Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/15BCC309C0C10FC1E65C83BC4372A82635950F80.cer
File:                     15BCC309C0C10FC1E65C83BC4372A82635950F80.cer (raw, json)
Hash identifier:          zNq+zBSmySs6mfqqhFOJQaA14NH2cZmhHMLuhvsTedU=
Subject key identifier:   15:BC:C3:09:C0:C1:0F:C1:E6:5C:83:BC:43:72:A8:26:35:95:0F:80
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       2CD80A7447D45A53EDB5C59C2CFBB7660E364220
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/0/15BCC309C0C10FC1E65C83BC4372A82635950F80.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 25 Nov 2023 08:58:05 +0000
Certificate not after:    Sat 23 Nov 2024 09:03:05 +0000
Subordinate resources:    IP: 2a0a:6044::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d8:0a:74:47:d4:5a:53:ed:b5:c5:9c:2c:fb:b7:66:0e:36:42:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov 25 08:58:05 2023 GMT
            Not After : Nov 23 09:03:05 2024 GMT
        Subject: CN=15BCC309C0C10FC1E65C83BC4372A82635950F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:74:fb:6d:c6:2a:59:71:c2:54:ba:54:a0:82:
                    c0:50:98:52:d8:c2:40:9c:d4:f2:d7:90:69:94:d3:
                    3b:f8:e7:36:f0:a8:36:4a:ca:cd:cc:ef:23:c2:c7:
                    19:7f:b5:96:f2:4f:c1:21:35:67:22:cf:4e:44:7b:
                    2c:8e:ca:a0:42:dc:5c:b4:02:d9:9a:cd:65:5d:f5:
                    28:e8:a5:33:85:70:8c:74:ca:40:37:73:a7:79:3a:
                    bb:a3:90:bf:13:d2:3a:58:d2:55:79:8a:84:45:e7:
                    1d:fc:ac:e9:b5:2f:0d:99:41:da:cf:9e:0b:ff:4e:
                    43:f4:4f:c4:38:f9:b5:e2:9e:32:e9:31:a1:0b:e3:
                    c0:8b:48:4c:67:64:9e:c5:08:1d:df:56:cc:ba:2f:
                    ac:5c:8f:64:d3:e3:df:f8:a0:92:97:80:b5:47:15:
                    e3:6f:68:1e:32:34:48:22:f4:6c:7d:79:25:5f:d5:
                    55:58:1e:c5:b8:25:d6:ce:96:f4:28:7d:18:aa:ac:
                    e4:c1:c6:c3:98:8e:e6:d3:53:8e:2e:41:82:20:fe:
                    c2:7e:e9:98:26:42:1a:76:46:c1:f0:cc:e1:b0:52:
                    c9:ae:f2:eb:7c:a9:2b:8f:44:ba:8c:2c:f1:52:b7:
                    b2:59:43:c7:be:b3:2b:ec:67:84:c1:95:a5:62:2f:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:BC:C3:09:C0:C1:0F:C1:E6:5C:83:BC:43:72:A8:26:35:95:0F:80
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/0/15BCC309C0C10FC1E65C83BC4372A82635950F80.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:a6:2a:92:5e:a9:e4:c1:81:50:8e:16:c2:46:6b:db:0a:f2:
         5a:fa:c4:22:61:c6:50:f6:bf:04:53:ff:d1:e9:99:6e:59:e4:
         9c:80:41:41:4a:72:b5:30:6b:af:16:2e:ba:29:5c:ad:89:0d:
         1a:ff:c7:86:5c:52:2c:d8:ae:2e:81:e9:b6:dd:9b:40:0c:a0:
         5c:68:66:11:1a:e0:bc:f0:e7:07:85:0e:57:9f:17:21:c8:4b:
         36:af:06:c1:e2:f8:78:73:4b:98:fa:2c:c0:34:a7:f1:a3:3b:
         89:9d:e0:96:cb:3a:0b:69:47:6b:a9:2a:77:47:39:61:41:1f:
         0a:5a:df:0b:cd:6e:5b:cd:e7:43:58:b7:b2:c9:cc:fe:94:3e:
         60:a7:a4:e4:11:6b:19:56:21:ef:02:6c:20:3c:c2:44:33:e2:
         20:10:e0:b3:39:fd:af:8f:8d:ee:d6:e3:9d:56:20:2e:46:52:
         24:f9:44:d6:56:f4:48:eb:c1:bf:e0:4a:72:96:e5:8d:e8:db:
         5e:9b:84:33:7b:fd:b6:e4:2a:31:5e:69:ba:28:70:23:46:56:
         87:a6:9a:d8:f9:24:6f:fb:74:73:64:ce:89:7c:b7:4c:a3:ab:
         f6:84:5e:21:b3:8e:af:76:40:c0:72:58:68:cf:9c:9e:22:b6:
         9a:c0:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----