Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
File:                     B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer (raw, json)
Hash identifier:          yEMa4Pn5Du2UmgaRX5hdkFn8tsI7izNiLK2CFgBhaWo=
Subject key identifier:   B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       74E984FCF18954F54D3CE5566129D409F6B25B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.mft
caRepository:             rsync://rpki.co/repo/Cube/3/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 07:22:52 +0000
Certificate not after:    Wed 23 Apr 2025 07:27:52 +0000
Subordinate resources:    IP: 2a06:a005:2050:: -- 2a06:a005:208f:ffff:ffff:ffff:ffff:ffff
                          IP: 2a06:a005:24e0::/44

Validation:               Failed, certificate revoked on Sun 26 May 2024 22:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e9:84:fc:f1:89:54:f5:4d:3c:e5:56:61:29:d4:09:f6:b2:5b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Apr 24 07:22:52 2024 GMT
            Not After : Apr 23 07:27:52 2025 GMT
        Subject: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:d1:d6:cc:98:dd:68:40:4c:f0:0d:9c:59:
                    c2:08:01:03:bd:9b:d3:50:e6:d5:38:d7:81:8a:d1:
                    40:2c:23:40:f6:86:b4:42:9f:e9:b4:1b:9b:b0:45:
                    11:69:4a:26:3a:10:1f:aa:ba:31:02:07:01:05:9e:
                    0a:a0:b2:e7:94:9b:ae:9e:55:ca:30:78:8b:14:8e:
                    16:a1:4f:6a:ea:3c:5b:15:b8:ed:13:6e:1c:c6:6b:
                    bb:5b:6c:31:dd:d0:5e:55:dd:64:15:70:62:11:70:
                    11:c4:85:ed:a7:d7:1e:f8:22:37:8a:3d:bd:63:51:
                    4f:03:db:0f:af:a3:c3:64:d4:68:42:eb:8b:9b:be:
                    7d:09:68:ca:72:1d:9f:14:db:ec:32:ef:1a:17:79:
                    7a:8c:5c:cb:27:47:4e:d4:2f:71:9c:0a:c6:52:97:
                    2d:58:82:19:97:ec:4c:9b:c2:01:ed:56:39:5c:83:
                    a6:89:59:c7:94:47:4b:31:45:2b:d9:76:29:ed:cc:
                    26:61:d8:62:20:16:4f:cc:93:e4:f6:76:31:2b:01:
                    23:e4:b1:11:74:94:a2:6c:d5:7f:ec:70:be:bd:40:
                    8f:a0:f7:33:f7:37:f1:bb:51:7e:ab:de:f3:f4:f8:
                    7c:7e:6a:79:7f:15:78:2a:74:20:81:a3:9b:c2:b7:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Cube/3/
                RPKI Manifest - URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2050::-2a06:a005:208f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:24e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:79:ec:b2:c3:21:62:a0:03:a0:ae:ec:69:62:7b:d4:60:70:
         39:bf:34:f9:ac:ba:ec:89:0f:30:c7:02:06:74:b7:aa:a9:dc:
         6f:bc:d4:64:e6:da:2e:b4:e4:23:b5:2d:12:af:1f:c2:a1:f4:
         04:7f:cb:61:e0:25:65:b3:fb:86:9e:92:5d:42:d4:96:f1:2f:
         55:24:93:48:f5:1c:d5:4b:df:7d:89:05:a2:2f:c1:3b:db:8b:
         24:bc:01:ae:92:a8:a4:50:f7:94:91:39:0c:29:60:c5:1f:3c:
         14:f8:c4:71:3f:e0:b0:72:8b:23:34:ff:17:be:f4:1a:67:b7:
         fb:3f:12:c4:4a:a7:5c:7f:d6:35:83:fa:79:d0:66:04:a2:84:
         90:18:40:be:62:45:16:bb:5b:72:7d:d0:70:d0:9c:e9:ee:8d:
         2e:d7:a7:fa:2e:84:81:56:83:b6:3a:b8:3d:da:59:9b:ce:4d:
         56:58:50:d9:61:4e:b9:d3:bd:0f:5a:9e:7b:19:8f:28:3b:33:
         2e:ca:83:59:03:a3:5c:89:11:76:9d:d0:ee:59:c7:b0:1a:65:
         ff:43:a7:6f:b6:28:f7:3c:ad:4d:be:3e:6a:e1:c1:e4:7d:e9:
         3c:11:8f:53:81:df:13:3b:79:64:c9:75:75:93:1e:a9:2e:6b:
         f8:56:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----