Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3b8e4cc7-d349-49cd-b501-84c142f8a560.cer
File:                     3b8e4cc7-d349-49cd-b501-84c142f8a560.cer (raw, json)
Hash identifier:          cORUf0K1kPSURdVykuVxW56gmvUBYDsffalokp1jdPg=
Subject key identifier:   18:A1:C3:AA:72:FC:B4:4B:CD:00:2F:39:77:82:3D:E9:D8:91:74:5D
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858436AC718D3969EE75E635D6160
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3b8e4cc7-d349-49cd-b501-84c142f8a560/3b8e4cc7-d349-49cd-b501-84c142f8a560.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3b8e4cc7-d349-49cd-b501-84c142f8a560/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Oct 2023 14:09:02 +0000
Certificate not after:    Sun 04 Jan 2026 15:09:02 +0000
Subordinate resources:    AS: 398774
                          IP: 204.108.188.0/23
                          IP: 209.250.192.0/19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:6a:c7:18:d3:96:9e:e7:5e:63:5d:61:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct  2 14:09:02 2023 GMT
            Not After : Jan  4 15:09:02 2026 GMT
        Subject: CN=3b8e4cc7-d349-49cd-b501-84c142f8a560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:25:e6:fa:80:a8:2d:41:d5:66:8c:e3:82:
                    db:d4:53:3a:c6:5c:9e:56:b8:9f:b8:01:34:17:b5:
                    a9:39:67:a9:93:b0:47:53:90:17:d1:6f:b2:9a:d1:
                    bc:ef:19:e9:2f:49:c6:74:e3:4e:cb:31:09:33:4a:
                    13:98:c8:17:0e:21:57:f3:13:20:6a:e1:2c:97:f7:
                    f8:0e:7b:49:75:35:c0:0e:d9:45:b7:dc:dc:de:83:
                    ea:bb:1e:2f:1e:c9:31:d1:cb:8f:51:c0:38:e3:9e:
                    b1:bf:5c:bb:17:f0:50:f7:85:0f:74:d3:87:f0:3c:
                    f0:52:0a:82:fe:9c:26:58:a7:4a:0c:60:bb:6e:84:
                    07:1b:2d:b7:fb:88:84:47:b2:90:48:2c:72:46:74:
                    4c:da:ef:74:56:16:f8:65:04:4e:ec:57:42:36:c2:
                    e6:cf:15:09:2c:01:3f:64:d9:62:7a:05:35:79:5b:
                    6b:fa:17:62:6b:95:05:53:d1:7c:91:29:cc:ae:78:
                    c9:29:45:8a:a5:5f:00:60:97:35:0b:18:6d:c4:0a:
                    af:aa:c3:db:9f:8d:49:42:5b:40:63:b2:f2:cb:d5:
                    f1:87:3a:49:ab:52:b0:ba:a3:fc:0b:32:fd:dc:a6:
                    8a:16:46:f3:97:fd:c1:27:ba:30:7f:81:a1:0d:10:
                    b2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A1:C3:AA:72:FC:B4:4B:CD:00:2F:39:77:82:3D:E9:D8:91:74:5D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3b8e4cc7-d349-49cd-b501-84c142f8a560/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3b8e4cc7-d349-49cd-b501-84c142f8a560/3b8e4cc7-d349-49cd-b501-84c142f8a560.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.188.0/23
                  209.250.192.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398774

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:12:fb:22:74:0b:8e:9f:67:95:7e:e5:6c:bc:5b:56:c1:18:
         1f:1c:af:04:d6:3a:0d:72:a7:0f:77:5a:43:e5:d3:52:cb:cd:
         30:64:57:d2:ad:a8:33:a4:3c:bc:7a:b8:55:4b:87:22:ec:06:
         84:60:46:79:09:1f:04:d7:b2:79:4b:ac:b7:c5:84:c9:59:d6:
         00:6a:95:aa:ff:f8:8c:dc:38:75:6b:b3:82:d0:5d:fc:70:3d:
         e3:e3:e3:d9:ff:9f:4c:51:8e:29:71:8d:64:05:8d:2c:db:2c:
         0b:b2:f2:10:e0:5e:a2:7a:4b:65:82:18:8f:42:f6:07:26:23:
         4f:37:8a:69:2b:f6:0d:70:b2:84:7f:f6:c5:5c:00:ed:68:b6:
         0e:ef:f0:29:e5:2b:70:d3:37:6c:1c:03:3b:95:34:ca:fe:c6:
         dd:7b:83:bb:dd:4b:8e:22:d5:53:6e:ec:d2:37:37:f7:67:bb:
         e2:a4:f2:a4:45:c6:57:cc:94:07:cb:4c:e0:f6:21:c5:01:ca:
         5c:92:99:ed:0e:71:ed:b8:00:65:89:84:92:96:79:8b:e0:0b:
         4b:bd:6b:ed:36:d4:38:af:10:5a:92:b4:d0:7c:9b:2f:0c:91:
         b1:df:c1:f5:20:b5:e9:fc:74:da:43:e9:00:d0:46:50:5d:7f:
         81:cd:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 19:29:33 2023 by rpki-client on console-ams.rpki-client.org