Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb13f87-d920-43ef-92a7-c95c8064da54.cer
File:                     3eb13f87-d920-43ef-92a7-c95c8064da54.cer (raw, json)
Hash identifier:          EKsv5gxLp+oSZIhJX4wOustZMnJsXtHSNJ2EGGLZgGE=
Subject key identifier:   38:4C:2A:B1:7F:B3:30:6A:07:4C:24:75:8C:6C:51:F7:C5:8D:B0:79
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E4833FA8F54DE93A04898F20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb13f87-d920-43ef-92a7-c95c8064da54/3eb13f87-d920-43ef-92a7-c95c8064da54.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb13f87-d920-43ef-92a7-c95c8064da54/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 16 Mar 2025 19:06:39 +0000
Subordinate resources:    IP: 45.42.214.0/23
                          IP: 161.129.180.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:3f:a8:f5:4d:e9:3a:04:89:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Mar 16 19:06:39 2025 GMT
        Subject: CN=3eb13f87-d920-43ef-92a7-c95c8064da54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:40:ee:14:9a:fd:4b:fa:93:74:bb:92:5a:cd:
                    f7:15:6e:f2:30:03:bc:e2:39:93:d7:06:bd:99:2b:
                    54:d6:e2:10:b9:6f:58:f3:c4:9d:50:38:d4:e7:51:
                    8d:49:53:3f:81:38:45:bb:6c:48:dd:79:93:d3:a4:
                    20:c0:ce:48:91:0a:9a:59:f3:65:7b:32:07:79:87:
                    db:b6:66:10:8c:dc:f9:10:c2:b5:62:3e:75:ba:41:
                    f1:9d:32:13:0a:37:c0:d6:a8:69:67:84:b8:38:fc:
                    79:53:d3:cf:d1:95:7a:74:80:cf:24:89:6c:ca:43:
                    fd:9d:66:c5:61:4b:01:60:bb:ee:f2:ab:e3:93:9e:
                    ce:24:20:1b:f8:14:d7:8b:00:52:90:d4:8d:74:57:
                    d4:1f:dc:b4:c5:ab:06:4d:a6:92:84:66:c2:76:ef:
                    52:fb:c5:41:7f:c1:bd:4c:6a:e1:ff:4c:b3:6e:c1:
                    00:a3:23:c8:61:c6:ee:c3:ff:40:e2:d1:c5:6e:d7:
                    b2:71:6a:cb:bb:af:cb:5f:45:5f:28:83:36:6b:99:
                    2f:a7:c7:24:72:12:28:e7:17:0a:3f:cd:ee:51:03:
                    d9:5e:27:29:3a:9e:f9:f6:27:99:09:78:26:54:0c:
                    9d:33:26:4b:1e:03:58:35:f5:1a:83:79:f6:65:a2:
                    fc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4C:2A:B1:7F:B3:30:6A:07:4C:24:75:8C:6C:51:F7:C5:8D:B0:79
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb13f87-d920-43ef-92a7-c95c8064da54/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb13f87-d920-43ef-92a7-c95c8064da54/3eb13f87-d920-43ef-92a7-c95c8064da54.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.214.0/23
                  161.129.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a5:86:fb:b1:a4:a7:3b:af:9f:63:23:e6:b7:a5:a9:0b:dd:
         dc:96:08:fd:7d:6d:13:a9:75:2a:2d:df:85:d2:c2:e8:0c:b9:
         3f:82:30:98:fc:6f:8c:ab:dc:f4:12:97:69:1e:27:d6:f2:82:
         53:77:7b:8d:a8:c5:03:ec:06:f7:86:07:ee:6b:96:e8:3f:0d:
         d1:cd:2b:e3:33:9b:45:5c:50:4b:02:48:19:28:44:1e:d1:a9:
         14:00:45:5b:b0:bf:52:4b:16:ea:71:17:11:4a:f3:94:d6:d2:
         13:03:30:fb:fa:cf:5b:3f:47:13:c6:5b:21:43:82:d9:19:53:
         ca:b4:4f:9b:01:a2:cc:96:7c:79:b4:3e:82:35:68:ac:b4:95:
         91:d4:a9:10:03:f1:26:0b:6d:25:78:72:3c:0c:3f:be:7a:b7:
         71:63:04:24:c7:70:0b:54:ba:c3:97:62:e1:b9:69:ff:43:72:
         1e:07:e5:49:8c:cf:4f:bf:98:3a:cd:27:34:5b:e9:c4:65:ae:
         e3:11:fd:16:ca:0d:47:fc:57:52:e6:f7:c8:a0:ca:e9:3c:82:
         e7:f6:b8:32:c1:e4:87:5e:70:91:ad:ad:a3:2d:d5:ca:48:1c:
         38:17:42:b2:ac:2d:6d:4b:30:0d:dc:f8:04:58:93:b0:10:eb:
         27:3e:6d:03
-----BEGIN CERTIFICATE-----
MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEHkgz+o9U3pOgSJjyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDMxNjE5MDYzOVowLzEtMCsGA1UEAxMk
M2ViMTNmODctZDkyMC00M2VmLTkyYTctYzk1YzgwNjRkYTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50DuFJr9S/qTdLuSWs33FW7yMAO84jmT1wa9
mStU1uIQuW9Y88SdUDjU51GNSVM/gThFu2xI3XmT06QgwM5IkQqaWfNlezIHeYfb
tmYQjNz5EMK1Yj51ukHxnTITCjfA1qhpZ4S4OPx5U9PP0ZV6dIDPJIlsykP9nWbF
YUsBYLvu8qvjk57OJCAb+BTXiwBSkNSNdFfUH9y0xasGTaaShGbCdu9S+8VBf8G9
TGrh/0yzbsEAoyPIYcbuw/9A4tHFbteycWrLu6/LX0VfKIM2a5kvp8ckchIo5xcK
P83uUQPZXicpOp759ieZCXgmVAydMyZLHgNYNfUag3n2ZaL8XQIDAQABo4IEBTCC
BAEwHQYDVR0OBBYEFDhMKrF/szBqB0wkdYxsUffFjbB5MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z
ZWIxM2Y4Ny1kOTIwLTQzZWYtOTJhNy1jOTVjODA2NGRhNTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzNlYjEzZjg3LWQ5MjAtNDNlZi05
MmE3LWM5NWM4MDY0ZGE1NC8zZWIxM2Y4Ny1kOTIwLTQzZWYtOTJhNy1jOTVjODA2
NGRhNTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBAEtKtYDBAKhgbQwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnKWG+7Gkpzuv
n2Mj5relqQvd3JYI/X1tE6l1Ki3fhdLC6Ay5P4IwmPxvjKvc9BKXaR4n1vKCU3d7
jajFA+wG94YH7muW6D8N0c0r4zObRVxQSwJIGShEHtGpFABFW7C/UksW6nEXEUrz
lNbSEwMw+/rPWz9HE8ZbIUOC2RlTyrRPmwGizJZ8ebQ+gjVorLSVkdSpEAPxJgtt
JXhyPAw/vnq3cWMEJMdwC1S6w5di4blp/0NyHgflSYzPT7+YOs0nNFvpxGWu4xH9
FsoNR/xXUub3yKDK6TyC5/a4MsHkh15wka2toy3VykgcOBdCsqwtbUswDdz4BFiT
sBDrJz5tAw==
-----END CERTIFICATE-----
Generated at Wed Dec 13 19:15:55 2023 by rpki-client on console-fra.rpki-client.org