Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.cer
File:                     B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.cer (raw, json)
Hash identifier:          F5PceaxUt0Z7PpBMoWuq5rfqfpZzjtmurWVs0aaAhNI=
Subject key identifier:   B4:9B:4B:DB:8E:9A:70:A9:39:99:CE:2B:38:AC:C7:CA:29:AF:58:49
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       270AAE946C333759B8E08D598ECA9ADBBB233B8F
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/6dce58ca-52cf-41ec-b3eb-784a6d66cb05/0/B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/6dce58ca-52cf-41ec-b3eb-784a6d66cb05/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 23 Aug 2024 17:30:43 +0000
Certificate not after:    Fri 22 Aug 2025 17:35:43 +0000
Subordinate resources:    IP: 2a0a:6044:c110::/44

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 11:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0a:ae:94:6c:33:37:59:b8:e0:8d:59:8e:ca:9a:db:bb:23:3b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 23 17:30:43 2024 GMT
            Not After : Aug 22 17:35:43 2025 GMT
        Subject: CN=B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:dc:2b:01:8e:a3:de:91:76:c3:15:67:ef:
                    ff:09:ee:72:d4:45:d2:e3:4f:3b:d6:a2:fe:40:14:
                    04:b5:cc:28:8a:16:ab:d5:78:22:c1:4f:c9:ab:bc:
                    b8:4b:91:5b:dc:b6:04:c0:9e:28:1d:50:b7:76:47:
                    20:b7:68:c7:b6:8a:f5:88:f8:6f:ad:0f:0c:7b:07:
                    2b:bd:cb:44:2f:28:61:a1:ce:d4:ba:9a:44:44:5f:
                    16:d5:cd:2a:b1:47:12:26:a5:8a:c4:c9:d0:7b:1c:
                    6a:0d:4e:3f:c7:53:90:73:d3:99:5e:a6:71:43:56:
                    8a:0b:10:41:c6:db:d7:11:3c:4e:44:b0:00:c6:28:
                    a6:31:b0:d6:d5:e6:ec:4e:6c:54:f7:5f:e0:0f:f9:
                    38:f4:96:45:b5:19:62:25:ed:c4:bf:9a:2d:95:80:
                    9b:6b:18:46:11:ef:ef:43:4b:0b:b7:88:7c:e8:58:
                    f7:e5:8f:ea:fb:fa:c0:8e:71:06:28:e3:1c:91:fc:
                    45:44:2d:52:f8:26:c4:8c:33:24:a7:c9:a8:c5:0d:
                    88:5b:07:32:d4:37:14:f8:6d:34:8d:90:9a:b5:ef:
                    1e:32:57:e7:2b:e6:62:d9:e1:54:9d:c4:4e:f2:59:
                    b2:2c:b4:84:11:d5:59:9f:2a:7a:b5:d5:c5:58:c1:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:9B:4B:DB:8E:9A:70:A9:39:99:CE:2B:38:AC:C7:CA:29:AF:58:49
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6dce58ca-52cf-41ec-b3eb-784a6d66cb05/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6dce58ca-52cf-41ec-b3eb-784a6d66cb05/0/B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:c110::/44

    Signature Algorithm: sha256WithRSAEncryption
         61:34:51:da:70:3a:40:49:f7:fb:cd:2e:e3:d1:83:d9:b6:66:
