Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer
File:                     66da5668-93e1-42c6-ade5-962632fe800a.cer (raw, json)
Hash identifier:          3iB5DQhdF20AiKRoG31GaBuf5/MbvzCyUv/srcXyCKg=
Subject key identifier:   17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858397E224170E4EED08A5E07A300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/66da5668-93e1-42c6-ade5-962632fe800a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 05 Apr 2021 12:43:42 +0000
Certificate not after:    Sat 05 Apr 2031 12:43:42 +0000
Subordinate resources:    IP: 2606:2cc0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:7e:22:41:70:e4:ee:d0:8a:5e:07:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Apr  5 12:43:42 2021 GMT
            Not After : Apr  5 12:43:42 2031 GMT
        Subject: CN=66da5668-93e1-42c6-ade5-962632fe800a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b4:49:5d:6a:c6:f2:c6:72:4a:4b:d4:28:b1:
                    ec:3f:f2:90:61:3a:5f:0e:68:6c:4c:a0:ef:f7:51:
                    99:e8:21:1f:b9:44:03:78:6b:d0:9b:37:1c:ea:e4:
                    f0:7a:93:d4:cb:f2:27:a6:19:ef:ea:03:b3:e1:27:
                    25:fd:48:01:08:65:35:fc:95:ea:c7:79:0d:a4:14:
                    cf:53:e7:ed:03:12:4a:55:f2:8b:50:57:e6:41:15:
                    c4:8e:b6:48:82:db:a4:d6:b9:37:0e:7a:03:5e:39:
                    9e:4a:4d:2f:77:d2:59:61:15:07:db:03:ca:d8:30:
                    a3:87:73:75:63:9f:2a:b9:45:27:38:20:bd:74:1d:
                    c4:ed:69:27:e0:04:c0:50:b3:f6:45:13:ea:0d:65:
                    4b:00:35:28:27:5f:99:9c:34:15:79:9c:db:88:1a:
                    4e:58:b0:df:59:3e:72:af:52:55:47:f8:74:da:36:
                    69:3b:02:7d:eb:4d:ff:0b:45:47:d3:e7:54:81:98:
                    4c:31:e0:17:f3:59:e6:78:a4:dc:3e:8f:3c:8e:36:
                    35:e4:00:0f:d5:bb:b7:53:73:c1:39:00:1d:cc:14:
                    c4:59:74:97:5d:2c:04:dd:17:77:fb:a9:cb:70:fb:
                    0b:e2:ce:6a:ed:24:4c:dc:1d:78:ee:3e:dc:a0:d4:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/66da5668-93e1-42c6-ade5-962632fe800a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:40:b7:4f:29:b6:02:92:a0:53:61:16:9e:de:3c:ae:b4:99:
         b4:2b:63:96:90:e9:af:ff:8d:13:01:bf:02:69:78:1f:65:03:
         bd:9d:38:3e:94:b9:4f:da:8f:3a:fe:8b:0a:35:00:99:88:02:
         fe:11:fe:eb:3e:47:75:b6:f3:04:fb:e4:7b:a9:e5:8e:67:71:
         1a:ba:a1:3d:a3:77:bc:92:10:12:8f:af:90:4e:fb:df:e0:97:
         6f:d8:ba:01:17:61:ea:90:85:6a:c6:ee:07:7f:87:e1:b7:80:
         ee:f9:71:c2:a6:55:4c:f1:8a:a5:81:e2:54:43:25:f4:dd:6d:
         8b:f0:c2:a1:b2:f8:1e:28:96:d6:be:eb:ab:bc:b7:ce:ff:2f:
         d8:0b:be:e2:3c:8a:bf:d7:56:04:38:43:15:93:0a:16:52:66:
         69:d5:f2:a3:ad:27:67:4f:c1:9a:92:e7:f0:2e:4b:37:df:ab:
         fe:45:5e:7f:ca:60:f3:9d:05:2f:dd:75:6b:b7:fb:fc:d8:1a:
         bc:be:d3:19:9b:8a:65:c2:7f:71:df:40:76:87:e8:d2:13:f9:
         a1:ea:87:1c:ca:64:c9:39:39:cf:27:97:ab:b7:79:b1:0c:e0:
         41:2a:74:d8:58:55:77:8f:01:cc:23:1d:1a:c8:95:d9:c3:c2:
         cc:f3:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:35 2023 by rpki-client on console-fra.rpki-client.org