Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/E6B7BFB0EB42000767C2A157C7E3EB1AD36A1EE0.cer
File:                     E6B7BFB0EB42000767C2A157C7E3EB1AD36A1EE0.cer (raw, json)
Hash identifier:          F2qWgsQH+2wJPyhV8s59MqivWrC81Yp+oX5srIPRUuw=
Subject key identifier:   E6:B7:BF:B0:EB:42:00:07:67:C2:A1:57:C7:E3:EB:1A:D3:6A:1E:E0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       613AB5333D8EC9F1462B68E7633DEFECF1CEFB0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E6B7BFB0EB42000767C2A157C7E3EB1AD36A1EE0.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 26 Nov 2023 11:00:17 +0000
Certificate not after:    Sun 24 Nov 2024 11:05:17 +0000
Subordinate resources:    IP: 2a0a:6044::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3a:b5:33:3d:8e:c9:f1:46:2b:68:e7:63:3d:ef:ec:f1:ce:fb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov 26 11:00:17 2023 GMT
            Not After : Nov 24 11:05:17 2024 GMT
        Subject: CN=E6B7BFB0EB42000767C2A157C7E3EB1AD36A1EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:d2:b7:6b:52:00:a3:69:9b:90:c6:1c:80:
                    fb:7b:f4:71:7c:21:32:55:26:e2:57:50:eb:0a:88:
                    5c:b6:d3:74:35:5b:7b:93:df:79:17:71:20:1a:19:
                    50:ad:07:2f:35:e6:54:1b:eb:cb:ac:19:85:3f:5a:
                    72:bd:1e:bd:27:e7:d6:9a:c3:e4:5f:1c:0c:9e:12:
                    2e:a0:fe:c7:1a:d5:e1:8c:8a:c1:2f:1e:b4:48:e5:
                    f6:6d:28:75:88:69:97:04:78:73:2a:fc:fa:ee:15:
                    84:83:c0:8f:7b:6c:c2:7f:70:14:58:23:6a:a7:71:
                    28:5f:f7:92:cd:eb:75:4a:3f:cb:1c:e1:10:3e:b7:
                    42:6f:ae:a2:52:20:4d:01:c3:72:f3:16:7b:c7:00:
                    08:57:f3:b0:f1:7a:c7:cb:cd:7c:e5:dd:99:6c:56:
                    7a:d9:0a:05:67:b1:9a:c9:53:5e:8f:3d:f7:03:94:
                    fd:35:b2:8b:1f:1c:5b:5f:68:31:af:ce:19:46:bf:
                    9e:e8:ff:45:c0:7d:60:c7:e0:18:83:ee:d7:66:90:
                    ef:a1:81:d7:a4:95:91:93:22:fc:df:79:f6:09:10:
                    a3:9f:0e:54:eb:e5:30:d4:7c:4a:cf:cb:f1:c3:16:
                    ac:2f:4b:2f:e0:21:4d:54:a5:77:ed:5a:d5:87:a2:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:B7:BF:B0:EB:42:00:07:67:C2:A1:57:C7:E3:EB:1A:D3:6A:1E:E0
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E6B7BFB0EB42000767C2A157C7E3EB1AD36A1EE0.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:d9:ec:27:c6:60:cc:42:cf:31:6f:f2:4f:e3:a1:16:44:b2:
         9d:54:7d:2e:61:21:09:dc:40:ce:f0:9f:08:b9:6f:7f:15:d0:
         25:71:80:32:72:de:fc:65:ee:03:d6:f6:b9:ce:b3:fa:d1:ee:
         59:94:4b:89:4c:bd:6f:49:f4:1e:31:e4:c2:50:90:6c:f1:cb:
         91:91:25:e2:b3:91:0f:17:36:bf:03:c4:a3:9a:26:e8:43:11:
         fd:7f:65:6a:86:c5:61:66:f8:77:12:ed:ff:c0:12:8d:06:32:
         0c:4a:5c:79:f9:0f:8b:6a:ad:75:76:7c:92:43:32:64:83:f6:
         48:e1:4e:47:2c:f8:0f:1f:76:5e:c5:7b:2d:64:5a:26:8a:89:
         db:ae:65:42:b5:1e:37:c6:4b:83:9a:7b:9c:55:2d:56:50:93:
         be:78:3a:53:b0:c9:37:98:ce:6d:7d:76:7a:4e:49:19:7f:0e:
         f4:8f:fe:17:a7:d4:cc:37:3c:99:ef:50:36:27:0c:dc:30:f1:
         6d:d6:9c:92:27:1e:c0:f1:f7:39:34:69:52:16:d3:32:02:19:
         8b:b9:c1:b0:31:2f:46:8f:86:e4:5f:00:3c:a1:1b:8f:f2:5a:
         43:c1:e8:95:7d:dd:7d:f3:f3:2f:fc:85:83:9e:bb:41:4f:86:
         14:f6:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----