d8:d3:11:
         3d:35:7d:6d:6c:42:b2:46:09:29:98:83:07:23:7f:30:2f:b5:
         e1:69:20:c1:d3:3b:72:a5:e6:1a:2c:a3:a7:55:bb:df:28:ed:
         c3:a9:a8:d1:34:28:9f:ef:8d:55:59:de:a8:4d:4f:59:10:5d:
         99:f6:ba:f6:7b:e2:30:73:ce:24:1f:23:61:fa:12:5f:81:78:
         d4:1d:cf:2a:2f:0c:23:f2:07:a9:1e:de:a0:de:55:3d:9b:4f:
         f2:7f:37:6f:ac:cb:1f:38:d9:7f:53:f2:c2:34:08:16:51:22:
         10:40:05:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:31 2023 by rpki-client on console-fra.rpki-client.org