Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/db528b17-0207-4c84-941b-477434c9aa5b.cer
File:                     db528b17-0207-4c84-941b-477434c9aa5b.cer (raw, json)
Hash identifier:          Hzt5CErp4z738zJ4zFUE5taew9vzyaqIUoWLgnuC1q4=
Subject key identifier:   9C:D3:1D:8B:92:9E:D9:42:D1:4E:7A:03:5C:06:86:2E:6C:8A:2C:35
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285841E483314BE2A306322938AD5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/db528b17-0207-4c84-941b-477434c9aa5b/db528b17-0207-4c84-941b-477434c9aa5b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/db528b17-0207-4c84-941b-477434c9aa5b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Tue 10 Dec 2024 20:06:39 +0000
Subordinate resources:    AS: 397363

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:31:4b:e2:a3:06:32:29:38:ad:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Dec 10 20:06:39 2024 GMT
        Subject: CN=db528b17-0207-4c84-941b-477434c9aa5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:d7:9d:bf:84:6b:81:1f:3b:a3:a5:8c:73:
                    6e:34:cc:23:4c:c1:13:a0:11:bf:93:76:a9:e8:46:
                    bd:36:e9:41:c8:20:63:64:64:d2:3a:82:26:2d:14:
                    7b:1d:86:55:95:dd:c8:8d:10:5b:7c:60:1b:32:d4:
                    8e:5b:03:3e:1a:10:1b:b1:34:57:01:2a:34:68:1c:
                    0e:ae:a3:67:22:28:61:df:ab:96:a3:4c:cc:cc:2b:
                    d3:2f:bd:aa:61:9a:59:48:89:d2:23:a0:4d:a5:9e:
                    b9:25:d3:e8:9e:71:6a:cf:d3:52:d2:75:38:d2:cf:
                    83:fb:0f:04:ab:e8:79:f8:d2:46:a6:12:2a:3a:20:
                    f2:a6:55:84:d4:3a:8a:86:3a:5a:48:07:44:66:00:
                    b6:13:ec:53:06:ea:99:73:44:f8:fb:d0:0f:ad:ff:
                    aa:9b:38:a7:db:44:d4:c9:18:77:e9:30:14:1b:2e:
                    3b:6e:e7:1b:29:61:99:c3:29:9a:59:35:46:98:fb:
                    07:40:20:78:22:dd:fa:87:30:5d:11:a6:dc:29:49:
                    81:4e:eb:72:17:c7:cb:60:be:b1:08:80:84:2c:cc:
                    65:bc:e5:a4:c3:4f:89:af:a3:56:d4:ce:9a:54:e4:
                    b4:db:e1:81:ac:d7:c4:ff:aa:a2:32:3a:27:73:dc:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D3:1D:8B:92:9E:D9:42:D1:4E:7A:03:5C:06:86:2E:6C:8A:2C:35
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/db528b17-0207-4c84-941b-477434c9aa5b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/db528b17-0207-4c84-941b-477434c9aa5b/db528b17-0207-4c84-941b-477434c9aa5b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397363

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b8:15:1b:f7:48:dc:c4:6d:38:7d:17:ff:7d:78:23:d9:0b:
         23:88:7a:58:77:60:88:c9:2a:e8:74:2b:66:1b:7f:66:dc:c2:
         7f:73:78:12:cd:4a:38:7e:2e:c4:96:13:5a:fa:83:8a:14:e9:
         b8:f1:18:7b:76:cb:d0:4b:bd:9e:00:6b:aa:50:90:75:54:db:
         48:2f:af:77:25:c8:ba:5e:a5:9c:50:0d:8e:53:9b:81:df:1e:
         46:08:47:fd:f6:3c:f4:b7:0d:0c:f2:2e:3a:9d:d5:7d:a4:9e:
         21:7f:cb:39:7a:6a:3e:88:b3:57:8c:ab:35:d1:bb:5d:52:1a:
         fe:9e:35:d8:df:1b:e8:83:11:ff:a7:a9:26:4d:97:d9:7b:d1:
         35:10:a1:cd:c0:63:5a:cc:0f:ba:9d:4f:74:6a:7a:3c:f0:44:
         15:d0:62:bb:ed:be:73:c0:8f:90:60:a1:77:a8:b4:a1:8d:b9:
         11:e3:7d:39:83:c2:a2:fd:cc:56:50:a5:cc:36:2c:f5:10:c6:
         2d:fb:52:55:b0:46:2e:f4:53:e2:e9:5f:ef:f6:25:79:8f:72:
         d9:95:2a:14:d9:96:db:74:85:8a:b5:36:b0:6f:5e:a1:80:d7:
         0c:30:91:38:4c:9b:8f:64:ae:a8:1a:c7:fd:af:57:46:96:1e:
         71:8e:1f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:52 2023 by rpki-client on console-fra.rpki-client.org