Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610.cer
File:                     a8fd2c6e-ced3-4794-8ce7-a370fe480610.cer (raw, json)
Hash identifier:          e5d97bh1cS0D8j3iq2uYxF9BJIYIQMQpdcQD+t2MSao=
Subject key identifier:   79:0D:4F:8D:60:FE:DE:7D:DD:70:ED:3E:46:34:D7:45:BF:0F:90:09
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858420F0B5AD0AE3291664D10A280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610/a8fd2c6e-ced3-4794-8ce7-a370fe480610.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 May 2023 00:45:16 +0000
Certificate not after:    Tue 02 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 21926
                          IP: 64.253.80.0/20
                          IP: 69.166.192.0/18
                          IP: 2607:e800::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0f:0b:5a:d0:ae:32:91:66:4d:10:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 31 00:45:16 2023 GMT
            Not After : Sep  2 00:45:16 2025 GMT
        Subject: CN=a8fd2c6e-ced3-4794-8ce7-a370fe480610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a5:d8:2d:8b:ff:30:df:9d:e8:6a:09:16:25:
                    42:ac:88:da:7b:70:ea:f0:33:9a:38:cf:2e:23:3d:
                    14:95:57:d9:82:d3:52:a8:6f:c2:22:0a:25:3f:6e:
                    16:ef:28:25:2a:9d:d3:f0:41:da:d6:65:75:d5:0b:
                    c5:f2:5f:79:c8:db:d9:e7:b0:2c:13:12:a8:20:c6:
                    f6:de:e7:a2:2b:34:d1:69:4b:ac:e9:23:0b:42:c5:
                    59:ae:7c:3f:0e:71:de:90:01:3c:46:98:c3:be:9e:
                    9f:71:f9:52:70:d8:63:b0:fa:3f:2c:57:5f:6b:91:
                    d0:56:b3:a9:04:5a:b3:f6:88:e7:41:21:e7:c7:0f:
                    52:12:6c:2c:23:e9:09:f3:c0:a3:3b:8a:6f:5c:bb:
                    ea:b8:16:a1:f5:de:dd:29:63:10:c9:b3:ae:18:62:
                    65:fe:78:24:c3:fb:57:b7:ad:76:6a:a4:6b:66:e9:
                    b8:16:fb:48:1b:85:13:c3:70:e6:c1:97:cf:17:06:
                    53:f0:12:2d:58:e9:8e:f4:28:a0:00:ac:2f:22:bd:
                    b0:cd:6c:f6:1d:d1:f7:75:ea:78:e3:5c:cf:11:8d:
                    5f:79:ce:2b:28:d3:ad:a4:31:2f:d2:89:d6:22:18:
                    2e:c9:3c:4c:0a:5e:16:68:91:a6:51:00:90:c1:fb:
                    7c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0D:4F:8D:60:FE:DE:7D:DD:70:ED:3E:46:34:D7:45:BF:0F:90:09
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610/a8fd2c6e-ced3-4794-8ce7-a370fe480610.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.80.0/20
                  69.166.192.0/18
                IPv6:
                  2607:e800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21926

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:7c:ea:b6:c5:a4:b2:82:a5:af:05:98:a8:4d:cc:bd:b4:05:
         5b:d5:50:b6:17:04:41:8c:71:bc:34:a1:94:b6:a0:29:49:7a:
         b7:aa:1e:f8:61:9d:1c:ef:f9:93:d5:7c:f7:6c:16:55:b7:42:
         58:bf:6a:55:1c:7e:5f:c1:5a:56:0c:bb:78:e3:ac:87:6e:5f:
         aa:86:2f:37:9b:a8:42:0c:2c:68:65:26:b5:4e:a6:5e:e2:95:
         45:26:fc:cc:ea:5c:08:d9:0c:75:46:dc:90:0e:27:90:72:db:
         b1:93:f3:51:8f:2e:d8:43:32:b0:75:62:fd:d1:46:cc:9d:e9:
         b9:b8:c4:1c:10:2d:cc:bf:4f:c1:00:ac:ce:6c:28:4c:f3:95:
         04:4b:fe:54:ea:7d:21:60:68:c7:ed:32:f3:29:f3:5f:f1:60:
         76:d2:23:c3:0e:05:94:48:cd:ab:75:85:53:c1:05:d7:ce:f0:
         a7:78:90:32:fd:b3:db:45:25:6c:5d:b5:b6:9b:e0:d5:f3:d6:
         ed:30:c7:72:dd:db:f3:b5:6d:bf:7a:0e:2c:59:13:10:8f:7d:
         23:ec:49:75:5c:e4:a0:0e:a1:0f:ba:cf:37:27:4f:b7:40:17:
         ca:58:cf:fc:db:0b:76:9c:31:55:c0:10:81:18:c7:5c:38:19:
         24:d1:12:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:39 2023 by rpki-client on console-ams.rpki-client.org