         d8:f2:d5:f6:17:08:77:b4:3f:c4:08:87:a4:af:31:4b:cd:94:
         04:0e:4c:79:08:d4:29:cc:96:5e:18:1b:f1:be:04:00:c7:f8:
         c9:19:9b:00:e7:12:31:19:d0:58:52:90:d6:44:6a:5b:55:6b:
         a3:50:de:f4:ea:c2:a3:c0:5c:1f:47:10:8d:0a:9e:40:6b:0c:
         dd:36:47:b1:9a:b2:96:bb:bb:03:8a:56:75:b4:dc:70:6f:8b:
         98:b4:93:6a:11:bb:67:6e:10:26:54:ab:af:82:97:a1:14:42:
         b3:3f:b7:4e:b5:94:cc:e0:bd:ae:5b:fc:c2:05:2a:eb:f5:7d:
         3b:ee:c6:38:e0:12:af:fc:95:b0:1f:5b:7e:fc:e7:9e:19:7e:
         75:52:73:39:8e:f4:b9:ff:bd:37:ce:1a:87:ed:4d:39:bf:90:
         d4:77:e5:8f:57:0e:47:94:5d:a4:5b:0a:dc:d6:77:45:b8:31:
         4a:17:ec:e1:6d:87:ce:ab:ff:6e:e2:74:1e:c9:6e:ba:86:41:
         90:8e:ef:ec:e2:a1:b6:c4:f9:ef:0f:16:a7:c2:35:bd:a5:f8:
         31:a0:39:a8:23:5e:59:b8:b7:92:b1:1d:6e:4d:b5:57:79:b8:
         e0:32:05:5c
-----BEGIN CERTIFICATE-----
MIIGCjCCBPKgAwIBAgIUJwqulGwzN1m44I1Zjsqa27sjO48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA4MjMxNzMwNDNaFw0yNTA4MjIxNzM1NDNaMDMxMTAvBgNV
BAMTKEI0OUI0QkRCOEU5QTcwQTkzOTk5Q0UyQjM4QUNDN0NBMjlBRjU4NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCloNwrAY6j3pF2wxVn7/8J7nLU
RdLjTzvWov5AFAS1zCiKFqvVeCLBT8mrvLhLkVvctgTAnigdULd2RyC3aMe2ivWI
+G+tDwx7Byu9y0QvKGGhztS6mkREXxbVzSqxRxImpYrEydB7HGoNTj/HU5Bz05le
pnFDVooLEEHG29cRPE5EsADGKKYxsNbV5uxObFT3X+AP+Tj0lkW1GWIl7cS/mi2V
gJtrGEYR7+9DSwu3iHzoWPflj+r7+sCOcQYo4xyR/EVELVL4JsSMMySnyajFDYhb
BzLUNxT4bTSNkJq17x4yV+cr5mLZ4VSdxE7yWbIstIQR1VmfKnq11cVYwXUZAgMB
AAGjggMUMIIDEDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0m0vbjppwqTmZ
zis4rMfKKa9YSTAfBgNVHSMEGDAWgBRXqXRv5UPrPqDUSVNCRMk/yI+FAzAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81N0E5NzQ2RkU1NDNFQjNFQTBENDQ5NTM0
MjQ0QzkzRkM4OEY4NTAzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF
BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh
ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi81N0E5NzQ2RkU1NDNFQjNFQTBE
NDQ5NTM0MjQ0QzkzRkM4OEY4NTAzLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvNmRjZTU4Y2EtNTJjZi00MWVjLWIzZWItNzg0YTZkNjZjYjA1LzAv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS82ZGNlNThjYS01MmNmLTQxZWMtYjNlYi03ODRhNmQ2NmNiMDUv
MC9CNDlCNEJEQjhFOUE3MEE5Mzk5OUNFMkIzOEFDQzdDQTI5QUY1ODQ5Lm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQqCmBEwRAwDQYJKoZIhvcNAQELBQADggEBAGE0
UdpwOkBJ9/vNLuPRg9m2Ztjy1fYXCHe0P8QIh6SvMUvNlAQOTHkI1CnMll4YG/G+
BADH+MkZmwDnEjEZ0FhSkNZEaltVa6NQ3vTqwqPAXB9HEI0KnkBrDN02R7Gaspa7
uwOKVnW03HBvi5i0k2oRu2duECZUq6+Cl6EUQrM/t061lMzgva5b/MIFKuv1fTvu
xjjgEq/8lbAfW378554ZfnVSczmO9Ln/vTfOGoftTTm/kNR35Y9XDkeUXaRbCtzW
d0W4MUoX7OFth86r/27idB7JbrqGQZCO7+ziobbE+e8PFqfCNb2l+DGgOagjXlm4
t5KxHW5NtVd5uOAyBVw=