Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
File:                     F6C069B14BA97AC6141837495668AE6C873FDFFE.cer (raw, json)
Hash identifier:          FOD0n8x7heWI+BTphdLLRWCcpGeVeJQGNAcQTWT/QIU=
Subject key identifier:   F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       71C1D36B4CE8BAF36EE6AFFF847F357B6092E2F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.mft
caRepository:             rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Sun 17 Sep 2023 18:50:52 +0000
Certificate not after:    Sun 15 Sep 2024 18:55:52 +0000
Subordinate resources:    IP: 2a07:54c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c1:d3:6b:4c:e8:ba:f3:6e:e6:af:ff:84:7f:35:7b:60:92:e2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Sep 17 18:50:52 2023 GMT
            Not After : Sep 15 18:55:52 2024 GMT
        Subject: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c6:69:ef:6d:9e:fc:d0:c3:dc:e7:b5:7b:7e:
                    04:56:2d:ee:6f:f8:3b:85:83:38:a7:3e:02:60:19:
                    25:4d:75:c9:66:b2:3d:3a:0f:f0:b0:3c:5d:57:e5:
                    4c:87:e7:e0:eb:c1:e1:b0:ad:53:bc:6e:a3:1e:ab:
                    de:69:cc:fd:89:f3:ce:9c:aa:35:21:7f:72:6a:1e:
                    78:53:0f:fe:ae:7a:cc:25:32:9c:92:ae:88:96:e3:
                    3d:20:9e:aa:80:5e:77:f1:b9:ec:f5:71:11:31:5b:
                    8f:cb:92:db:bb:87:2e:dc:6e:32:8b:3d:63:d7:0f:
                    2d:a9:de:eb:22:5d:3f:4f:d4:7b:d4:e6:c1:00:5d:
                    1c:23:19:cc:9c:f0:90:83:64:7d:89:f5:6b:95:9c:
                    d1:97:46:d4:c6:f2:c1:29:e2:27:88:15:ab:e0:32:
                    fd:62:09:f8:7e:72:6f:48:8e:5b:f7:ed:68:cb:4f:
                    5e:58:af:f0:7e:17:36:38:d3:2f:f0:9b:48:f0:31:
                    ce:13:ea:e1:62:0b:e2:5b:75:69:3e:08:79:b8:0d:
                    f0:40:d9:d3:34:a9:20:c5:9f:01:c6:b2:59:c2:10:
                    1d:00:ff:8c:c4:3f:ea:1d:d1:e2:5a:b8:98:12:1c:
                    c0:58:f3:a8:cf:e2:bf:32:02:92:4d:e6:d4:ae:ae:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a8:5a:e3:79:11:18:a7:8b:c4:a2:bc:c2:5c:45:6d:09:d7:c6:
         4e:a7:c3:d0:16:01:b6:4a:9e:3c:b1:33:23:8c:4d:99:8a:53:
         c0:e5:01:b9:dc:e8:fd:7a:30:63:61:a7:f7:cb:fc:a9:53:17:
         ce:4e:66:c3:7c:a1:b9:33:1e:98:59:d9:56:8d:a1:a3:41:8b:
         2d:68:fa:70:30:f9:83:18:03:16:5c:1f:cc:61:3a:d8:9e:b1:
         01:77:6c:b2:53:00:74:47:af:cb:99:60:b0:c7:29:a2:19:59:
         20:0c:28:34:cf:45:81:05:dc:95:7e:ca:db:62:5c:9d:0a:0a:
         90:36:d5:40:e7:4d:a5:f2:45:51:66:ef:2e:11:08:e1:41:65:
         c3:ba:5e:d1:19:4a:59:16:b1:3a:bb:c6:6a:79:8f:be:17:9b:
         51:a8:83:fe:51:ca:8d:8b:e0:1c:ac:cc:17:b7:0a:03:05:46:
         11:22:56:3d:8c:91:96:eb:da:dd:5c:d3:00:b4:48:3d:0f:a0:
         2d:db:90:b2:ce:4d:c6:8c:7e:7b:f8:5f:33:f4:67:2b:ad:42:
         22:0b:9e:53:74:46:ad:59:5b:ab:80:74:33:1b:bf:8c:19:8e:
         3a:88:8e:34:79:40:a8:79:84:b2:10:ca:03:a3:9f:dc:e6:a0:
         5a:ee:16:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----