Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5a5671e-8027-4e87-8aff-3d4fe69627df.cer
File:                     a5a5671e-8027-4e87-8aff-3d4fe69627df.cer (raw, json)
Hash identifier:          RglkYNOWRw49qRMSsf4QT35MKIKtckQGKIo2ux9rGn8=
Subject key identifier:   40:89:CF:8E:2D:12:D7:25:C5:B5:08:92:F9:33:1A:24:D4:ED:38:41
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285839876B0F0DF8CF1D50C6E9F5A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5a5671e-8027-4e87-8aff-3d4fe69627df/a5a5671e-8027-4e87-8aff-3d4fe69627df.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5a5671e-8027-4e87-8aff-3d4fe69627df/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 24 Mar 2021 13:41:53 +0000
Certificate not after:    Mon 24 Mar 2031 13:41:53 +0000
Subordinate resources:    AS: 399306
                          IP: 23.177.16.0/24
                          IP: 209.209.73.0/24
                          IP: 2602:fcb1::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:87:6b:0f:0d:f8:cf:1d:50:c6:e9:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Mar 24 13:41:53 2021 GMT
            Not After : Mar 24 13:41:53 2031 GMT
        Subject: CN=a5a5671e-8027-4e87-8aff-3d4fe69627df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:5c:f3:3a:5b:8b:6d:93:be:24:d3:0e:45:
                    ad:24:37:fd:5c:9c:d0:a5:05:8d:ce:f6:ee:43:88:
                    f4:67:a4:12:45:e5:14:43:b1:db:da:eb:80:c2:cb:
                    dd:0b:5a:37:4d:a8:63:83:38:6c:90:9b:dd:68:6f:
                    ba:1f:d6:d2:67:aa:20:31:cb:d8:05:a3:34:18:35:
                    14:41:87:1c:c8:1c:0f:9c:47:e4:ba:49:38:35:ce:
                    3e:15:d8:9d:04:19:27:cc:11:92:40:f2:87:f3:de:
                    0a:e3:a1:92:80:ce:23:0e:e4:45:c9:c8:ec:e5:fd:
                    df:3a:1f:fc:b2:9d:16:a1:3f:bf:cb:b3:f7:57:5e:
                    80:2a:c2:ad:d0:c2:c5:de:40:0a:3e:b5:70:30:d5:
                    52:6a:57:e6:80:0b:f6:89:08:cc:f5:29:97:83:1f:
                    b9:e4:a6:bf:01:71:e9:e6:94:44:09:f3:a3:90:98:
                    36:ba:9a:24:1c:2c:dc:5f:d3:d9:d0:81:fa:82:2f:
                    1d:5e:f3:d8:58:aa:da:e3:d3:58:de:03:df:10:a1:
                    7e:45:09:ea:b7:57:c5:48:bc:cf:8a:dd:61:c9:b3:
                    15:8d:05:41:6a:43:53:33:23:ff:6f:46:93:82:0f:
                    d3:10:d4:6f:83:78:bc:11:1a:73:9e:05:57:28:75:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:89:CF:8E:2D:12:D7:25:C5:B5:08:92:F9:33:1A:24:D4:ED:38:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5a5671e-8027-4e87-8aff-3d4fe69627df/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5a5671e-8027-4e87-8aff-3d4fe69627df/a5a5671e-8027-4e87-8aff-3d4fe69627df.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.16.0/24
