Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f71e7e2-b87f-43a9-bf80-68222a4113dc.cer
File:                     9f71e7e2-b87f-43a9-bf80-68222a4113dc.cer (raw, json)
Hash identifier:          +W6wItk//qwT2SmZrwrWp0DllquFcbke9yE6+HfLbm0=
Subject key identifier:   EE:5E:FC:00:CA:6D:C9:8F:C5:F9:2F:76:F6:BA:3A:E5:C4:A8:79:AF
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583C83EE54EEF988C6EC53A90F55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f71e7e2-b87f-43a9-bf80-68222a4113dc/9f71e7e2-b87f-43a9-bf80-68222a4113dc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f71e7e2-b87f-43a9-bf80-68222a4113dc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Aug 2021 14:01:15 +0000
Certificate not after:    Mon 04 Aug 2031 14:01:15 +0000
Subordinate resources:    AS: 399414
                          IP: 23.176.48.0/23
                          IP: 45.59.140.0/22
                          IP: 104.156.128.0/22
                          IP: 2606:3340::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:83:ee:54:ee:f9:88:c6:ec:53:a9:0f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug  4 14:01:15 2021 GMT
            Not After : Aug  4 14:01:15 2031 GMT
        Subject: CN=9f71e7e2-b87f-43a9-bf80-68222a4113dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:73:9b:e2:a3:3d:39:f7:db:e1:67:f8:2f:
                    62:8f:03:69:fd:e4:81:66:15:2b:1c:f2:c0:9b:91:
                    81:b4:28:b6:39:b1:c6:bd:dd:49:ed:2d:4d:62:88:
                    27:36:5a:fd:06:27:c0:74:77:6f:2f:c3:01:fa:da:
                    c9:12:e9:05:cb:d5:13:ea:15:1c:1c:68:be:13:fb:
                    3a:32:16:c4:83:44:7f:e5:b3:9b:ca:05:aa:a3:e5:
                    5b:89:27:69:57:83:83:27:c6:63:3b:17:9a:0e:d5:
                    0b:9f:da:b8:bf:98:dd:ae:71:b3:a4:74:40:2c:e2:
                    e6:02:3a:fa:25:a7:6f:31:b1:97:fe:be:5e:7d:e6:
                    5c:c7:ea:ce:ca:b7:fc:5a:9e:46:17:4c:68:0e:ff:
                    0a:f2:98:2a:5e:b0:27:6e:83:fc:4c:14:ab:95:40:
                    cf:18:19:9f:ec:04:0e:33:24:e4:dd:1a:19:45:36:
                    50:f3:74:35:e2:3b:4c:00:55:66:29:7f:75:b2:b4:
                    b1:4f:f9:f7:00:49:d8:8f:e9:67:c7:16:52:23:dc:
                    2f:4a:16:12:c4:30:60:b3:8a:6d:be:3a:c0:46:78:
                    b6:8a:9e:a6:c5:02:2e:45:83:b2:79:f2:ae:d8:48:
                    1c:9e:8e:54:43:66:7b:37:54:fc:fa:93:ed:69:a8:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5E:FC:00:CA:6D:C9:8F:C5:F9:2F:76:F6:BA:3A:E5:C4:A8:79:AF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f71e7e2-b87f-43a9-bf80-68222a4113dc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f71e7e2-b87f-43a9-bf80-68222a4113dc/9f71e7e2-b87f-43a9-bf80-68222a4113dc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.48.0/23
                  45.59.140.0/22
                  104.156.128.0/22
                IPv6:
                  2606:3340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399414

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:2a:99:4e:4a:5b:59:6f:a8:57:f8:a7:e5:3a:31:5b:76:a0:
         c5:f1:21:5b:38:71:0d:21:f2:4d:02:62:9a:41:a9:ff:ac:98:
         a8:89:9c:20:0f:40:52:89:fb:81:0a:79:4e:23:39:0c:14:c4:
         e3:ad:ad:4f:5c:96:77:58:b2:99:4f:a2:0a:89:ca:db:c1:08:
         94:9b:cb:53:ec:f1:42:ac:e1:0c:93:52:68:12:ac:65:14:47:
         17:3b:93:16:70:90:90:4d:71:3f:1b:5b:24:84:bf:5a:65:fa:
         0c:d9:a8:81:63:84:a4:ce:a7:ea:74:c8:c2:69:c2:a4:0d:a9:
         83:21:19:54:26:c1:a5:cd:2f:43:68:91:16:14:78:11:4a:61:
         7a:d6:d9:d4:be:1e:f5:88:65:9b:84:bd:6e:47:b5:2b:de:25:
         e4:cf:4d:7a:85:2d:9f:ea:d9:47:2c:5a:72:04:31:2e:53:8f:
         d0:80:64:5b:4b:8e:b0:22:55:71:18:a1:02:81:fb:44:ec:d5:
         38:17:c0:70:72:6e:71:18:6a:9d:a1:94:bd:52:54:bf:1a:6f:
         09:ba:e7:af:4b:c4:6a:db:4e:dc:d4:f2:c3:98:fd:21:41:3d:
         18:b4:46:28:9f:cc:64:ee:46:73:9a:1b:c2:b7:73:c2:9f:00:
         9e:9f:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:42 2023 by rpki-client on console-fra.rpki-client.org