Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/514199BA2112D71D72E20DCA3EC2EE2C31F2979C.cer
File:                     514199BA2112D71D72E20DCA3EC2EE2C31F2979C.cer (raw, json)
Hash identifier:          soUwLnrUsJnD70fZIpTAMbmJ+67HCEMwJZd2ou9AQjA=
Subject key identifier:   51:41:99:BA:21:12:D7:1D:72:E2:0D:CA:3E:C2:EE:2C:31:F2:97:9C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6F157A1524F131DE2C13E60E04DAF4981A91D69A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/514199BA2112D71D72E20DCA3EC2EE2C31F2979C.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 26 May 2024 14:01:02 +0000
Certificate not after:    Sun 25 May 2025 14:06:02 +0000
Subordinate resources:    IP: 2a0b:9e40::/29
                          IP: 2a0f:6280::/29

Validation:               Failed, certificate revoked on Tue 28 May 2024 09:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:15:7a:15:24:f1:31:de:2c:13:e6:0e:04:da:f4:98:1a:91:d6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: May 26 14:01:02 2024 GMT
            Not After : May 25 14:06:02 2025 GMT
        Subject: CN=514199BA2112D71D72E20DCA3EC2EE2C31F2979C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:8f:71:48:32:7d:ef:4b:e8:f1:09:fe:ec:
                    a4:22:ac:ac:ac:43:4e:73:5a:fa:c2:a7:b4:cd:93:
                    ab:2b:5c:b4:96:ff:51:a0:da:90:36:6a:50:3a:14:
                    97:b8:b0:aa:b0:52:5c:5d:65:e4:34:9c:7f:5b:b5:
                    06:60:37:05:45:20:74:f1:1f:4f:3d:e0:ac:4d:ee:
                    d3:00:4e:8a:be:37:2f:80:af:08:3e:52:6c:4a:34:
                    d4:97:c4:a3:ae:11:26:66:9b:90:28:79:a9:4f:3e:
                    81:4b:97:ca:a1:db:c8:52:45:a4:2d:c5:a8:55:63:
                    59:48:ee:e6:49:a8:10:97:15:57:cb:85:42:e4:8a:
                    fc:99:96:2b:59:27:c6:3f:2e:01:c9:42:10:24:f7:
                    20:51:a1:3b:5b:e5:22:a9:3d:91:db:af:71:0e:76:
                    d2:98:98:99:dc:47:78:4a:85:35:e4:a0:2b:5f:2f:
                    74:fa:ae:a2:ae:04:c2:a7:89:d0:b2:c4:8f:5a:f5:
                    ad:dd:a1:1d:a8:b0:37:c2:e3:1b:71:8c:09:f1:16:
                    72:c3:66:e8:e8:c3:4a:14:b6:fd:bd:23:27:f8:93:
                    91:5d:da:ac:7a:19:aa:68:ad:57:3b:23:63:1c:c5:
                    a3:ae:ba:56:e8:b3:a2:3f:c6:69:6f:19:c2:3c:87:
                    ca:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:41:99:BA:21:12:D7:1D:72:E2:0D:CA:3E:C2:EE:2C:31:F2:97:9C
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/514199BA2112D71D72E20DCA3EC2EE2C31F2979C.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9e40::/29
                  2a0f:6280::/29

    Signature Algorithm: sha256WithRSAEncryption
         be:0e:da:6c:0d:4f:08:af:45:6b:d1:30:73:5e:bc:a0:f1:78:
         1d:8d:1f:89:f0:e9:f7:91:b9:e7:7c:22:99:06:c3:f1:51:4a:
         b1:9e:5f:9b:ea:54:4d:98:a8:76:40:99:07:51:6f:fe:aa:0b:
         4c:0e:82:11:cf:6f:2a:d1:46:44:c6:a0:f9:be:56:a6:ae:f9:
         ca:9a:ba:96:07:e9:cd:a9:66:28:76:e0:36:49:6a:10:a5:44:
         4b:ab:df:d6:4e:ad:c5:d9:40:db:d7:b6:7d:01:1f:ae:e7:5d:
         e4:53:0c:aa:d7:be:18:08:3f:bb:c6:67:6f:68:02:3a:be:11:
         a4:59:63:00:bb:fa:d6:1d:b8:ea:9c:20:9e:c8:9b:11:93:6d:
         fa:ca:68:b6:80:2b:f3:51:b0:be:5c:1e:c4:a0:28:16:fc:86:
         28:63:18:39:b2:53:fb:14:59:3f:c8:b0:71:be:ca:f4:a8:1d:
         4b:b3:52:0c:d1:86:de:44:34:66:48:b5:fb:bb:14:75:3c:bc:
         e5:32:69:42:99:47:b7:2e:f3:4a:4a:c0:cf:eb:b3:e4:e4:50:
         55:38:cc:f6:ae:e6:cf:b7:84:28:9e:74:1d:36:df:89:13:83:
         77:59:4f:e2:a5:25:d8:a7:8b:e6:68:07:d5:fd:f9:11:6f:f2:
         37:ff:9a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----