                  209.209.73.0/24
                IPv6:
                  2602:fcb1::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399306

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:56:82:d7:3f:42:ee:87:84:bc:39:22:23:fd:96:5b:b2:85:
         66:3f:bf:43:86:08:8a:7c:59:68:fd:a7:45:79:95:52:14:95:
         85:7f:66:34:eb:53:dc:24:fe:b2:2b:9a:2a:51:e4:bc:bc:e8:
         86:9d:d6:c1:62:f2:63:1d:de:70:a0:e0:3b:5b:b0:d9:77:74:
         56:22:43:31:03:c2:6e:b2:f4:2f:d5:93:ba:8a:eb:15:71:b9:
         02:6a:44:16:cb:e5:29:23:d0:53:09:df:7a:c6:3f:a3:a2:b5:
         cf:eb:95:00:18:4c:6f:4a:13:8c:a0:36:00:6c:b7:bf:2a:10:
         7f:a0:a1:da:23:16:2b:13:f5:14:59:47:99:c5:a0:a3:ae:7b:
         24:26:8e:be:26:af:61:c5:fd:6c:a3:60:05:a8:12:8d:66:8f:
         89:9d:2c:f1:72:34:fa:9b:83:f1:58:86:c7:98:44:48:2d:f3:
         a3:d1:4e:99:0e:24:99:97:61:34:1b:b4:ff:0d:ad:c5:c1:f9:
         a6:7c:27:08:13:c1:f7:95:5a:08:49:0e:ab:b0:5f:e1:7d:ed:
         33:b2:f8:61:6d:e0:aa:12:81:ad:19:0a:a8:ce:5a:62:50:ea:
         ac:03:1b:9e:1b:54:27:b1:de:0e:b4:d7:9d:3b:1b:76:9f:5e:
         8f:7f:48:38
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWDmHaw8N+M8dUMbp9aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIxMDMyNDEzNDE1M1oXDTMxMDMyNDEzNDE1M1owLzEtMCsGA1UEAxMk
YTVhNTY3MWUtODAyNy00ZTg3LThhZmYtM2Q0ZmU2OTYyN2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkJc8zpbi22TviTTDkWtJDf9XJzQpQWNzvbu
Q4j0Z6QSReUUQ7Hb2uuAwsvdC1o3TahjgzhskJvdaG+6H9bSZ6ogMcvYBaM0GDUU
QYccyBwPnEfkukk4Nc4+FdidBBknzBGSQPKH894K46GSgM4jDuRFycjs5f3fOh/8
sp0WoT+/y7P3V16AKsKt0MLF3kAKPrVwMNVSalfmgAv2iQjM9SmXgx+55Ka/AXHp
5pRECfOjkJg2upokHCzcX9PZ0IH6gi8dXvPYWKra49NY3gPfEKF+RQnqt1fFSLzP
it1hybMVjQVBakNTMyP/b0aTgg/TENRvg3i8ERpzngVXKHVWmQIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFECJz44tEtclxbUIkvkzGiTU7ThBMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9h
NWE1NjcxZS04MDI3LTRlODctOGFmZi0zZDRmZTY5NjI3ZGYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2E1YTU2NzFlLTgwMjctNGU4Ny04
YWZmLTNkNGZlNjk2MjdkZi9hNWE1NjcxZS04MDI3LTRlODctOGFmZi0zZDRmZTY5
NjI3ZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXsRADBADR0UkwDgQCAAIwCAMGBCYC/LEAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYXyjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoVoLXP0Luh4S8OSIj
/ZZbsoVmP79DhgiKfFlo/adFeZVSFJWFf2Y061PcJP6yK5oqUeS8vOiGndbBYvJj
Hd5woOA7W7DZd3RWIkMxA8JusvQv1ZO6iusVcbkCakQWy+UpI9BTCd96xj+jorXP
65UAGExvShOMoDYAbLe/KhB/oKHaIxYrE/UUWUeZxaCjrnskJo6+Jq9hxf1so2AF
qBKNZo+JnSzxcjT6m4PxWIbHmERILfOj0U6ZDiSZl2E0G7T/Da3FwfmmfCcIE8H3
lVoISQ6rsF/hfe0zsvhhbeCqEoGtGQqozlpiUOqsAxueG1Qnsd4OtNedOxt2n16P
f0g4
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:42 2023 by rpki-client on console-fra.rpki-client.org