Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/72a6b345-0c2c-4fc5-b172-e3bb39889ae5.cer
File:                     72a6b345-0c2c-4fc5-b172-e3bb39889ae5.cer (raw, json)
Hash identifier:          /f7Sf5KZh7Qfuju1F6Y2TVUHTzVoWwVaHxbCwiZmFlA=
Subject key identifier:   54:97:4D:89:78:FB:60:5F:FA:B4:76:07:10:16:B6:28:88:5F:EC:1C
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583F3DA4F03E1025FDEDB728AD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/72a6b345-0c2c-4fc5-b172-e3bb39889ae5/72a6b345-0c2c-4fc5-b172-e3bb39889ae5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/72a6b345-0c2c-4fc5-b172-e3bb39889ae5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 14 Sep 2022 15:01:05 +0000
Certificate not after:    Tue 17 Dec 2024 16:01:05 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3d:a4:f0:3e:10:25:fd:ed:b7:28:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 14 15:01:05 2022 GMT
            Not After : Dec 17 16:01:05 2024 GMT
        Subject: CN=72a6b345-0c2c-4fc5-b172-e3bb39889ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:22:79:8b:f5:25:d1:ae:6b:16:22:ad:54:
                    79:85:f8:03:94:ae:8d:93:80:73:f9:9e:9a:7c:66:
                    21:77:39:ba:29:8c:fa:f3:1f:e5:8c:86:b3:90:d3:
                    ff:d4:06:b6:69:09:b8:68:4d:87:42:5c:8e:6c:68:
                    f3:3f:f3:ab:ad:d0:5f:71:db:0b:a4:d7:1e:7d:40:
                    c9:bf:28:06:a1:fe:dd:ad:99:7f:49:7c:06:af:42:
                    b1:01:87:3b:9b:49:e7:b1:a0:18:b6:4c:18:6e:c8:
                    be:4e:cc:33:ce:85:0a:5a:77:4b:ed:41:da:1d:21:
                    95:fc:39:82:d4:82:85:be:ea:09:49:8b:a1:eb:0a:
                    92:eb:55:6c:07:d0:af:9c:71:90:ec:e3:fe:fa:34:
                    d1:1b:15:05:29:4d:99:01:9b:02:31:eb:59:6e:76:
                    06:60:e4:e2:59:59:72:ba:23:36:6d:55:dc:f7:ca:
                    37:01:56:45:a6:b0:4a:0f:59:7f:c4:e7:fe:e5:87:
                    1f:52:a8:0d:3a:9e:d7:f9:91:37:2e:16:ae:37:8e:
                    a1:60:84:26:3e:5e:06:81:e4:32:94:5d:aa:ea:86:
                    fd:f9:35:82:43:11:26:e7:be:91:83:ae:c8:7f:02:
                    8c:bd:f8:29:45:36:59:ef:ad:8b:6c:b8:e6:ec:60:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:97:4D:89:78:FB:60:5F:FA:B4:76:07:10:16:B6:28:88:5F:EC:1C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/72a6b345-0c2c-4fc5-b172-e3bb39889ae5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/72a6b345-0c2c-4fc5-b172-e3bb39889ae5/72a6b345-0c2c-4fc5-b172-e3bb39889ae5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:4a:b9:e9:3a:55:67:ce:d1:12:4c:5e:43:2b:59:79:72:
         9a:87:9e:13:2e:15:ca:2e:c0:11:d2:13:a0:3e:07:c3:ae:c8:
         a1:95:e0:40:97:63:10:3b:40:fb:e3:22:fd:20:c2:5f:55:3c:
         51:d1:dc:db:ec:cf:4e:7c:c9:82:c0:62:c7:a3:75:07:25:dc:
         12:e4:8e:a3:52:72:e2:9b:b0:47:63:63:3d:49:f0:df:1a:fc:
         54:a1:e7:8e:da:05:03:3d:70:de:78:7f:60:4c:af:4e:0d:3d:
         ea:ee:70:8a:a8:15:81:d1:ec:60:37:eb:bb:e4:ca:78:52:c2:
         1c:a4:0a:ff:de:3d:f3:d8:d3:d8:04:1d:84:48:7d:2f:e3:55:
         25:7e:db:c4:85:15:5f:74:49:3a:fb:bb:47:0f:08:bc:f4:51:
         8b:10:16:fe:06:88:db:e3:cb:59:63:82:13:39:27:a4:af:61:
         50:f8:49:e7:16:62:ab:4f:f0:bc:e5:45:73:8e:2f:f6:9d:cf:
         cb:86:b0:95:1d:30:4d:e2:c7:94:66:26:38:d5:90:13:63:d7:
         63:16:39:13:87:58:68:a4:b2:6a:2a:01:7b:e7:14:83:83:f6:
         45:df:12:f9:a8:20:b0:c3:20:95:aa:5f:66:48:1c:d0:c3:da:
         75:b2:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:36 2023 by rpki-client on console-fra.rpki-client.org