Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
File:                     5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer (raw, json)
Hash identifier:          1d04bC0UXGSv9/GI/hVaRt969aS0przzOzNBuCzEC7w=
Subject key identifier:   74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority key identifier: 76:3B:BF:23:1B:94:08:C0:4E:3E:2C:75:02:98:47:59:CE:16:11:F3
Certificate issuer:       /CN=68f2b65f-cc48-4916-b9cc-cae90b49da7b
Certificate serial:       010D0C9F4328583FE065AE0C48653F537BD8A640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b.cer
Manifest:                 rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.mft
caRepository:             rsync://rpki.dataplane.org/repo/DATAPLANE/0
Notify URL:               https://rpki.dataplane.org/rrdp/notification.xml
Certificate not before:   Fri 11 Nov 2022 22:10:24 +0000
Certificate not after:    Thu 13 Feb 2025 22:10:24 +0000
Subordinate resources:    AS: 54728
                          AS: 399538
                          IP: 45.59.136.0/24
                          IP: 2606:3ec0::/32
                          IP: 2606:4a40::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e0:65:ae:0c:48:65:3f:53:7b:d8:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f2b65f-cc48-4916-b9cc-cae90b49da7b
        Validity
            Not Before: Nov 11 22:10:24 2022 GMT
            Not After : Feb 13 22:10:24 2025 GMT
        Subject: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:12:c8:9f:ca:8e:e9:cb:0e:e3:99:47:18:
                    53:ec:7a:32:fc:3f:6d:5d:b5:c4:56:28:1b:62:72:
                    6f:87:85:83:4b:17:16:ea:d2:8e:b4:61:86:46:a2:
                    c4:94:54:c8:f5:c4:5c:74:cd:b9:e9:68:a2:c6:c1:
                    b3:9f:0e:b1:f2:71:d6:ec:85:8c:96:78:d5:fb:b9:
                    a9:d1:d9:83:b1:04:90:0f:17:57:5a:c5:a6:04:70:
                    c7:b2:d5:cc:8c:2e:ac:e9:ed:ee:8a:40:1b:3f:6e:
                    47:a9:4c:12:5a:86:a1:6c:b4:77:29:17:1c:11:6e:
                    ed:10:95:83:09:06:8d:10:8f:36:ea:2d:a2:99:ec:
                    ea:27:71:23:50:88:53:0a:e8:59:46:c7:41:a6:69:
                    8b:b7:ed:3b:83:00:09:6c:f1:78:31:a5:39:56:b3:
                    1a:ec:dc:fb:ec:ef:26:69:db:86:d2:f0:4c:b0:82:
                    50:7f:7b:fe:21:19:5f:b6:bc:44:57:9a:d4:76:a4:
                    b1:c7:d1:69:cd:9a:16:80:bd:66:1a:ff:7e:4f:df:
                    4c:1b:80:14:ca:dc:68:3d:03:62:44:91:de:49:61:
                    64:d0:48:e6:44:f9:4d:b3:2c:0c:f2:8e:cc:55:5d:
                    ae:cd:d5:98:4a:69:5a:88:50:ed:25:9b:16:c6:6f:
                    53:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0
                RPKI Manifest - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.mft
                RPKI Notify - URI:https://rpki.dataplane.org/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/68f2b65f-cc48-4916-b9cc-cae90b49da7b.crl

            X509v3 Authority Key Identifier:
                keyid:76:3B:BF:23:1B:94:08:C0:4E:3E:2C:75:02:98:47:59:CE:16:11:F3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.136.0/24
                IPv6:
                  2606:3ec0::/32
                  2606:4a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54728
                  399538

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:78:59:b2:1f:6b:4d:a4:d4:09:2c:43:66:3d:1e:3d:ba:cb:
         1f:76:e6:ae:c6:87:e0:c7:d7:2f:e6:2e:60:3e:d1:53:72:4b:
         9a:2b:25:6e:22:26:db:fe:76:f9:61:af:a5:51:e3:59:ac:15:
         b6:8f:c5:32:c6:ab:c2:0c:48:72:e2:74:be:43:b8:0c:77:12:
         a4:ec:82:ce:3f:73:bc:c4:d2:12:99:87:f2:32:d2:bb:83:3c:
         b1:fc:87:c7:44:07:cc:b2:4a:38:af:d3:ae:5e:90:92:71:4d:
         7f:da:ac:cc:a1:d2:fa:b7:81:58:98:f3:14:a3:aa:cb:24:50:
         2a:9f:7e:eb:e6:58:d9:96:4d:19:7d:41:75:dc:69:a1:2e:19:
         c5:6f:a2:54:59:aa:c1:92:e2:03:d3:0f:4e:2a:10:de:4a:e8:
         07:70:a0:26:12:64:9f:97:80:f1:1e:d1:3e:ba:40:8b:77:e4:
         94:10:78:ec:b1:b5:df:6b:7c:d9:2f:8a:d5:cb:d5:d5:db:d5:
         5f:d1:8e:7f:1d:38:bc:c0:d3:e1:60:0d:87:4b:4b:8b:80:5c:
         04:20:90:6c:22:1b:ae:47:4d:7a:d9:8a:df:8a:2f:66:89:c5:
         e0:a0:c0:1a:e0:b8:2e:4d:10:19:f9:b4:07:58:9f:5e:7d:36:
         b5:54:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:36 2023 by rpki-client on console-fra.rpki-client.org