Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
File:                     21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer (raw, json)
Hash identifier:          Z5QKSckhV8eMn5jUUBB00Nf6noj9qg86Y431MAUw5fI=
Subject key identifier:   21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       4D997CE2477659AB6A9CC11AB46ABC52AB3514E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 12 Nov 2023 00:08:53 +0000
Certificate not after:    Sun 10 Nov 2024 00:13:53 +0000
Subordinate resources:    IP: 2a0a:6044::/32

Validation:               Failed, certificate revoked on Sat 25 Nov 2023 07:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:99:7c:e2:47:76:59:ab:6a:9c:c1:1a:b4:6a:bc:52:ab:35:14:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov 12 00:08:53 2023 GMT
            Not After : Nov 10 00:13:53 2024 GMT
        Subject: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:70:fd:d1:26:e8:40:a8:e7:52:da:3a:bd:
                    c8:76:d1:c9:70:58:31:55:f4:6b:30:3c:78:3c:45:
                    42:4e:4c:6e:a9:a3:43:c1:6d:65:53:81:4e:b9:4b:
                    56:34:7e:f3:e3:13:48:83:d0:17:fd:82:55:57:0f:
                    dc:94:b7:88:3f:e4:2b:49:2d:3d:a6:79:5a:ce:94:
                    63:57:fd:02:ec:87:ac:31:cb:01:de:05:72:a5:1c:
                    13:e9:66:ea:f2:c4:d9:92:1b:66:8d:ce:59:98:45:
                    6f:d9:de:fc:98:f3:e6:e5:8a:ea:0b:87:96:29:09:
                    0e:c6:ab:64:31:75:34:15:fe:50:ab:d8:7c:70:e0:
                    de:3c:6c:e0:36:6d:22:e6:42:af:1a:95:49:b3:2e:
                    91:fa:5c:b9:62:1d:92:01:c1:5c:4a:7d:92:ac:3d:
                    71:96:d7:37:23:60:7a:8e:3b:5f:ca:20:9c:e5:aa:
                    c1:de:6f:22:5f:6a:5a:77:1f:d9:2f:18:f8:8d:53:
                    59:88:3c:32:f0:33:9b:3b:84:3d:67:ba:4a:60:58:
                    64:66:41:b3:e0:08:8b:30:95:09:89:0d:63:19:7f:
                    6e:8f:4d:fe:1f:c8:05:5a:7e:28:14:fb:1e:8b:38:
                    50:d2:56:3e:76:56:bc:bd:3e:c1:8f:9e:d1:1e:fa:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:0b:06:41:b9:1f:fb:1d:d5:51:5b:4c:dd:97:53:dc:26:c9:
         65:db:16:30:20:6a:fb:e9:57:54:f5:e8:6e:5b:30:d3:db:27:
         79:fd:1e:8b:96:f9:43:d4:a2:f4:06:f6:e8:e1:07:98:f1:55:
         9e:a8:a2:d4:9b:5c:69:e5:c2:76:57:f9:ce:46:f1:33:15:bf:
         0a:d7:c6:f8:81:e4:5c:ea:28:82:a1:70:3f:a7:47:7e:eb:77:
         0d:f2:03:36:d6:e2:11:27:2c:b9:69:fb:0c:84:d1:c0:dd:75:
         87:c9:a7:4c:56:cb:fe:de:39:26:cd:6e:08:fe:9c:7b:9f:f6:
         03:c1:12:e1:32:bd:23:8d:c7:36:d1:eb:9d:b3:a1:9e:43:2a:
         a3:ff:ec:eb:ab:b1:67:56:81:10:c2:23:76:80:0d:e0:b8:24:
         3b:55:51:3a:66:5f:3e:ea:d5:e1:ca:0e:be:58:e8:73:cb:16:
         01:91:d4:98:70:98:e8:12:3b:5c:ee:83:76:69:8e:dc:4c:40:
         6d:cf:ff:1d:9a:0c:3d:a9:c9:2b:11:3b:05:a3:56:34:fd:dc:
         e4:06:42:81:7f:1a:78:04:26:e4:c2:4b:00:ff:74:11:d2:89:
         a0:f3:1b:04:58:d8:4c:bb:68:49:9f:d9:a9:f5:de:e5:c0:c5:
         7a:30:07:4c
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUTZl84kd2WatqnMEatGq8Uqs1FOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzExMTIwMDA4NTNaFw0yNDExMTAwMDEzNTNaMDMxMTAvBgNV
BAMTKDIxQ0E2NTg1N0M0MzM5QzY5MjNDRjVBOUY4NjI5OTQ4QkYzQTRCNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCecXD90SboQKjnUto6vch20clw
WDFV9GswPHg8RUJOTG6po0PBbWVTgU65S1Y0fvPjE0iD0Bf9glVXD9yUt4g/5CtJ
LT2meVrOlGNX/QLsh6wxywHeBXKlHBPpZuryxNmSG2aNzlmYRW/Z3vyY8+bliuoL
h5YpCQ7Gq2QxdTQV/lCr2Hxw4N48bOA2bSLmQq8alUmzLpH6XLliHZIBwVxKfZKs
PXGW1zcjYHqOO1/KIJzlqsHebyJfalp3H9kvGPiNU1mIPDLwM5s7hD1nukpgWGRm
QbPgCIswlQmJDWMZf26PTf4fyAVafigU+x6LOFDSVj52Vry9PsGPntEe+mjBAgMB
AAGjggLSMIICzjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhymWFfEM5xpI8
9an4YplIvzpLeTAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYzkwZjRm
Ni1mMmM0LTQ4ODItOTFjZi05YjhmMGIzOGQ3ZGEvNC8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JjOTBm
NGY2LWYyYzQtNDg4Mi05MWNmLTliOGYwYjM4ZDdkYS80LzIxQ0E2NTg1N0M0MzM5
QzY5MjNDRjVBOUY4NjI5OTQ4QkYzQTRCNzkubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACoKYEQwDQYJKoZIhvcNAQELBQADggEBAKcLBkG5H/sd1VFbTN2XU9wmyWXb
FjAgavvpV1T16G5bMNPbJ3n9HouW+UPUovQG9ujhB5jxVZ6ootSbXGnlwnZX+c5G
8TMVvwrXxviB5FzqKIKhcD+nR37rdw3yAzbW4hEnLLlp+wyE0cDddYfJp0xWy/7e
OSbNbgj+nHuf9gPBEuEyvSONxzbR652zoZ5DKqP/7OursWdWgRDCI3aADeC4JDtV
UTpmXz7q1eHKDr5Y6HPLFgGR1JhwmOgSO1zug3ZpjtxMQG3P/x2aDD2pySsROwWj
VjT93OQGQoF/GngEJuTCSwD/dBHSiaDzGwRY2Ey7aEmf2an13uXAxXowB0w=
-----END CERTIFICATE-----