Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f64f6091-526c-4e27-89ef-96ed51814d96.cer
File:                     f64f6091-526c-4e27-89ef-96ed51814d96.cer (raw, json)
Hash identifier:          ZuV3waqNlbcIjBDk50HebJyQrsF7nR0uPmj1MNtEVFI=
Subject key identifier:   34:1C:89:29:20:2D:C2:DB:C7:85:51:14:36:AD:14:0D:32:8C:1B:D9
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584176CD3CD6DF83CD60689B4420
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f64f6091-526c-4e27-89ef-96ed51814d96/f64f6091-526c-4e27-89ef-96ed51814d96.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f64f6091-526c-4e27-89ef-96ed51814d96/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 06 Apr 2023 11:57:14 +0000
Certificate not after:    Sun 19 Jan 2031 14:29:42 +0000
Subordinate resources:    AS: 13413
                          AS: 22166
                          AS: 36001
                          AS: 62684
                          AS: 393429
                          IP: 134.195.20.0/22
                          IP: 139.60.8.0/21
                          IP: 162.210.60.0/22
                          IP: 172.98.220.0/22
                          IP: 173.242.80.0/20
                          IP: 192.200.136.0/21
                          IP: 199.167.212.0/22
                          IP: 206.126.208.0/20
                          IP: 209.103.224.0/19
                          IP: 216.127.192.0/19
                          IP: 2605:bbc0::/32
                          IP: 2606:3d00::/32
                          IP: 2606:ab80::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:76:cd:3c:d6:df:83:cd:60:68:9b:44:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Apr  6 11:57:14 2023 GMT
            Not After : Jan 19 14:29:42 2031 GMT
        Subject: CN=f64f6091-526c-4e27-89ef-96ed51814d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:ac:c8:9b:1a:59:58:4d:1d:02:4f:f2:a1:
                    e5:db:ae:e8:01:97:e6:9f:ec:92:2f:e6:73:b8:dc:
                    f8:89:11:e8:3d:38:e2:f0:72:0e:42:9a:3e:81:92:
                    b9:e2:59:97:20:80:62:58:a5:21:ba:87:c6:9b:1e:
                    e3:60:31:82:8a:d2:aa:19:47:0b:86:76:25:e1:ee:
                    49:ca:8d:43:fa:96:e9:33:8e:a2:fb:2f:13:ea:b9:
                    e2:3f:97:ff:79:81:8d:a6:d7:5b:9f:59:97:87:25:
                    86:83:6c:1f:67:0f:af:6f:06:e7:b7:fe:5f:8b:04:
                    ee:44:3e:47:42:92:18:e2:e7:0d:27:1f:f6:c2:78:
                    e9:dc:46:74:f7:19:86:c5:32:c8:b8:1f:05:6c:19:
                    63:18:57:2e:74:27:20:44:cf:98:68:e0:5e:2f:48:
                    af:48:11:50:d8:c1:b6:88:8d:4e:e0:7a:c4:fb:e7:
                    c3:10:ee:55:72:28:14:25:95:36:ef:63:f7:47:af:
                    94:5e:a1:a1:ae:57:b4:21:c4:0c:73:6a:aa:ee:07:
                    7a:d8:1e:5e:8b:d9:39:fa:5b:63:69:28:fe:17:2c:
                    29:12:1f:73:bb:88:00:43:72:a3:d4:07:d6:e4:84:
                    b2:3a:a4:d1:5a:6f:1e:06:fd:88:1b:22:3d:17:ea:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1C:89:29:20:2D:C2:DB:C7:85:51:14:36:AD:14:0D:32:8C:1B:D9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f64f6091-526c-4e27-89ef-96ed51814d96/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f64f6091-526c-4e27-89ef-96ed51814d96/f64f6091-526c-4e27-89ef-96ed51814d96.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.20.0/22
                  139.60.8.0/21
                  162.210.60.0/22
                  172.98.220.0/22
                  173.242.80.0/20
                  192.200.136.0/21
                  199.167.212.0/22
                  206.126.208.0/20
                  209.103.224.0/19
                  216.127.192.0/19
                IPv6:
                  2605:bbc0::/32
                  2606:3d00::/32
                  2606:ab80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13413
                  22166
                  36001
                  62684
                  393429

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e4:ea:2d:ee:5c:e3:09:16:20:b9:26:5f:94:cf:09:fb:32:
         bb:72:de:b1:a9:3e:7e:95:be:6c:c2:99:2f:ab:3f:84:59:57:
         b5:8b:b6:23:1c:05:cf:43:0d:52:9b:d0:bd:f0:77:d1:dd:0a:
         1e:d9:1c:78:b5:0b:47:68:9e:1b:18:6e:df:88:f3:17:06:ba:
         20:56:50:3b:01:f4:21:d8:8a:ea:7f:35:a2:c8:8f:2f:b5:60:
         d1:f9:9b:3c:2e:8e:08:17:ee:a7:57:25:31:1e:c0:9b:82:6e:
         fa:f4:10:0e:b7:3c:5d:42:1c:a9:eb:ef:20:6b:d1:5b:c6:97:
         f6:c6:11:a3:fe:fd:36:13:f4:f4:03:d6:90:92:fb:0b:da:0b:
         89:6e:c2:23:ce:cb:c2:df:75:99:5e:d4:67:9e:0d:01:94:c2:
         cd:e4:3b:42:a1:f3:38:b7:f8:d2:21:42:6e:6d:83:84:9f:00:
         16:0a:dd:78:02:92:93:55:99:11:51:59:1a:42:19:23:f2:b9:
         0c:bd:39:f2:c3:0d:9e:ce:b7:d4:dc:f7:11:8a:05:92:74:30:
         c7:c3:2b:c9:84:c9:04:b1:4e:e7:60:f2:b4:a6:ae:4b:d1:47:
         76:e3:21:de:5f:4a:4a:0d:95:a0:09:e3:b7:cc:e4:5d:95:cf:
         fe:63:67:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:44 2023 by rpki-client on console-ams.rpki-client.org