Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
File:                     C646A4311598BE4C0EABD4E8817C773AACCFA862.cer (raw, json)
Hash identifier:          yNYSP0Rei/Kny8Jg1c7w6mLj6JVq4a8hDOpJF1Y4LTg=
Subject key identifier:   C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       70D8B2DE239EC521BFDB8A879D824F64BC443578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.mft
caRepository:             rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 10:16:54 +0000
Certificate not after:    Thu 27 Jun 2024 10:21:54 +0000
Subordinate resources:    IP: 2a05:dfc2::/31

Validation:               Failed, certificate revoked on Sat 20 Jan 2024 19:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d8:b2:de:23:9e:c5:21:bf:db:8a:87:9d:82:4f:64:bc:44:35:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jun 29 10:16:54 2023 GMT
            Not After : Jun 27 10:21:54 2024 GMT
        Subject: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:4c:ce:a3:f6:57:35:2a:97:9a:11:93:cc:
                    44:98:14:d7:95:b9:eb:48:04:c0:9b:bb:ed:76:72:
                    d9:36:b3:6a:8a:ca:81:53:35:5e:5b:a9:9c:f1:d1:
                    50:b7:e0:b8:92:23:6e:23:f7:f3:d6:1d:68:24:67:
                    6f:42:b7:84:b9:c3:50:4e:a8:be:fe:84:71:cb:07:
                    6c:90:18:2e:fb:db:7f:45:6e:3d:34:39:fc:a7:9c:
                    70:0e:70:a1:83:0c:d9:b2:5e:07:2b:54:c2:ca:13:
                    7a:e1:ad:fa:53:ef:86:b4:4b:39:1c:8d:01:fc:fa:
                    95:f4:af:82:99:9f:0f:4d:bd:1e:92:01:30:34:f1:
                    52:42:80:cd:1c:0b:a0:b3:3b:07:c7:7c:7a:17:21:
                    5c:52:63:62:68:bf:65:10:5e:96:00:78:0f:d2:31:
                    ac:2b:81:6f:77:c0:f2:c5:76:e0:2c:90:72:9b:97:
                    4d:c2:7b:2c:bd:ff:70:82:fe:91:96:15:d4:75:24:
                    4d:5d:f1:fb:59:07:09:6b:17:e6:4b:b0:ab:06:0d:
                    7c:1f:5d:8a:1f:ed:d7:92:ee:e7:b8:de:62:e9:c0:
                    93:ab:45:14:34:44:47:33:78:09:31:96:4f:09:e6:
                    c7:1f:a8:61:37:42:25:16:c9:8c:31:ea:a9:2d:7f:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc2::/31

    Signature Algorithm: sha256WithRSAEncryption
         af:a2:67:2b:93:8d:43:ec:90:86:43:cf:97:7e:ba:e3:14:5b:
         35:78:d3:b2:e2:0a:57:e2:7e:c9:b7:58:25:0a:54:c3:4c:c4:
         2e:5f:00:a7:4f:19:5a:ef:7b:23:a7:87:d7:e0:0d:9b:6b:c9:
         fc:fd:3e:dd:ad:6d:5a:e6:dc:40:f2:0b:26:89:c2:ee:e4:1f:
         8a:b2:81:d1:56:b8:46:d6:dd:b1:d6:39:9e:ba:4e:77:16:c8:
         0f:f5:a5:00:58:0a:ae:ee:c1:22:62:e9:11:a6:23:ea:48:24:
         d4:78:e6:ad:3a:ae:5a:bb:91:75:0f:27:91:51:27:72:40:17:
         b1:5a:5a:cf:18:3e:07:56:96:65:5f:2b:3f:f6:7f:ec:98:52:
         fd:20:f4:12:18:4e:47:bc:90:46:8b:e7:27:4e:a4:79:9e:21:
         1c:11:6d:f0:d1:10:73:d2:a3:b4:49:fa:d1:a0:24:ee:db:cc:
         27:4e:cc:ce:3c:59:f4:2b:7a:98:19:0a:15:c4:91:bd:c0:56:
         d0:81:2f:d7:7c:0f:d5:d9:48:39:9b:df:b4:bc:ee:34:e4:8b:
         71:a6:38:90:ce:9f:b5:03:d5:f6:16:2f:23:83:e4:2c:11:ec:
         cf:61:a5:ce:9d:5d:06:75:1b:3b:a6:d2:cf:ed:25:dc:68:0f:
         e2:82:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----