Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AE7F8F6EC57543883773B74A17CE78BF48027D9E.cer
File:                     AE7F8F6EC57543883773B74A17CE78BF48027D9E.cer (raw, json)
Hash identifier:          7YdrfYCWnDl92gg6+KkmX4H1z3IJRUgqFaJ3q7nr8xs=
Subject key identifier:   AE:7F:8F:6E:C5:75:43:88:37:73:B7:4A:17:CE:78:BF:48:02:7D:9E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       621527DF1B9AE61C9A3D20B40820AC6773954E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/AE7F8F6EC57543883773B74A17CE78BF48027D9E.mft
caRepository:             rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 15:45:19 +0000
Certificate not after:    Tue 02 Apr 2024 15:50:19 +0000
Subordinate resources:    IP: 2a05:dfc2::/31

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:15:27:df:1b:9a:e6:1c:9a:3d:20:b4:08:20:ac:67:73:95:4e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Apr  4 15:45:19 2023 GMT
            Not After : Apr  2 15:50:19 2024 GMT
        Subject: CN=AE7F8F6EC57543883773B74A17CE78BF48027D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:3e:7e:dd:25:37:45:c6:29:c9:b8:5e:12:
                    7d:80:5a:b5:25:07:6e:c4:c5:19:f1:12:c7:85:e8:
                    e8:29:b7:54:06:a0:4d:36:7b:32:ad:26:43:f8:7f:
                    68:1a:20:21:40:06:86:e7:9d:0b:fe:b7:fd:ff:6e:
                    a8:d2:19:6e:83:8f:e4:5e:1f:90:5d:90:c3:5b:ad:
                    73:09:8e:18:77:2f:d7:fb:49:8b:76:26:a5:3b:e6:
                    e9:de:15:34:1c:bc:ab:27:3f:c2:e6:cf:f2:67:15:
                    e6:ed:ab:29:ce:cf:2d:b3:e8:b4:95:da:ab:25:34:
                    51:5d:be:be:60:07:80:b6:ac:4d:2e:4c:59:01:3a:
                    7b:30:e9:10:9b:89:ba:fe:c2:50:a0:45:cf:a6:dc:
                    8d:af:a4:d1:86:7b:fa:bb:16:5e:71:92:f7:20:cb:
                    32:21:4b:9e:19:ae:53:37:8c:e8:9d:18:05:f4:08:
                    e8:4e:d2:33:77:de:a4:b8:60:96:cd:c0:3c:6a:b4:
                    3b:07:ca:0a:c7:ed:43:7c:9d:e3:3d:d7:0c:43:fb:
                    fe:6a:fb:b8:5b:4f:95:5a:47:ac:4c:dd:4f:7d:84:
                    27:fd:d5:f4:2a:54:06:5f:5a:59:e1:7a:3c:2e:32:
                    ac:ed:ba:e7:f2:89:db:a3:87:e6:17:b9:6d:99:67:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:7F:8F:6E:C5:75:43:88:37:73:B7:4A:17:CE:78:BF:48:02:7D:9E
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/AE7F8F6EC57543883773B74A17CE78BF48027D9E.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc2::/31

    Signature Algorithm: sha256WithRSAEncryption
