Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer
File:                     c85557f0-25ce-414b-9504-736b20840d26.cer (raw, json)
Hash identifier:          WDvswKEiR+NlMiawSRARX0CxKAAf1TKTqXAJJl8Q8OI=
Subject key identifier:   A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583DF435B0591F26D808FB9E1D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 May 2022 14:55:59 +0000
Certificate not after:    Wed 21 Aug 2024 14:55:59 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f4:35:b0:59:1f:26:d8:08:fb:9e:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 19 14:55:59 2022 GMT
            Not After : Aug 21 14:55:59 2024 GMT
        Subject: CN=c85557f0-25ce-414b-9504-736b20840d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:d2:07:52:c5:d9:c1:4e:c0:71:a5:27:7b:
                    70:f7:60:b9:af:0f:ff:ca:14:7a:bc:62:ca:0f:16:
                    10:53:a2:f0:4a:8e:2d:70:e4:6d:83:d5:ef:fa:8f:
                    f0:9c:6d:3a:41:c5:ed:8d:c0:81:af:dd:fb:6c:de:
                    70:ae:d3:50:ab:f2:55:b0:73:8e:80:8d:c1:10:a6:
                    35:a4:8e:c5:cd:23:ac:d5:05:86:0d:c8:e3:b1:e4:
                    9c:2c:14:e7:7d:2a:e7:dc:c0:94:36:4e:a4:10:71:
                    3c:1e:e7:a5:13:9f:0b:ff:90:4d:dc:80:17:6f:54:
                    61:f9:5e:ab:dd:0a:59:f2:66:56:b4:94:4c:b9:a2:
                    97:42:ac:9d:3f:8f:70:85:ce:52:85:e0:68:b3:44:
                    77:28:6f:a9:98:cb:4d:2c:17:bf:8d:33:30:62:f3:
                    7a:fd:d2:1d:9f:c9:b5:3f:12:f5:8e:e3:71:bb:36:
                    1e:6a:49:0d:77:b1:bb:67:c5:74:0d:ed:56:0b:4e:
                    ff:2a:0b:bd:bc:32:d5:ed:0c:ab:e2:40:df:43:52:
                    62:42:aa:69:2e:da:74:b9:e3:a2:0b:66:e6:19:93:
                    32:64:e2:19:00:05:df:2b:59:8d:bb:56:0f:8a:7e:
                    b7:14:95:98:bd:34:44:03:54:40:2b:6a:64:11:14:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:12:77:3d:be:20:fc:ce:ac:44:11:24:3f:f4:a2:e6:8e:97:
         7a:cd:3c:bf:b4:85:3d:92:3a:96:73:92:fd:2b:7d:7c:28:68:
         8a:fc:15:7b:ac:15:bc:af:07:c0:ba:ff:ee:1f:90:e0:50:b3:
         c9:9e:3e:ff:be:af:32:b6:4b:ac:36:c1:7f:be:ad:37:56:34:
         47:55:a3:50:66:52:76:e8:1f:e8:c0:21:2e:3f:37:77:83:a3:
         d6:72:99:fc:52:85:e7:85:07:dc:27:45:cc:b0:78:2a:e9:4b:
         b6:c3:11:a9:e2:7a:0e:ba:9a:1e:f3:a4:fe:cc:e0:16:34:5a:
         46:25:3b:51:4b:58:17:8e:9b:9c:eb:dd:e2:0e:9c:22:33:f2:
         18:f4:f4:ab:21:da:61:13:91:9b:81:86:8f:22:ff:b7:e4:ce:
         09:59:de:b5:7a:d1:a9:d8:1a:31:bb:2c:e7:00:4a:e2:a5:a6:
         e5:6a:fd:3d:c0:d0:34:29:5f:b6:33:b8:af:f6:58:80:cd:aa:
         cc:cd:e6:07:88:c2:2d:c2:fe:c2:af:ae:16:85:c3:b9:9e:7f:
         98:fe:59:b7:56:db:d7:cb:75:80:6a:c1:76:85:09:b1:a0:af:
         2e:41:34:75:2e:78:99:62:5c:46:61:1a:e3:fa:16:b1:3f:ec:
         1c:50:58:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:44 2023 by rpki-client on console-fra.rpki-client.org