Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d6667a96-ec83-4d96-98ef-f475a9c2a592.cer
File:                     d6667a96-ec83-4d96-98ef-f475a9c2a592.cer (raw, json)
Hash identifier:          EE6riSdbUQsR9dkylji+ie2xni8x1aHeEJcjEJxhe2k=
Subject key identifier:   01:AA:F8:07:E6:A7:E6:5A:7C:86:69:AE:C6:25:E9:C7:39:12:D1:86
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E4831A1EA3436B74CBAA4B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d6667a96-ec83-4d96-98ef-f475a9c2a592/d6667a96-ec83-4d96-98ef-f475a9c2a592.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d6667a96-ec83-4d96-98ef-f475a9c2a592/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 28 Jul 2024 19:06:39 +0000
Subordinate resources:    IP: 45.42.180.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:1a:1e:a3:43:6b:74:cb:aa:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 28 19:06:39 2024 GMT
        Subject: CN=d6667a96-ec83-4d96-98ef-f475a9c2a592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3c:9a:03:d4:30:d5:b6:ba:60:d2:a6:31:5f:
                    4b:a2:55:6a:32:f0:84:bc:32:cc:1c:03:db:6a:d6:
                    ba:6b:a0:49:e8:23:14:ab:f5:d7:07:fd:9d:ec:14:
                    1f:3b:b4:0d:02:d2:9d:ce:0d:2d:c4:70:d7:f6:37:
                    bd:98:e5:ac:7f:dd:55:b2:8d:9e:c6:cd:7a:59:4e:
                    2c:75:95:0a:b1:d7:dd:ac:86:a3:09:b8:4c:21:e5:
                    2a:6c:86:6e:85:c5:91:e8:54:07:52:a9:76:16:a9:
                    8f:48:5b:b8:16:3f:98:bc:0d:2f:87:20:58:46:1e:
                    42:cb:ca:1d:a2:4f:05:95:22:dc:ba:89:00:92:9f:
                    94:7d:06:0b:19:f7:4e:bf:35:3f:ab:73:ae:88:2d:
                    27:e7:43:c1:b9:bc:06:75:6d:b3:91:b1:02:78:84:
                    5e:32:c9:a8:ff:50:77:82:90:1c:9c:35:49:2a:af:
                    2b:94:4c:b3:19:67:b0:85:6e:ce:03:39:91:44:c4:
                    71:ab:5d:32:fb:f8:20:47:b9:a0:b9:47:be:4f:1b:
                    62:00:1c:f2:c4:82:9a:ea:99:dd:3a:3e:ef:e9:b1:
                    81:fe:ab:15:79:7f:59:4c:a6:f1:27:c9:cf:d0:67:
                    00:3b:68:bf:dc:22:31:f4:25:94:e6:29:da:b8:db:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AA:F8:07:E6:A7:E6:5A:7C:86:69:AE:C6:25:E9:C7:39:12:D1:86
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d6667a96-ec83-4d96-98ef-f475a9c2a592/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d6667a96-ec83-4d96-98ef-f475a9c2a592/d6667a96-ec83-4d96-98ef-f475a9c2a592.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9f:10:7f:17:55:28:fd:ec:90:50:f8:65:9d:f3:3e:f1:3c:
         cc:d0:28:51:1f:86:c1:5c:4c:89:cd:c7:2b:08:f8:e3:16:62:
         e1:4e:de:3c:4a:29:10:88:29:0f:35:f7:e3:f2:7e:f3:bf:44:
         95:6e:30:e5:63:0c:3c:c0:50:21:d7:fc:48:80:e5:1f:55:fc:
         d9:a8:79:80:53:2d:4d:10:18:99:c9:dd:f6:57:de:15:b9:d3:
         15:8b:ae:12:4c:81:3e:0c:61:42:63:eb:a1:de:37:4a:a7:4d:
         08:62:29:f0:51:d8:2c:6e:23:e0:0c:18:53:33:f3:51:ab:53:
         8e:f1:3a:c9:8a:6a:48:e1:16:24:ca:06:9f:83:28:e8:ec:a6:
         ee:dc:24:f5:b5:dd:1a:77:e5:d7:56:bd:ea:49:eb:6d:cf:8f:
         4c:7d:bd:e5:dd:59:7a:5e:df:d1:77:8b:11:ee:c0:bc:f0:ec:
         74:e9:56:c5:4a:d2:c7:0c:be:58:00:8f:32:83:dd:cc:f9:74:
         e4:b3:7b:34:a5:be:d9:34:80:65:73:39:17:53:7f:e0:92:d9:
         13:cc:0d:c5:41:ff:13:41:9e:51:ca:88:8d:28:08:f7:02:e1:
         21:81:00:b8:9a:44:37:69:f0:d5:df:f7:8d:72:b8:b2:a1:52:
         10:64:11:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:45 2023 by rpki-client on console-fra.rpki-client.org