Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer
File:                     53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer (raw, json)
Hash identifier:          vJkJhLhmjxN4H/vUd21MXqLCz5MnAk5KtH0ArHOfoDA=
Subject key identifier:   38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E483538AC78302A44D34C280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Thu 31 Jul 2025 19:06:39 +0000
Subordinate resources:    IP: 66.59.196.0/22
                          IP: 172.98.12.0/22

Validation:               Failed, certificate revoked on Wed 13 Dec 2023 18:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:53:8a:c7:83:02:a4:4d:34:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 31 19:06:39 2025 GMT
        Subject: CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:f5:73:7e:bf:94:c6:ac:d6:c3:68:5f:e6:
                    6b:b6:37:42:c5:04:ad:be:ac:fb:57:59:5b:09:42:
                    de:75:45:26:4f:db:17:56:8e:94:41:a0:5f:c0:a0:
                    d2:80:21:48:da:11:b7:fc:58:de:71:06:64:dc:8f:
                    ea:a0:94:73:3f:e1:fb:9e:66:5c:13:a7:04:37:94:
                    cb:49:b5:fd:bb:f9:86:6c:c5:cd:6e:22:56:19:20:
                    e1:0e:be:dd:0a:29:ae:d2:d2:71:69:be:02:d1:5d:
                    0f:57:1d:7b:8e:f8:0a:50:65:96:12:2d:25:70:49:
                    de:fa:02:ce:a2:ec:e7:60:fa:1b:a3:51:bd:85:a7:
                    35:6a:75:4d:a3:cb:2e:a4:11:61:e2:c1:ff:65:c9:
                    40:23:6c:b4:b1:d4:91:f3:e0:ce:01:ec:3e:6c:d4:
                    cb:7b:76:f6:30:85:91:13:2e:b5:1c:0b:f7:28:ce:
                    3c:1e:63:05:76:23:12:a2:0a:a1:c5:29:25:73:d3:
                    4e:bd:ba:65:e0:89:86:80:fe:09:1a:6d:63:12:ce:
                    2b:c8:84:04:3d:ae:8d:11:cf:7c:aa:33:ac:e3:f7:
                    9c:32:ec:28:cd:9b:34:b7:95:3a:c3:41:ce:64:77:
                    c2:7a:22:b0:ff:0d:c6:1c:98:4c:d0:9c:45:e5:62:
                    f2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.59.196.0/22
                  172.98.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:5d:23:30:3a:c1:ef:0b:a4:05:4b:cf:f2:b0:f4:be:34:a0:
         7f:21:ca:d9:a2:99:2e:45:8a:60:8f:3f:a6:cf:5e:43:7b:cd:
         cd:8c:bc:0c:4e:d7:5c:a6:e5:df:e6:35:e6:35:8b:61:bc:5f:
         3b:54:3f:c5:a4:3f:21:93:42:f5:df:6b:b0:0e:38:ae:ce:0f:
         8b:00:1e:46:bb:32:d1:f9:a4:10:cd:b5:30:c3:7b:71:eb:c4:
         c7:17:ae:9a:fe:18:66:d2:4a:2b:cc:63:fc:a1:82:ec:a3:7b:
         28:d6:1b:88:64:d6:f4:db:83:df:fa:cc:8e:01:6a:ef:ee:9d:
         23:3e:0e:89:9b:6c:2a:73:4e:74:3d:a3:9f:55:c7:85:a6:1e:
         fd:db:da:39:32:93:12:f9:c9:d5:a0:20:80:3a:72:f7:3b:94:
         6f:96:e0:54:94:73:3b:85:68:18:e5:04:de:c1:9d:8a:8f:ee:
         3e:07:3a:3a:ad:0d:a2:94:27:5f:d1:4d:5a:36:84:34:97:d4:
         45:6c:cd:64:6a:93:df:75:8c:ae:dc:0d:a5:e4:8e:a3:82:09:
         ef:b5:dd:c3:40:cb:59:45:89:11:c4:7f:45:75:5a:87:b9:46:
         64:77:21:a9:b9:4c:94:ed:30:ec:3c:2a:27:d4:76:93:29:f9:
         58:80:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:06 2024 by rpki-client on console-fra.rpki-client.org