Certificate

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
File:                     B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer (raw, json)
Hash identifier:          PHYsMSvC/adk+6piXznt49QF6c0KUETA8S3EyTiLEzE=
Subject key identifier:   B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       59B97FD60BD3B494FDB9C75A1AE7A1F7CAADE673
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/1
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 18 Sep 2023 08:26:40 +0000
Certificate not after:    Mon 16 Sep 2024 08:31:40 +0000
Subordinate resources:    IP: 2a07:54c5::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b9:7f:d6:0b:d3:b4:94:fd:b9:c7:5a:1a:e7:a1:f7:ca:ad:e6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Sep 18 08:26:40 2023 GMT
            Not After : Sep 16 08:31:40 2024 GMT
        Subject: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6f:29:0f:f5:cd:81:61:e1:67:41:b9:8c:b1:
                    46:b4:89:76:ca:9c:76:c7:ce:f1:9d:28:00:1e:5c:
                    84:9f:c6:f7:1e:64:03:b8:c7:69:18:c3:c0:51:af:
                    24:8d:8d:63:58:18:df:3a:84:44:a2:52:e8:7f:9e:
                    6b:05:be:f9:34:74:8d:d8:a4:f0:55:8f:44:74:3d:
                    3d:41:67:81:0b:4c:71:9b:8e:fa:d4:b8:29:ec:cf:
                    c3:0b:2a:15:66:95:be:5d:f2:0a:9a:b7:7b:4e:39:
                    b5:0a:fb:f4:de:ee:4a:0e:a5:44:26:b0:e7:5d:e6:
                    53:ff:29:88:cd:a6:ae:bd:4b:96:73:22:a5:89:02:
                    fe:94:82:e0:28:35:01:ca:31:bb:db:a4:4b:12:bc:
                    a8:35:2f:8d:0a:55:1e:bb:7b:e6:78:8f:9b:9f:10:
                    ec:f7:99:88:39:61:3f:06:ab:24:79:21:83:11:c0:
                    83:98:0a:ae:b1:42:81:0e:c2:8d:3e:3a:48:21:b9:
                    89:ea:42:02:83:d1:67:63:19:1b:87:7a:a7:f7:be:
                    4b:6f:0e:c7:89:be:84:8b:a5:88:5d:c1:24:ef:93:
                    a7:7b:e5:6f:69:05:c1:a0:e7:d3:58:14:8f:53:29:
                    38:69:42:1b:23:da:6c:11:9a:f9:c1:c9:cf:b2:0d:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/1
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5::/32

    Signature Algorithm: sha256WithRSAEncryption
         dd:7a:41:09:d4:d4:81:ef:56:1f:8a:43:97:c5:af:c5:b7:92:
         47:1f:dc:f5:14:28:ff:f9:53:29:bd:d8:b6:18:f3:bc:2e:b7:
         3f:49:d8:d7:25:f9:16:c1:0b:12:d0:75:e8:9a:da:0a:51:8e:
         65:14:64:d6:86:d5:f2:1f:59:ef:ca:98:f7:cb:26:a5:c7:d0:
         1c:3f:37:bd:12:52:5c:2b:05:01:c7:51:09:9f:e7:a2:70:e2:
         ba:30:13:6f:1b:7c:11:c9:17:63:d1:a0:c1:3a:a2:d7:3e:bb:
         ee:52:9c:18:2c:dc:28:23:2c:a4:f8:49:5d:0e:f1:34:36:ee:
         db:2c:b7:2b:48:32:61:77:52:e9:29:d0:9d:ac:19:64:39:c2:
         c3:07:ad:b9:90:f1:69:d4:5d:e4:b0:02:c6:fd:0e:d8:9f:74:
         0e:6e:b0:da:42:c3:18:6e:e9:fe:c0:a7:b3:9b:be:c2:16:a3:
         4f:db:4b:73:4a:9a:06:fd:87:f5:a1:e9:44:db:42:88:bb:e5:
         10:b9:34:e7:5b:b0:1b:58:01:4d:e6:5e:b1:2b:05:22:84:41:
         c7:07:2f:3b:99:1c:29:49:ae:5b:ae:cf:8d:bd:80:e9:d0:ee:
         86:c4:53:8d:b3:da:47:42:4b:d6:f1:d6:f1:b3:72:3f:80:68:
         19:1a:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----