Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
File:                     3986DB54152486D65338415899DEAD95A067B25E.cer (raw, json)
Hash identifier:          DAwklc69pIgh71WXOSR+cilBMKDI3UIKrFVQJtrqboo=
Subject key identifier:   39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       1B886CCA38BD4728524F74239908FB3A69DBE171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 12 Nov 2023 19:43:19 +0000
Certificate not after:    Sun 10 Nov 2024 19:48:19 +0000
Subordinate resources:    IP: 2a06:1283::/32

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 19:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:88:6c:ca:38:bd:47:28:52:4f:74:23:99:08:fb:3a:69:db:e1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov 12 19:43:19 2023 GMT
            Not After : Nov 10 19:48:19 2024 GMT
        Subject: CN=3986DB54152486D65338415899DEAD95A067B25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:af:34:cf:c9:c7:01:28:65:b1:28:63:d9:43:
                    f0:44:b1:1f:7c:56:c0:7f:8f:cd:56:66:4b:70:dd:
                    6a:39:75:78:87:24:28:0c:d7:9e:07:d5:d0:57:ae:
                    37:fe:2e:bc:c4:c7:a8:1e:e8:9e:d0:85:e6:d3:17:
                    e4:28:51:55:06:06:47:93:74:d6:d3:e3:19:00:7b:
                    61:b5:14:34:5f:e3:94:78:0d:f6:3b:a2:5f:c4:30:
                    7f:bf:48:ba:66:f2:f3:be:32:fd:24:65:96:7a:4b:
                    33:7c:d3:c5:41:58:51:29:21:f9:c5:37:b0:aa:41:
                    db:c4:f7:93:83:f3:57:a4:03:76:d5:a8:5a:15:a7:
                    e3:69:8d:b3:af:b4:bd:fc:32:1a:a6:16:45:d9:00:
                    81:7d:07:3f:2e:36:8b:f2:69:4d:2e:0f:5f:8c:c7:
                    07:39:50:24:a1:fd:e7:b8:cf:4b:aa:e5:ba:a4:03:
                    8e:1b:3f:0b:3a:ea:15:f7:bb:4c:6d:6a:ef:80:1b:
                    0a:61:d1:5e:94:da:b3:8a:e3:dd:4e:f0:56:73:e8:
                    b8:f1:d9:0d:f1:dc:74:00:21:2b:9d:34:54:a4:38:
                    51:d4:dd:76:66:da:f3:48:64:f6:ef:a6:88:68:dd:
                    06:da:5e:0a:27:45:06:bd:ee:9a:60:49:78:7f:67:
                    f9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:e0:d0:4e:6d:39:91:47:12:b5:79:88:95:8f:88:67:9f:ae:
         90:db:f3:b3:e8:66:ce:60:da:96:f4:86:ea:9c:1a:d4:09:f6:
         3d:5d:c3:70:a8:c0:e7:5d:19:c9:03:ab:88:6f:25:16:e6:59:
         c4:60:94:35:99:12:ab:db:49:b8:32:44:95:f7:68:1e:e4:36:
         1d:d0:fe:b8:85:4b:e9:58:90:7f:34:17:0a:52:45:6e:41:e8:
         bb:96:59:c1:a0:b1:4c:b4:c3:ad:29:0e:61:ba:bd:c5:d9:4e:
         24:d3:2e:af:0a:90:50:d1:df:2b:5a:b2:7d:7c:14:4d:60:b3:
         29:49:79:9b:f1:23:86:d1:7a:89:9d:0d:93:d5:f7:f4:e8:59:
         bc:51:af:6a:fa:f7:7e:45:83:d5:1c:75:01:82:93:55:20:4f:
         61:28:6c:c1:06:82:10:a1:b4:c1:39:f3:34:5e:49:e8:c8:86:
         8a:a3:f0:60:c0:d6:6b:9d:f2:b7:4b:56:a0:79:09:61:e3:18:
         64:a5:48:78:1b:67:e4:77:0b:34:1a:80:b3:39:e2:2c:c7:c1:
         aa:6c:d9:d6:ba:f5:3e:e2:3a:c3:7c:93:8d:ec:00:da:4d:93:
         30:5c:65:a8:c2:b2:3a:70:18:c8:56:f7:80:8e:0f:a8:aa:f3:
         80:fe:fa:c6
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUG4hsyji9RyhST3QjmQj7Omnb4XEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzExMTIxOTQzMTlaFw0yNDExMTAxOTQ4MTlaMDMxMTAvBgNV
BAMTKDM5ODZEQjU0MTUyNDg2RDY1MzM4NDE1ODk5REVBRDk1QTA2N0IyNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYrzTPyccBKGWxKGPZQ/BEsR98
VsB/j81WZktw3Wo5dXiHJCgM154H1dBXrjf+LrzEx6ge6J7QhebTF+QoUVUGBkeT
dNbT4xkAe2G1FDRf45R4DfY7ol/EMH+/SLpm8vO+Mv0kZZZ6SzN808VBWFEpIfnF
N7CqQdvE95OD81ekA3bVqFoVp+NpjbOvtL38MhqmFkXZAIF9Bz8uNovyaU0uD1+M
xwc5UCSh/ee4z0uq5bqkA44bPws66hX3u0xtau+AGwph0V6U2rOK491O8FZz6Ljx
2Q3x3HQAISudNFSkOFHU3XZm2vNIZPbvpoho3QbaXgonRQa97ppgSXh/Z/k/AgMB
AAGjggLSMIICzjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5httUFSSG1lM4
QViZ3q2VoGeyXjAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82Y2E4MTFm
OC1kMDc1LTRlNTAtOWJiZi03YjJkMDkwNzE2OGYvMi8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzZjYTgx
MWY4LWQwNzUtNGU1MC05YmJmLTdiMmQwOTA3MTY4Zi8yLzM5ODZEQjU0MTUyNDg2
RDY1MzM4NDE1ODk5REVBRDk1QTA2N0IyNUUubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACoGEoMwDQYJKoZIhvcNAQELBQADggEBALrg0E5tOZFHErV5iJWPiGefrpDb
87PoZs5g2pb0huqcGtQJ9j1dw3CowOddGckDq4hvJRbmWcRglDWZEqvbSbgyRJX3
aB7kNh3Q/riFS+lYkH80FwpSRW5B6LuWWcGgsUy0w60pDmG6vcXZTiTTLq8KkFDR
3ytasn18FE1gsylJeZvxI4bReomdDZPV9/ToWbxRr2r6935Fg9UcdQGCk1UgT2Eo
bMEGghChtME58zReSejIhoqj8GDA1mud8rdLVqB5CWHjGGSlSHgbZ+R3CzQagLM5
4izHwaps2da69T7iOsN8k43sANpNkzBcZajCsjpwGMhW94COD6iq84D++sY=
-----END CERTIFICATE-----