Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/E503CC5A5D26FF716E38BEDE78C30E068EE38043.cer
File:                     E503CC5A5D26FF716E38BEDE78C30E068EE38043.cer (raw, json)
Hash identifier:          DruCPbXFcQWEXSbW1Rjoj/voTydq8Z/wkV5JG+s02fY=
Subject key identifier:   E5:03:CC:5A:5D:26:FF:71:6E:38:BE:DE:78:C3:0E:06:8E:E3:80:43
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       17BD3E0DE260D2F61A30525A1000626DE6B89C1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki.co/repo/August/13/E503CC5A5D26FF716E38BEDE78C30E068EE38043.mft
caRepository:             rsync://rpki.co/repo/August/13/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:43:00 +0000
Certificate not after:    Mon 20 May 2024 21:48:00 +0000
Subordinate resources:    IP: 2a05:dfc6::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bd:3e:0d:e2:60:d2:f6:1a:30:52:5a:10:00:62:6d:e6:b8:9c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: May 22 21:43:00 2023 GMT
            Not After : May 20 21:48:00 2024 GMT
        Subject: CN=E503CC5A5D26FF716E38BEDE78C30E068EE38043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:25:d7:8a:1b:b4:c5:82:1c:b8:8a:1d:c5:26:
                    d3:9e:87:90:e9:74:07:4b:81:ac:eb:9c:90:ac:7a:
                    8d:63:22:40:db:e5:e3:8e:04:2e:2f:d9:e1:d2:e0:
                    17:b3:08:58:45:3b:30:a7:f0:e1:b3:c4:18:7e:67:
                    e8:41:3a:b5:9a:5a:9a:e2:2c:ae:c5:21:6f:31:f1:
                    24:43:b8:3b:3d:f4:51:12:5a:60:b9:8b:92:02:1f:
                    73:1d:c5:9b:44:4b:89:59:02:1a:5a:29:59:84:7c:
                    96:25:b6:f5:a9:a0:4d:4f:cf:7f:4f:49:5d:0b:4b:
                    a1:22:06:0d:58:bc:e3:7a:40:5c:9b:62:a5:1d:0e:
                    45:c5:c8:d3:b0:34:04:4d:51:b9:68:db:25:07:c3:
                    1b:51:fa:d3:79:ca:1a:d1:a0:b8:4a:d3:16:9b:0d:
                    7e:fe:d3:83:bc:41:f2:08:de:bb:0a:e5:ed:6d:04:
                    26:ed:cb:7a:6d:13:81:0d:87:1a:26:38:59:7f:00:
                    7a:f0:63:ec:cd:ff:7a:ae:83:29:c1:95:fb:50:1a:
                    b3:ec:4d:22:f7:cc:3c:a6:08:31:3f:0d:f9:cb:f3:
                    94:f9:51:27:4c:04:a5:6f:17:fe:e9:d3:da:5e:ce:
                    34:e9:21:f3:d8:26:4b:77:82:73:0f:ef:97:8b:a0:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:03:CC:5A:5D:26:FF:71:6E:38:BE:DE:78:C3:0E:06:8E:E3:80:43
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/13/
                RPKI Manifest - URI:rsync://rpki.co/repo/August/13/E503CC5A5D26FF716E38BEDE78C30E068EE38043.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:8e:b3:6d:4c:79:25:5f:2f:34:e1:52:64:36:11:dc:18:fa:
         d7:de:58:3d:13:60:ac:8e:59:e8:84:47:20:0a:95:34:9b:c4:
         1d:01:11:36:04:be:45:5f:ae:8e:b1:24:d7:66:f5:ed:7f:7a:
         31:cb:3d:10:ee:28:0c:c8:74:25:c1:a5:7c:25:7b:70:07:8e:
         f4:3a:81:af:9c:a5:a2:d0:9a:19:89:c2:4a:2b:75:c8:a4:fc:
         6e:16:00:3f:a9:61:73:7f:2a:bc:3a:3a:c8:39:f9:bb:07:5f:
         2c:80:7d:e1:b1:19:09:46:02:f6:68:8e:6d:8a:c0:18:91:ff:
         dc:02:30:98:3d:4d:e7:56:69:b6:13:b1:c0:b8:5e:bd:db:82:
         76:19:35:bb:30:70:2b:e9:4d:32:d2:ae:db:06:ae:e7:cb:ff:
         2c:d3:ec:6f:a5:91:03:ca:41:f0:fc:b8:ba:73:39:0d:dc:8d:
         fa:dd:8d:03:5f:49:97:4b:6f:60:db:e3:45:ab:d4:17:b8:6f:
         f6:13:cf:ee:55:44:60:8e:02:64:ca:fe:16:8e:a5:62:5d:9b:
         db:c7:c6:a3:7d:3d:3d:83:79:44:d9:80:9a:80:8f:d1:cb:af:
         7c:0c:12:c9:97:e4:ba:51:c3:19:3b:b1:33:2e:ce:8b:5c:74:
         fd:43:de:c5
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUF70+DeJg0vYaMFJaEABibea4nBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzA1MjIyMTQzMDBaFw0yNDA1MjAyMTQ4MDBaMDMxMTAvBgNV
BAMTKEU1MDNDQzVBNUQyNkZGNzE2RTM4QkVERTc4QzMwRTA2OEVFMzgwNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJdeKG7TFghy4ih3FJtOeh5Dp
dAdLgazrnJCseo1jIkDb5eOOBC4v2eHS4BezCFhFOzCn8OGzxBh+Z+hBOrWaWpri
LK7FIW8x8SRDuDs99FESWmC5i5ICH3MdxZtES4lZAhpaKVmEfJYltvWpoE1Pz39P
SV0LS6EiBg1YvON6QFybYqUdDkXFyNOwNARNUblo2yUHwxtR+tN5yhrRoLhK0xab
DX7+04O8QfII3rsK5e1tBCbty3ptE4ENhxomOFl/AHrwY+zN/3qugynBlftQGrPs
TSL3zDymCDE/DfnL85T5USdMBKVvF/7p09pezjTpIfPYJkt3gnMP75eLoE8tAgMB
AAGjggJgMIICXDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTlA8xaXSb/cW44
vt54ww4GjuOAQzAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIHOBggrBgEFBQcBCwSBwTCBvjArBggrBgEFBQcwBYYfcnN5bmM6
Ly9ycGtpLmNvL3JlcG8vQXVndXN0LzEzLzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9y
cGtpLmNvL3JlcG8vQXVndXN0LzEzL0U1MDNDQzVBNUQyNkZGNzE2RTM4QkVERTc4
QzMwRTA2OEVFMzgwNDMubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAucnBr
aS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF38YwDQYJKoZIhvcN
AQELBQADggEBAAGOs21MeSVfLzThUmQ2EdwY+tfeWD0TYKyOWeiERyAKlTSbxB0B
ETYEvkVfro6xJNdm9e1/ejHLPRDuKAzIdCXBpXwle3AHjvQ6ga+cpaLQmhmJwkor
dcik/G4WAD+pYXN/Krw6Osg5+bsHXyyAfeGxGQlGAvZojm2KwBiR/9wCMJg9TedW
abYTscC4Xr3bgnYZNbswcCvpTTLSrtsGrufL/yzT7G+lkQPKQfD8uLpzOQ3cjfrd
jQNfSZdLb2Db40Wr1Be4b/YTz+5VRGCOAmTK/haOpWJdm9vHxqN9PT2DeUTZgJqA
j9HLr3wMEsmX5LpRwxk7sTMuzotcdP1D3sU=
-----END CERTIFICATE-----