Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer
File:                     C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer (raw, json)
Hash identifier:          1t+ifBpggSbuIP/OKRAxJWU5SVzfyDRzBFdI5qwR74w=
Subject key identifier:   C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5233959B74406C3A895FE3A877F50EB05D92817F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 06 May 2023 13:43:45 +0000
Certificate not after:    Sat 04 May 2024 13:48:45 +0000
Subordinate resources:    IP: 2a06:9f80::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:33:95:9b:74:40:6c:3a:89:5f:e3:a8:77:f5:0e:b0:5d:92:81:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: May  6 13:43:45 2023 GMT
            Not After : May  4 13:48:45 2024 GMT
        Subject: CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:b8:a7:23:0c:6a:88:12:cc:21:a6:12:86:
                    12:73:b4:b6:69:8b:5d:7e:d2:e2:ab:ef:f0:a3:35:
                    d3:85:b3:79:36:5c:68:ff:db:d3:45:0f:71:b2:72:
                    74:a0:3c:c2:c4:26:ed:e2:42:7d:37:30:d1:6e:26:
                    a0:d1:0d:05:13:65:87:2d:6a:42:a5:eb:b3:78:73:
                    4d:89:5b:4b:33:44:ac:16:4a:60:45:a0:87:12:45:
                    a3:dc:6d:99:0e:2c:0c:31:10:86:0b:53:b9:23:58:
                    b9:d7:b8:e3:38:f1:ea:2e:92:58:8d:b1:78:62:70:
                    00:64:e6:8c:d0:67:c5:70:65:90:c7:80:98:02:91:
                    e2:bc:7b:50:cb:51:69:7c:dd:c2:de:ef:35:04:0e:
                    62:1a:f7:74:86:56:da:ba:ab:6d:af:2f:28:4e:3e:
                    1e:19:b9:e7:b1:14:86:5e:db:63:02:98:6b:90:e3:
                    e0:4d:6e:87:cc:fe:52:83:63:93:7c:5f:4b:d9:e7:
                    d5:95:fc:10:ff:6d:92:87:2c:06:22:32:fe:b0:77:
                    b4:b2:80:4d:f2:d3:6f:83:c1:fd:ca:67:26:7d:76:
                    68:04:fe:a0:eb:c6:5c:49:9e:1f:5c:ef:5f:e9:9e:
                    0a:22:62:8c:a3:fe:2f:b9:a8:a2:93:0f:8a:9e:02:
                    5f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:33:99:39:6d:8a:8a:6e:81:77:43:6b:31:d5:7f:dc:ee:9c:
         54:7a:c0:03:e3:0b:e3:ba:bb:b9:5b:18:ac:d9:f3:71:6b:01:
         cf:ff:8e:ec:4b:78:9b:b3:cb:f3:fb:26:c3:c2:2f:67:59:5e:
         cb:41:5b:26:6d:0d:f2:6d:56:d4:bb:2b:2e:8a:6d:db:0a:d6:
         17:ad:9d:d8:92:c1:04:a4:e8:f7:b5:12:57:55:11:81:c3:89:
         15:a3:38:4c:6e:05:1b:b0:c7:23:43:7f:34:78:8a:f1:96:43:
         00:68:9f:80:87:74:38:79:fc:b9:05:a9:7a:b9:a8:ea:07:5f:
         26:7d:55:30:f8:02:6a:bd:ca:9b:ee:69:05:a8:fc:c9:47:99:
         68:d7:c9:f1:fd:0d:ff:e3:7e:8a:c8:08:5e:44:bd:97:12:17:
         a2:90:08:9c:6f:7c:95:8d:6b:6c:e1:94:ec:c9:55:40:9c:b3:
         a4:74:37:f9:b7:3d:9e:be:b7:62:ee:12:68:cf:2c:e8:64:b8:
         e1:04:21:02:35:44:00:36:5d:91:75:42:15:d2:a1:c6:98:bd:
         2e:c1:1b:7e:cb:f2:e7:59:bf:1b:7f:d1:01:ad:36:60:1a:d5:
         3b:cf:a2:2f:ec:d8:b4:30:df:9d:a4:f5:74:d4:93:90:44:91:
         3c:fa:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----