Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397e65b3-25ee-4351-afff-5f34fe35c2e6.cer
File:                     397e65b3-25ee-4351-afff-5f34fe35c2e6.cer (raw, json)
Hash identifier:          R2BCdhXZsGfpIq4LDY5XW228wM2HRzB11/guSElMl2o=
Subject key identifier:   D9:EF:51:78:D6:4C:46:4B:F3:28:78:53:A2:D0:C5:BC:C1:87:34:D4
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583B7D9C3A740ED35B7B0F78EB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397e65b3-25ee-4351-afff-5f34fe35c2e6/397e65b3-25ee-4351-afff-5f34fe35c2e6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397e65b3-25ee-4351-afff-5f34fe35c2e6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Aug 2021 14:04:15 +0000
Certificate not after:    Mon 04 Aug 2031 14:04:15 +0000
Subordinate resources:    AS: 399905
                          IP: 23.185.144.0/24
                          IP: 165.140.224.0/22
                          IP: 2602:fc49::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:7d:9c:3a:74:0e:d3:5b:7b:0f:78:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug  4 14:04:15 2021 GMT
            Not After : Aug  4 14:04:15 2031 GMT
        Subject: CN=397e65b3-25ee-4351-afff-5f34fe35c2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d3:c3:2e:80:d0:ae:d2:83:6f:7b:ca:3f:2c:
                    66:ad:19:66:2b:7a:6f:71:da:9c:5a:60:07:7c:96:
                    72:d0:f8:9d:ca:f3:0b:59:07:04:be:6e:a2:73:a1:
                    a2:51:fc:54:91:5b:f2:a8:34:6a:a9:2d:ca:51:26:
                    49:d9:a9:3c:d3:b9:d3:46:1c:9f:68:16:8b:2c:ff:
                    dd:39:79:fa:1c:97:57:82:e4:fa:02:6d:49:02:5c:
                    24:83:f5:ed:99:15:82:65:7d:a9:38:eb:2a:9b:b2:
                    83:07:06:b9:f9:96:c3:58:04:0a:79:ab:38:ea:2b:
                    06:34:4c:cb:d8:9f:d3:86:2d:4d:4e:ea:b1:a6:34:
                    c3:40:cd:b4:60:31:ca:26:2a:22:1d:c7:68:47:a2:
                    af:ab:2a:8a:26:56:68:4c:4e:45:41:68:a2:9f:7b:
                    44:8b:6d:7d:70:3f:7c:d3:e7:5a:a5:12:6c:54:a7:
                    48:19:bc:6d:e7:3a:d1:bc:17:62:49:da:05:21:62:
                    b4:4c:38:b4:af:6b:3f:66:04:e1:74:3d:ea:6e:dd:
                    ee:68:ff:c4:93:db:2b:17:73:9b:00:c4:b8:29:64:
                    84:5a:f5:9a:8f:e1:e0:00:9e:5c:85:47:90:fc:a6:
                    a9:4d:b2:de:43:12:1f:7a:11:f9:ae:34:f1:84:84:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EF:51:78:D6:4C:46:4B:F3:28:78:53:A2:D0:C5:BC:C1:87:34:D4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397e65b3-25ee-4351-afff-5f34fe35c2e6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397e65b3-25ee-4351-afff-5f34fe35c2e6/397e65b3-25ee-4351-afff-5f34fe35c2e6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.144.0/24
                  165.140.224.0/22
                IPv6:
                  2602:fc49::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399905

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:69:6d:b1:6e:e3:08:e5:dc:10:d4:f3:73:6c:f8:9f:9f:ff:
         eb:06:21:45:28:f3:98:da:f2:c1:7c:a6:2f:b9:4f:28:03:eb:
         ec:a9:9b:ac:74:80:bd:e7:61:5d:d2:e0:28:aa:b4:4d:d0:14:
         c9:b1:ce:3d:54:68:70:ae:a2:ef:47:77:37:94:b9:6e:8a:0b:
         22:98:9e:5b:34:aa:cc:fe:1d:a8:84:36:92:8c:0a:b3:25:1a:
         13:d5:9e:f7:ea:18:4a:04:08:8e:59:c3:b1:1b:1b:0e:f4:3e:
         f2:02:bf:17:f5:12:99:e8:eb:a6:2b:30:e6:76:ba:c7:dc:52:
         7e:d3:1f:b8:68:ae:1b:3a:0c:5f:29:bf:aa:84:08:49:58:32:
         18:6e:99:d5:da:7c:f5:0f:90:eb:55:d0:ac:0f:eb:10:47:58:
         0f:62:a1:33:21:66:73:81:1d:1d:e6:ee:4b:10:de:d2:58:37:
         e1:e2:cf:d5:10:e7:03:e7:fa:c1:1f:3c:83:02:19:f2:13:44:
         b4:4f:07:0d:f6:e3:ee:ce:b8:62:f3:96:f7:c3:09:77:a3:b4:
         22:c5:25:89:b4:48:1c:16:f3:6c:26:48:26:85:38:21:0a:78:
         c1:db:c7:41:b5:18:b9:25:6f:16:a6:85:1f:c3:2f:99:42:02:
         71:b1:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:34 2023 by rpki-client on console-fra.rpki-client.org