Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F27941BF58751CDB1302EAF661DCF88D1CF5D49F.cer
File:                     F27941BF58751CDB1302EAF661DCF88D1CF5D49F.cer (raw, json)
Hash identifier:          oNr8n/hGYt+YcfsWmZa0mCRAy8nVTlySTPJwphh3YeE=
Subject key identifier:   F2:79:41:BF:58:75:1C:DB:13:02:EA:F6:61:DC:F8:8D:1C:F5:D4:9F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       54C4CD7C1E81E9963F98C40FF8645F9E2C19B907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/F27941BF58751CDB1302EAF661DCF88D1CF5D49F.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 19 Jan 2024 17:34:46 +0000
Certificate not after:    Fri 17 Jan 2025 17:39:46 +0000
Subordinate resources:    IP: 2a05:dfc2::/31

Validation:               Failed, certificate revoked on Tue 13 Feb 2024 13:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c4:cd:7c:1e:81:e9:96:3f:98:c4:0f:f8:64:5f:9e:2c:19:b9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan 19 17:34:46 2024 GMT
            Not After : Jan 17 17:39:46 2025 GMT
        Subject: CN=F27941BF58751CDB1302EAF661DCF88D1CF5D49F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:d9:84:a1:9d:0b:2e:28:ba:ed:d3:f0:12:
                    b0:76:c5:97:a3:41:6c:3f:d4:77:1e:ae:7e:7e:63:
                    3f:05:d6:62:aa:94:44:88:63:20:ce:19:98:97:c9:
                    e7:e9:2a:92:a4:cc:ee:25:b5:4b:4b:a2:67:ec:a0:
                    65:38:5a:95:38:36:fe:62:18:e8:d7:2c:48:6a:48:
                    0b:98:94:57:e9:c6:7e:0a:7f:a8:7c:e6:fb:70:0b:
                    df:02:68:80:4b:b7:7a:b7:af:ec:39:cf:7d:80:1b:
                    0e:d3:bb:a1:d5:a5:89:70:fc:b2:e0:50:70:92:26:
                    88:97:14:9f:0a:93:2c:2f:70:02:ec:15:b9:4a:0f:
                    be:2a:92:4b:24:40:8a:e4:ac:c9:3c:80:52:eb:38:
                    77:81:0f:57:fc:a4:b4:c2:09:dd:68:c4:f1:2a:ba:
                    41:21:29:e8:37:b6:0c:d6:28:f3:6c:e1:f1:d9:9a:
                    70:cb:50:34:dd:95:f4:63:59:36:45:60:bb:00:d5:
                    12:a5:4e:20:d4:74:df:02:ab:a0:72:e2:5a:ca:27:
                    ae:ce:d9:91:8d:7b:63:47:6e:f3:57:0a:ea:12:3b:
                    2c:10:df:ca:6b:70:ab:99:3d:b9:2d:86:f2:59:76:
                    b9:13:9a:0a:ac:1f:b2:da:0c:f3:da:44:99:71:95:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:79:41:BF:58:75:1C:DB:13:02:EA:F6:61:DC:F8:8D:1C:F5:D4:9F
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/0/F27941BF58751CDB1302EAF661DCF88D1CF5D49F.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc2::/31

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:71:ee:ad:e4:dc:50:dc:23:e6:98:f0:05:7f:df:47:9c:
         e0:02:68:1f:9e:26:da:5e:ad:ef:e5:4b:ee:36:26:86:17:34:
         ec:6c:d0:cd:76:53:60:9e:6a:4f:7e:2f:9b:b3:20:09:f9:1e:
         fc:ee:8e:d9:35:b3:5c:ab:62:18:3c:c7:3e:41:8c:1d:fc:3b:
         18:46:6a:81:9a:51:f1:e7:bf:1d:66:03:4b:79:0b:d0:a4:02:
         a8:28:f8:93:9d:d1:1c:fa:66:52:74:36:a8:91:bd:2a:68:bb:
         07:bd:7f:12:b1:18:6a:ff:4a:29:24:1c:dd:46:77:90:28:3c:
         0a:af:08:0e:2a:2c:15:f6:6d:38:b1:d8:7d:f0:e6:99:51:85:
         56:10:83:ec:4f:08:9c:e6:1d:2c:e7:ec:c7:d7:fa:4a:ec:58:
         89:10:0d:d8:57:16:32:6d:f5:59:e6:ef:29:00:bd:7a:4f:40:
         51:8b:d1:56:e7:98:34:b6:e7:ad:90:6d:b2:8c:81:8f:30:5e:
         e4:76:32:e0:6d:d6:1f:e7:d2:c8:87:b2:ca:75:b0:df:3f:ff:
         fc:e4:57:09:08:0c:ea:3a:a3:96:6b:51:3b:4b:07:f1:15:ce:
         fc:cc:01:e3:a3:59:a7:19:58:18:08:37:78:e8:d1:d7:8a:7f:
         71:54:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----