Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
File:                     635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer (raw, json)
Hash identifier:          6XHyQCPJYBDbJnLoBu18zAHKdilSzUv0LYQ9xpx8I9M=
Subject key identifier:   63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       50DE2EA8222964EA2B3C715B0558CA819E39BD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 25 Nov 2023 07:24:15 +0000
Certificate not after:    Sat 23 Nov 2024 07:29:15 +0000
Subordinate resources:    IP: 2a0a:6044::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:de:2e:a8:22:29:64:ea:2b:3c:71:5b:05:58:ca:81:9e:39:bd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov 25 07:24:15 2023 GMT
            Not After : Nov 23 07:29:15 2024 GMT
        Subject: CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:47:8e:ed:d7:3c:9a:60:66:de:ba:0a:84:
                    7f:a2:13:22:59:a7:59:87:30:13:30:dd:02:34:dd:
                    dc:10:48:bd:5a:63:b0:90:e5:90:be:ed:b7:19:6e:
                    00:a3:e5:f1:47:27:d4:02:91:cc:70:0c:bb:71:e2:
                    e0:d0:54:ff:89:6a:c6:a3:e2:16:cb:8e:dd:31:a4:
                    6d:48:ab:1e:86:5b:ca:1f:fa:b0:24:9c:6b:7c:e8:
                    77:7b:aa:42:4c:d6:67:45:14:95:e3:0c:ca:1f:0d:
                    61:e7:f5:f0:19:5f:26:f3:53:a3:68:9c:88:cc:e1:
                    90:7c:eb:3e:6a:17:42:96:1b:09:62:c1:b9:14:f8:
                    d5:b6:6b:44:58:27:5e:89:45:88:00:2f:79:4e:dc:
                    75:db:ab:bb:8b:08:6b:4d:e2:c7:53:b3:b8:24:81:
                    66:89:a4:f3:84:eb:83:d2:2e:f3:f6:8e:24:78:1d:
                    75:f4:88:01:8f:dc:62:5e:fb:b1:ac:66:16:29:84:
                    08:43:27:61:4e:0d:bb:f0:45:2d:88:f3:c9:88:85:
                    8b:60:f4:32:8d:84:fe:9e:d0:37:44:7c:12:69:17:
                    d4:15:f8:8e:cd:02:5a:82:81:1a:9e:ff:dd:45:7d:
                    99:1c:36:5a:78:43:4a:d3:48:a9:ca:b2:79:81:72:
                    d8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:e2:07:12:31:76:ee:bb:ae:8d:91:d7:f4:8d:85:fb:42:59:
         b0:9f:06:a4:9d:1f:98:58:42:3d:70:fa:f2:a5:6d:61:86:6f:
         24:02:56:57:7a:d6:cc:0c:f7:a5:4d:d4:41:6e:ec:ef:22:19:
         fd:2c:77:0c:38:39:a0:54:c8:a8:b6:60:0a:47:66:f1:21:08:
         e7:6d:94:4b:e8:ee:c0:b4:3d:ac:50:27:92:47:fc:44:8c:7a:
         4c:35:8b:dc:70:e8:b1:5d:58:fb:ca:d3:34:22:79:a2:12:00:
         d2:dd:03:4c:28:73:f8:60:c3:19:a8:95:36:6e:bd:ed:26:ae:
         9a:8c:9b:ff:2d:1b:20:d1:d1:87:a8:af:57:31:05:e3:ff:8f:
         20:a9:8e:ef:2a:69:2a:6b:a0:f8:97:68:86:9e:ce:7d:97:07:
         a8:6a:e6:30:21:03:e3:f3:7d:29:6d:28:21:5b:a5:d7:7c:9d:
         09:4f:4b:51:b5:b6:77:48:90:35:d7:76:76:33:b2:2e:a7:a9:
         e7:d3:75:85:34:a6:f4:c4:73:07:d9:8b:d1:b6:da:69:7a:49:
         46:5c:71:f7:66:f8:41:8e:23:be:82:a8:26:5f:f3:f6:50:87:
         9e:7f:73:ef:e4:da:eb:f0:57:ed:a1:fc:05:33:b1:ea:81:37:
         d5:d9:16:af
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUUN4uqCIpZOorPHFbBVjKgZ45vY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzExMjUwNzI0MTVaFw0yNDExMjMwNzI5MTVaMDMxMTAvBgNV
BAMTKDYzNUZCOUMzOUEyRkIwRkIwMUY4RjQxMzBDOEEzRkZGQjdFNkY1NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Q0eO7dc8mmBm3roKhH+iEyJZ
p1mHMBMw3QI03dwQSL1aY7CQ5ZC+7bcZbgCj5fFHJ9QCkcxwDLtx4uDQVP+Jasaj
4hbLjt0xpG1Iqx6GW8of+rAknGt86Hd7qkJM1mdFFJXjDMofDWHn9fAZXybzU6No
nIjM4ZB86z5qF0KWGwliwbkU+NW2a0RYJ16JRYgAL3lO3HXbq7uLCGtN4sdTs7gk
gWaJpPOE64PSLvP2jiR4HXX0iAGP3GJe+7GsZhYphAhDJ2FODbvwRS2I88mIhYtg
9DKNhP6e0DdEfBJpF9QV+I7NAlqCgRqe/91FfZkcNlp4Q0rTSKnKsnmBctg1AgMB
AAGjggLSMIICzjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjX7nDmi+w+wH4
9BMMij//t+b1RjAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjRjNzU3
ZC0zYzYzLTRhMGEtYjBkOS00MWUwZGVjM2U5MjkvMC8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q2NGM3
NTdkLTNjNjMtNGEwYS1iMGQ5LTQxZTBkZWMzZTkyOS8wLzYzNUZCOUMzOUEyRkIw
RkIwMUY4RjQxMzBDOEEzRkZGQjdFNkY1NDYubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACoKYEQwDQYJKoZIhvcNAQELBQADggEBAGXiBxIxdu67ro2R1/SNhftCWbCf
BqSdH5hYQj1w+vKlbWGGbyQCVld61swM96VN1EFu7O8iGf0sdww4OaBUyKi2YApH
ZvEhCOdtlEvo7sC0PaxQJ5JH/ESMekw1i9xw6LFdWPvK0zQieaISANLdA0woc/hg
wxmolTZuve0mrpqMm/8tGyDR0Yeor1cxBeP/jyCpju8qaSproPiXaIaezn2XB6hq
5jAhA+PzfSltKCFbpdd8nQlPS1G1tndIkDXXdnYzsi6nqefTdYU0pvTEcwfZi9G2
2ml6SUZccfdm+EGOI76CqCZf8/ZQh55/c+/k2uvwV+2h/AUzseqBN9XZFq8=
-----END CERTIFICATE-----