Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/5525312E5618E22B2B49F909064A0B8CBCA2022E.cer
File:                     5525312E5618E22B2B49F909064A0B8CBCA2022E.cer (raw, json)
Hash identifier:          z04ORVSsxNwHDquM2EY1TGpjVOqtrKSD2V9P/zCAF9U=
Subject key identifier:   55:25:31:2E:56:18:E2:2B:2B:49:F9:09:06:4A:0B:8C:BC:A2:02:2E
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       7078CC24BC3BF4EFB107B8B0CE1F21A42C8EBE62
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft
caRepository:             rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 11:50:36 +0000
Certificate not after:    Fri 10 Apr 2026 11:55:36 +0000
Subordinate resources:    IP: 2a06:1281:9000::/36
Validation:               Failed, certificate revoked on Fri 11 Apr 2025 18:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:78:cc:24:bc:3b:f4:ef:b1:07:b8:b0:ce:1f:21:a4:2c:8e:be:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Apr 11 11:50:36 2025 GMT
            Not After : Apr 10 11:55:36 2026 GMT
        Subject: CN=5525312E5618E22B2B49F909064A0B8CBCA2022E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:b5:11:6c:ff:c9:ac:b9:5b:e4:26:df:55:
                    0d:37:bd:4e:13:8b:dd:b9:d8:87:05:1f:63:bf:fb:
                    17:69:cf:2c:6c:7c:0e:bc:53:19:71:70:76:a3:f5:
                    31:4f:1e:6b:8a:2a:e8:f9:50:3e:90:f5:6c:62:ab:
                    17:15:70:3d:e5:ff:ae:13:a5:4d:0e:2d:5f:7f:39:
                    7e:63:d2:36:9e:b4:ed:95:61:2b:7e:1b:28:52:eb:
                    6e:32:a2:b2:71:ba:82:e8:53:58:6b:d0:18:eb:a2:
                    07:7c:80:26:72:7c:17:6d:87:53:f3:ba:d8:13:84:
                    64:41:b3:e1:96:78:be:5b:ce:d9:d1:67:c9:9d:c6:
                    b9:78:cc:51:2d:8d:97:fe:87:8b:62:58:a0:fb:b5:
                    82:55:18:4b:d9:f7:2a:a0:56:9f:37:21:86:57:a3:
                    42:ca:cb:ea:26:19:d2:f9:c1:84:bf:39:2c:27:ea:
                    49:2c:47:95:01:63:1b:f2:81:5d:c2:4b:9b:f1:47:
                    ab:75:b1:e3:35:99:d6:1b:45:36:cd:af:37:a7:35:
                    04:50:c4:4a:de:67:91:8d:77:2f:5f:28:ea:9f:21:
                    6d:ef:07:fa:05:3b:fd:60:0b:a5:28:cd:2b:f6:3a:
                    06:ec:a1:dc:3d:3d:ac:e1:60:3c:03:b8:8e:a0:00:
                    1c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:25:31:2E:56:18:E2:2B:2B:49:F9:09:06:4A:0B:8C:BC:A2:02:2E
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:72:d3:d8:85:1b:34:7e:a6:51:44:f7:20:3c:09:97:79:7b:
         08:37:73:57:db:30:7b:2b:2f:32:45:0c:56:2a:66:ff:7e:27:
         ec:f4:ec:0f:97:a1:3e:8d:b5:24:e6:1b:01:0f:b5:91:02:75:
         30:1a:d7:8b:88:52:96:6d:4d:eb:61:b9:03:94:6f:5f:ea:38:
         1d:11:ec:65:b4:ec:c3:50:fe:bb:59:a7:75:09:72:93:ea:c2:
         7d:9f:20:3c:21:cf:8f:bb:06:42:ae:6a:09:ec:fe:66:7b:f9:
         3a:25:eb:3c:30:f9:2c:82:f6:d6:0b:a9:77:eb:ae:c4:00:08:
         0a:1b:d4:32:8b:27:5f:e3:dc:07:56:39:de:b0:95:59:c1:b8:
         a9:12:84:b2:b3:61:e3:ab:c8:d8:5b:b3:b2:d3:ed:a7:f7:44:
         0b:da:fb:74:bc:c5:14:db:e6:84:8d:73:79:f8:d6:09:4b:8d:
         ce:bf:7b:62:1d:17:86:69:bc:e2:c8:63:e5:a9:3e:f8:13:65:
         61:75:cb:93:76:b0:f4:f3:e3:34:7b:7a:d4:0a:a6:8d:f4:3f:
         bf:ee:60:5a:6c:9e:f3:d0:3f:58:0a:a6:10:6f:b4:1f:f6:f7:
         65:e8:80:96:29:e7:74:6a:81:86:d0:12:15:c0:23:65:ab:e7:
         36:ca:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----