         81:bc:65:2c:f6:47:27:a3:cb:0b:24:82:64:48:60:cd:7b:c1:
         dc:8c:5c:59:eb:bd:5c:f6:5e:6f:46:66:72:60:41:18:89:2d:
         ac:59:e3:07:1f:5a:21:e0:b5:f0:4f:8d:5e:a2:fe:0f:d1:55:
         1e:fe:5f:9a:76:d5:48:bb:86:45:e2:cf:78:61:e4:0d:26:f9:
         2c:87:06:6e:41:b8:d6:b0:bd:b2:b3:9f:81:d8:c0:30:fb:b1:
         3c:f5:8f:b6:47:e7:ee:31:15:5c:92:25:12:07:6f:e9:47:66:
         ef:57:33:1b:52:cf:f8:00:91:5d:e9:ee:7d:05:5c:9a:b4:39:
         bc:32:62:8a:d3:82:55:0a:d9:cc:30:57:3c:18:e5:33:25:2d:
         76:f7:cb:fc:f1:d7:82:64:82:a5:5b:6b:be:6f:81:f9:d8:7f:
         a1:f4:62:0c:1e:76:a3:d3:97:ee:0c:a9:9f:b3:d0:96:e2:c3:
         0c:80:86:6d:48:62:fc:ee:e5:ed:33:06:f6:5f:d6:20:9d:55:
         d7:4e:9a:a8:fe:26:4a:65:9e:d2:32:1b:ba:ba:d2:83:ea:ed:
         0c:27:7b:2c:c6:8b:4e:86:9e:6f:21:55:a7:d3:78:44:4a:d2:
         54:e6:70:f9:92:a0:95:4a:c2:d5:2c:c1:01:b7:8a:9b:aa:47:
         98:55:6c:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUYhUn3xua5hyaPSC0CCCsZ3OVToswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzA0MDQxNTQ1MTlaFw0yNDA0MDIxNTUwMTlaMDMxMTAvBgNV
BAMTKEFFN0Y4RjZFQzU3NTQzODgzNzczQjc0QTE3Q0U3OEJGNDgwMjdEOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXz5+3SU3RcYpybheEn2AWrUl
B27ExRnxEseF6Ogpt1QGoE02ezKtJkP4f2gaICFABobnnQv+t/3/bqjSGW6Dj+Re
H5BdkMNbrXMJjhh3L9f7SYt2JqU75uneFTQcvKsnP8Lmz/JnFebtqynOzy2z6LSV
2qslNFFdvr5gB4C2rE0uTFkBOnsw6RCbibr+wlCgRc+m3I2vpNGGe/q7Fl5xkvcg
yzIhS54ZrlM3jOidGAX0COhO0jN33qS4YJbNwDxqtDsHygrH7UN8neM91wxD+/5q
+7hbT5VaR6xM3U99hCf91fQqVAZfWlnhejwuMqztuufyidujh+YXuW2ZZ2n9AgMB
AAGjggKOMIICijAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuf49uxXVDiDdz
t0oXzni/SAJ9njAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIH8BggrBgEFBQcBCwSB7zCB7DA+BggrBgEFBQcwBYYycnN5bmM6
Ly9ycGtpLnphcHBpZWhvc3QuY29tL3JlcG8vSEFaRUxfVUlEXzE4ODYwLzAwawYI
KwYBBQUHMAqGX3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hBWkVM
X1VJRF8xODg2MC8wL0FFN0Y4RjZFQzU3NTQzODgzNzczQjc0QTE3Q0U3OEJGNDgw
MjdEOUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczovL3Jwa2kuemFwcGllaG9zdC5j
b20vcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQEqBd/CMA0GCSqGSIb3DQEB
CwUAA4IBAQCBvGUs9kcno8sLJIJkSGDNe8HcjFxZ671c9l5vRmZyYEEYiS2sWeMH
H1oh4LXwT41eov4P0VUe/l+adtVIu4ZF4s94YeQNJvkshwZuQbjWsL2ys5+B2MAw
+7E89Y+2R+fuMRVckiUSB2/pR2bvVzMbUs/4AJFd6e59BVyatDm8MmKK04JVCtnM
MFc8GOUzJS1298v88deCZIKlW2u+b4H52H+h9GIMHnaj05fuDKmfs9CW4sMMgIZt
SGL87uXtMwb2X9YgnVXXTpqo/iZKZZ7SMhu6utKD6u0MJ3ssxotOhp5vIVWn03hE
StJU5nD5kqCVSsLVLMEBt4qbqkeYVWwg
-----END CERTIFICATE-----