Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348.cer
File:                     233e65fa-892f-427b-adc7-f23c951a8348.cer (raw, json)
Hash identifier:          8DBQ5Jy3kOk6flhsZaEjDixRRPJI4/pPvYf0lJzb2dc=
Subject key identifier:   17:6F:4E:9E:7D:39:DA:65:92:F0:3B:77:E6:F2:68:45:6B:D3:80:C6
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583DFB8A05C0BB77BB7E88469E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/233e65fa-892f-427b-adc7-f23c951a8348.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 22 May 2022 05:56:34 +0000
Certificate not after:    Sat 24 Aug 2024 05:56:34 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fb:8a:05:c0:bb:77:bb:7e:88:46:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 22 05:56:34 2022 GMT
            Not After : Aug 24 05:56:34 2024 GMT
        Subject: CN=233e65fa-892f-427b-adc7-f23c951a8348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:08:c8:53:d6:a0:5f:b5:c5:1a:6d:ed:ab:
                    d3:27:f3:f1:ac:9e:3f:fd:30:7d:a9:42:70:56:2e:
                    dc:98:37:a1:df:6e:1d:54:19:0b:d1:58:6e:02:e2:
                    a3:08:f8:f3:ae:e5:d2:58:b9:9a:61:75:0c:2f:d8:
                    dd:b1:c5:9a:c4:cd:c7:38:93:c2:36:40:f3:53:dc:
                    70:9d:a5:13:60:22:bc:f4:f2:5c:10:79:7a:51:f6:
                    09:82:a7:de:c6:ab:e0:cd:41:82:9e:d6:78:a8:e5:
                    72:25:9a:35:df:cf:7c:fa:9c:39:3a:dc:bf:f1:3a:
                    32:36:4e:64:70:21:29:b5:5b:7c:3d:25:79:b4:ea:
                    28:cf:25:ba:f3:94:7c:e1:74:3e:b5:22:f3:0e:56:
                    a9:46:2e:ff:3c:c8:8a:66:f4:58:08:a8:1a:cf:6b:
                    d7:45:b0:b1:63:23:b3:cd:a5:11:6a:f6:b3:76:be:
                    3b:8f:11:2b:7a:82:72:88:ab:18:4f:f4:d7:1d:3b:
                    39:81:e7:2c:8c:e1:f0:00:01:04:4d:2b:02:3e:b1:
                    16:44:4f:85:90:b8:68:95:b8:24:24:5f:60:3e:eb:
                    cd:ba:10:97:53:d5:45:02:95:dd:b0:8c:7c:0c:ec:
                    d5:ed:84:4f:79:62:46:25:e5:39:a5:23:96:c5:c6:
                    3e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6F:4E:9E:7D:39:DA:65:92:F0:3B:77:E6:F2:68:45:6B:D3:80:C6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/233e65fa-892f-427b-adc7-f23c951a8348.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b8:5b:85:7a:47:c9:c8:50:ff:f5:74:cf:9d:2b:0d:30:88:
         d1:b6:9d:b0:c0:62:ad:52:1a:e9:aa:ff:b8:55:0d:10:c3:3b:
         36:a1:9d:b1:b8:b3:36:f2:2f:6a:a6:73:d4:f4:95:fc:69:d0:
         57:61:73:6b:f4:65:74:aa:dc:5a:1a:d9:60:54:01:f3:73:24:
         95:14:2d:2f:16:75:82:8a:09:22:53:3a:26:dd:0e:d7:43:13:
         86:7a:51:28:f9:24:2c:44:d3:36:61:82:b4:bb:49:fd:9f:00:
         18:7f:cd:a1:ce:49:c3:56:d1:77:9a:62:dd:ab:47:bb:4a:d4:
         2b:8d:cc:46:a9:df:e7:b8:8d:60:6e:5f:24:44:79:33:3a:c2:
         08:30:09:63:94:0a:89:7a:f3:9b:30:98:0b:3d:8c:08:60:47:
         74:12:71:09:1a:4d:2b:a1:ae:79:c9:1b:5e:d5:17:9a:f9:df:
         54:26:0a:4b:f4:3f:33:26:23:6b:52:45:8b:ae:d5:02:14:b6:
         7f:a7:ea:d3:0a:89:2b:e8:27:16:9f:be:d3:23:d5:af:0d:6e:
         6b:92:52:d9:d7:fb:85:b6:f6:ca:d0:a9:5e:68:75:79:68:6c:
         86:49:af:a6:4f:1a:69:bb:44:f5:04:7a:c4:e7:be:d2:bf:fe:
         8a:5d:b6:14
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWD37igXAu3e7fohGnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIyMDUyMjA1NTYzNFoXDTI0MDgyNDA1NTYzNFowLzEtMCsGA1UEAxMk
MjMzZTY1ZmEtODkyZi00MjdiLWFkYzctZjIzYzk1MWE4MzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsogIyFPWoF+1xRpt7avTJ/PxrJ4//TB9qUJw
Vi7cmDeh324dVBkL0VhuAuKjCPjzruXSWLmaYXUML9jdscWaxM3HOJPCNkDzU9xw
naUTYCK89PJcEHl6UfYJgqfexqvgzUGCntZ4qOVyJZo13898+pw5Oty/8ToyNk5k
cCEptVt8PSV5tOoozyW685R84XQ+tSLzDlapRi7/PMiKZvRYCKgaz2vXRbCxYyOz
zaURavazdr47jxEreoJyiKsYT/TXHTs5gecsjOHwAAEETSsCPrEWRE+FkLholbgk
JF9gPuvNuhCXU9VFApXdsIx8DOzV7YRPeWJGJeU5pSOWxcY+7wIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFBdvTp59OdplkvA7d+byaEVr04DGMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y
MzNlNjVmYS04OTJmLTQyN2ItYWRjNy1mMjNjOTUxYTgzNDgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzIzM2U2NWZhLTg5MmYtNDI3Yi1h
ZGM3LWYyM2M5NTFhODM0OC8yMzNlNjVmYS04OTJmLTQyN2ItYWRjNy1mMjNjOTUx
YTgzNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAKVcJgwDgQCAAIwCAMGBCYC/DsAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYaYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjuFuFekfJyFD/9XTPnSsNMIjR
tp2wwGKtUhrpqv+4VQ0Qwzs2oZ2xuLM28i9qpnPU9JX8adBXYXNr9GV0qtxaGtlg
VAHzcySVFC0vFnWCigkiUzom3Q7XQxOGelEo+SQsRNM2YYK0u0n9nwAYf82hzknD
VtF3mmLdq0e7StQrjcxGqd/nuI1gbl8kRHkzOsIIMAljlAqJevObMJgLPYwIYEd0
EnEJGk0roa55yRte1Rea+d9UJgpL9D8zJiNrUkWLrtUCFLZ/p+rTCokr6CcWn77T
I9WvDW5rklLZ1/uFtvbK0KleaHV5aGyGSa+mTxppu0T1BHrE577Sv/6KXbYU
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:26 2023 by rpki-client on console-ams.rpki-client.org