Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21f6ba1-d8bb-4867-84f0-92ade2719d36.cer
File:                     d21f6ba1-d8bb-4867-84f0-92ade2719d36.cer (raw, json)
Hash identifier:          mFFWb1bgqNy8DM3VpU6+hH9yPTNlMBXCEb+sQjmCAT0=
Subject key identifier:   60:B6:F3:17:14:A2:B7:99:F4:70:7A:AD:F7:67:FB:F6:34:32:06:6F
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842516DE8B4CC1262F17C53F680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21f6ba1-d8bb-4867-84f0-92ade2719d36/d21f6ba1-d8bb-4867-84f0-92ade2719d36.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21f6ba1-d8bb-4867-84f0-92ade2719d36/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Jun 2023 19:27:11 +0000
Certificate not after:    Thu 25 Sep 2025 01:53:18 +0000
Subordinate resources:    IP: 23.156.104.0/24
                          IP: 2602:fa6e::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:51:6d:e8:b4:cc:12:62:f1:7c:53:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun 23 19:27:11 2023 GMT
            Not After : Sep 25 01:53:18 2025 GMT
        Subject: CN=d21f6ba1-d8bb-4867-84f0-92ade2719d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8e:20:7e:32:97:b8:c3:54:6c:9f:a7:89:a2:
                    c5:07:e1:e2:c3:29:c5:5f:75:3d:4b:97:1a:48:6d:
                    2b:fd:4b:1c:f4:c3:f0:f2:07:2a:38:48:39:b3:fe:
                    9b:e6:c7:0f:18:92:70:f4:e7:02:94:40:46:a3:6d:
                    7a:70:24:a6:cc:41:e7:67:66:4f:30:0d:fa:63:d8:
                    61:c6:4e:a0:6e:54:aa:61:a6:c6:36:00:34:25:d7:
                    e5:93:ca:13:89:ad:e5:e4:e0:06:c7:26:52:79:0a:
                    68:ca:08:df:be:1e:80:57:0a:18:07:ab:1d:c0:ce:
                    80:09:86:89:23:c4:56:07:8a:9e:8e:6b:dd:55:e4:
                    1c:e9:74:23:d3:b4:83:51:e3:31:c0:8e:a2:71:4e:
                    9d:12:ee:10:84:7a:f8:02:83:68:ad:4c:30:43:63:
                    1c:f9:94:29:a1:c4:7c:e6:2c:b6:da:81:c5:e4:35:
                    45:a5:84:ec:14:75:7f:f8:02:54:6a:4e:e4:a2:70:
                    39:4e:bd:17:b2:67:df:71:89:3d:d0:05:37:ec:a8:
                    6e:e5:0d:f2:e5:d2:6e:3c:cd:3e:f5:87:ad:d8:fc:
                    88:2d:85:d4:38:23:a1:f5:a8:b1:2f:a9:7f:df:1f:
                    6b:2b:9c:87:fd:97:21:e8:89:67:e3:c4:a7:6e:12:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B6:F3:17:14:A2:B7:99:F4:70:7A:AD:F7:67:FB:F6:34:32:06:6F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21f6ba1-d8bb-4867-84f0-92ade2719d36/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21f6ba1-d8bb-4867-84f0-92ade2719d36/d21f6ba1-d8bb-4867-84f0-92ade2719d36.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.104.0/24
                IPv6:
                  2602:fa6e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:52:11:51:4f:61:a9:02:2e:0f:74:31:71:ae:53:e1:ce:10:
         ad:c7:5f:ad:24:84:d2:ba:ce:dd:7f:bc:43:fd:d2:33:cb:2d:
         ea:cd:89:40:3e:e4:7d:ac:7b:43:e6:b7:89:de:26:bb:01:ac:
         13:ca:6c:8c:58:56:9e:1f:e9:d1:d9:3e:98:81:01:95:c0:e1:
         9b:43:d1:8f:aa:57:17:4d:f7:c5:9d:3e:a9:78:fb:a2:60:3b:
         76:99:9a:b7:0e:00:22:bd:96:4b:ec:3e:13:f6:cc:69:b0:0a:
         cc:f7:3c:73:d2:26:12:b9:9d:33:a6:32:cf:8f:a7:00:46:ca:
         46:c9:72:58:e1:53:0b:d1:87:7f:b1:a7:55:1b:e3:5d:20:eb:
         a5:84:a4:bc:28:cc:19:90:5a:c7:1c:87:93:dc:3f:72:9d:ab:
         58:f2:e0:95:eb:bf:b5:84:b3:3b:49:14:72:d7:e4:c9:9f:51:
         5c:b2:42:26:0b:a8:db:81:88:a5:53:a5:96:7a:0b:1a:74:4c:
         67:5a:61:12:af:ad:01:50:f9:11:dc:02:b1:a1:0a:e7:47:42:
         ab:25:25:99:4f:e3:72:5e:81:46:98:9b:96:14:33:24:c4:61:
         f0:6e:71:4b:62:30:06:0b:7f:7a:db:af:0a:bc:62:e9:ed:a6:
         43:5d:fd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:39:55 2023 by rpki-client on console.sobornost.net