Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f891678b-32d4-4de6-8ec7-302a77e644b4.cer
File:                     f891678b-32d4-4de6-8ec7-302a77e644b4.cer (raw, json)
Hash identifier:          YQbv2ofz6MmeGkSBR19js0N7/m6bjpI6P1nA3KS+shc=
Subject key identifier:   86:C6:2F:C9:DC:FD:3A:CF:05:77:95:52:4C:AA:AE:DB:82:2A:0A:EC
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583F3AFC666921CB49B193C7DC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f891678b-32d4-4de6-8ec7-302a77e644b4/f891678b-32d4-4de6-8ec7-302a77e644b4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f891678b-32d4-4de6-8ec7-302a77e644b4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 13 Sep 2022 16:09:53 +0000
Certificate not after:    Mon 16 Dec 2024 17:09:53 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3a:fc:66:69:21:cb:49:b1:93:c7:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 13 16:09:53 2022 GMT
            Not After : Dec 16 17:09:53 2024 GMT
        Subject: CN=f891678b-32d4-4de6-8ec7-302a77e644b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b9:c4:67:0a:3c:d3:ca:82:db:79:d1:9c:7a:
                    20:06:bc:5d:f0:c8:9b:5b:ee:bf:9b:75:90:4e:c5:
                    27:de:e2:47:77:74:ed:f7:6b:2c:c3:16:02:22:e2:
                    10:03:98:71:fe:5e:ba:e6:f6:eb:6d:d2:ec:a9:04:
                    08:b0:73:ee:4c:07:50:3b:53:e3:8b:cd:c8:80:1a:
                    1d:52:7d:bd:f2:f7:ca:ea:a2:18:82:67:55:36:86:
                    01:ba:06:c3:5f:0a:ba:d3:c4:43:11:e6:12:fa:16:
                    09:ac:4f:fa:c7:76:fd:d3:a2:4f:71:f2:c1:64:f3:
                    03:70:cb:27:bc:85:e3:9a:1d:bd:b2:cc:39:50:7e:
                    03:da:a0:ba:91:68:dd:50:2d:0f:98:b5:52:0f:0b:
                    0f:cc:1b:55:4e:e1:d2:9b:ac:c8:30:9d:dc:0f:90:
                    80:40:4c:83:89:4b:18:22:6f:b5:92:f5:5a:bb:3c:
                    5d:3e:e8:cc:ed:81:85:d8:b8:53:50:5b:f4:3d:a2:
                    82:2c:03:87:ef:82:71:77:60:3e:07:6e:0a:af:94:
                    4e:2b:19:7b:21:b2:4d:79:0d:fd:5d:54:60:d6:43:
                    52:95:fb:9f:8b:07:7c:7a:07:61:c7:5a:72:b6:e9:
                    92:04:e3:cc:62:be:fc:ee:c7:72:73:91:aa:00:54:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C6:2F:C9:DC:FD:3A:CF:05:77:95:52:4C:AA:AE:DB:82:2A:0A:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f891678b-32d4-4de6-8ec7-302a77e644b4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f891678b-32d4-4de6-8ec7-302a77e644b4/f891678b-32d4-4de6-8ec7-302a77e644b4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:4e:b3:06:eb:de:74:6b:ab:ad:c4:59:78:46:a6:a7:e0:b1:
         47:d3:4b:b7:8a:2a:f6:b0:72:5c:76:28:48:0c:aa:14:95:9d:
         a9:64:48:aa:65:33:de:8e:3b:af:d1:f1:6e:58:86:08:94:d0:
         47:4e:66:9a:ec:4e:8f:6d:e2:f4:cc:92:c5:10:11:eb:41:97:
         34:06:6a:a2:5b:b2:f7:4b:17:c3:3b:2e:98:82:e3:8b:34:a3:
         af:1a:b6:3a:6b:04:14:75:b5:a9:fa:91:07:a7:84:f6:c3:57:
         98:b9:21:2e:7a:5d:93:1f:36:30:53:bd:a0:0f:60:c9:7c:f5:
         44:5e:c2:8d:49:76:23:82:b7:1b:68:2a:1f:32:f3:09:9d:bd:
         03:14:96:59:df:74:51:83:7a:8c:33:24:78:ca:9c:8a:fa:cb:
         92:1c:0f:44:16:3f:19:6b:cc:61:f5:8e:04:37:d3:2f:19:72:
         11:e5:6f:0d:5c:35:0f:ce:0a:db:ab:87:fc:d0:9f:d0:52:97:
         0d:25:16:e1:41:db:91:d0:72:f7:53:45:86:7c:91:f9:c3:7c:
         71:c5:e9:89:7f:d5:8b:e9:9d:be:4a:f6:a7:68:79:cd:96:df:
         c4:87:aa:d9:f8:66:0d:d7:86:7d:0a:e1:5f:16:16:e8:33:c1:
         ce:b2:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:48 2023 by rpki-client on console-fra.rpki-client.org