Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9xD3WvweYVerY8Js9-VLugWI8jY.cer
File:                     9xD3WvweYVerY8Js9-VLugWI8jY.cer (raw, json)
Hash identifier:          q2i2xqm8+SpJqkVl2pDzMIpM2HG1cfDFx4xcMOV9LR8=
Subject key identifier:   F7:10:F7:5A:FC:1E:61:57:AB:63:C2:6C:F7:E5:4B:BA:05:88:F2:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7526DBFFE4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/1123961/0/F710F75AFC1E6157AB63C26CF7E54BBA0588F236.mft
caRepository:             rsync://nostromo.heficed.net/repo/1123961/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:00:47 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 213060
                          IP: 45.137.28.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503163125732 (0x7526dbffe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f710f75afc1e6157ab63c26cf7e54bba0588f236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:41:0e:fd:cf:79:4b:ca:0e:18:96:f1:4d:
                    a6:ec:b5:77:b7:cf:27:be:eb:23:c6:08:06:5f:46:
                    fb:ee:70:64:d2:a7:31:7e:a7:37:9f:da:c6:4f:4e:
                    d3:96:e7:0d:f2:48:df:8c:34:6a:5f:75:a8:9b:61:
                    2b:a1:ba:cf:b4:69:10:02:fc:c1:50:7f:fa:c8:ea:
                    30:8d:72:22:6e:39:75:6b:07:30:17:56:42:94:0c:
                    d8:62:41:71:80:91:56:fe:70:84:ac:e2:d8:01:99:
                    c5:67:27:0e:e6:5e:11:2c:d4:3f:e9:59:74:6c:46:
                    84:88:4f:21:c8:7a:27:87:64:74:35:a0:0a:fc:fc:
                    e1:77:91:05:c9:52:50:83:12:1b:89:61:55:28:4e:
                    f9:ba:41:8c:40:5f:bf:be:d7:df:05:a2:7e:ef:ad:
                    9b:fc:3b:c1:dd:ae:60:fb:3e:56:bf:f7:7a:2f:5b:
                    ed:2a:52:dc:49:6c:87:27:7e:66:58:cb:4e:5c:3b:
                    43:a0:87:05:85:2a:fa:66:46:77:9e:09:76:e0:05:
                    f0:3f:2c:ec:d8:03:e7:a6:86:7c:58:87:65:44:91:
                    fe:7a:a2:76:67:a7:82:b6:a4:c1:fb:de:4a:69:54:
                    ca:36:a8:15:f8:69:89:d3:37:96:39:fb:b6:fe:21:
                    b0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:10:F7:5A:FC:1E:61:57:AB:63:C2:6C:F7:E5:4B:BA:05:88:F2:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123961/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123961/0/F710F75AFC1E6157AB63C26CF7E54BBA0588F236.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.28.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213060

    Signature Algorithm: sha256WithRSAEncryption
         5e:02:17:42:e6:0a:9c:c6:6e:d5:84:81:e4:16:6b:ec:1a:5e:
         9f:e6:2c:35:18:3c:99:a0:21:3f:60:a0:90:5c:f8:9f:38:ab:
         21:ad:b7:c0:dc:93:32:0e:f5:0f:94:8b:3d:42:be:f0:67:5d:
         d6:8a:68:50:15:87:78:bf:05:f1:8b:06:d0:cf:45:d8:8d:67:
         af:03:3b:00:3d:25:82:7b:76:43:f2:0c:4b:51:0d:81:ce:f9:
         3c:87:0b:13:c0:d8:ec:14:50:00:08:4d:24:74:af:62:bd:7e:
         8e:b7:49:71:09:a8:6f:d9:fb:c8:70:52:48:8c:dd:9a:af:f1:
         87:33:e6:22:92:66:4c:df:fc:7d:38:83:24:3f:2c:fe:4c:8e:
         e9:d1:8e:22:c1:2a:29:9b:83:b3:91:b4:65:e8:06:6a:76:12:
         9f:18:1d:ca:3f:10:9e:a6:c4:cc:61:71:4d:d7:71:79:1b:41:
         7f:3b:df:e5:47:c3:a1:c6:a9:a0:ed:48:db:36:a1:53:da:76:
         af:a7:51:1a:98:66:aa:c3:82:3a:4b:ad:bd:68:db:93:b1:d2:
         e7:9f:89:80:30:5e:41:26:27:22:f3:d3:52:27:48:50:d1:f5:
         ba:ff:4c:0d:38:4d:e7:70:4f:18:16:b4:89:9c:e9:c4:a6:47:
         5b:6e:9a:4a
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIFdSbb/+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAwNDdaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY3MTBmNzVhZmMx
ZTYxNTdhYjYzYzI2Y2Y3ZTU0YmJhMDU4OGYyMzYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6M0EO/c95S8oOGJbxTabstXe3zye+6yPGCAZfRvvucGTS
pzF+pzef2sZPTtOW5w3ySN+MNGpfdaibYSuhus+0aRAC/MFQf/rI6jCNciJuOXVr
BzAXVkKUDNhiQXGAkVb+cISs4tgBmcVnJw7mXhEs1D/pWXRsRoSITyHIeieHZHQ1
oAr8/OF3kQXJUlCDEhuJYVUoTvm6QYxAX7++198Fon7vrZv8O8HdrmD7Pla/93ov
W+0qUtxJbIcnfmZYy05cO0OghwWFKvpmRneeCXbgBfA/LOzYA+emhnxYh2VEkf56
onZnp4K2pMH73kppVMo2qBX4aYnTN5Y5+7b+IbBJAgMBAAGjggJsMIICaDAdBgNV
HQ4EFgQU9xD3WvweYVerY8Js9+VLugWI8jYwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYBBQUHMAWGLHJzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby8xMTIzOTYxLzAvMGQGCCsGAQUFBzAKhlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzk2MS8wL0Y3MTBGNzVBRkMx
RTYxNTdBQjYzQzI2Q0Y3RTU0QkJBMDU4OEYyMzYubWZ0MD4GCCsGAQUFBzANhjJo
dHRwczovL25vc3Ryb21vLmhlZmljZWQubmV0L3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAi2JHDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDQEQwDQYJKoZIhvcNAQEL
BQADggEBAF4CF0LmCpzGbtWEgeQWa+waXp/mLDUYPJmgIT9goJBc+J84qyGtt8Dc
kzIO9Q+Uiz1CvvBnXdaKaFAVh3i/BfGLBtDPRdiNZ68DOwA9JYJ7dkPyDEtRDYHO
+TyHCxPA2OwUUAAITSR0r2K9fo63SXEJqG/Z+8hwUkiM3Zqv8Ycz5iKSZkzf/H04
gyQ/LP5MjunRjiLBKimbg7ORtGXoBmp2Ep8YHco/EJ6mxMxhcU3XcXkbQX873+VH
w6HGqaDtSNs2oVPadq+nURqYZqrDgjpLrb1o25Ox0uefiYAwXkEmJyLz01InSFDR
9br/TA04TedwTxgWtImc6cSmR1tumko=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:57 2023 by rpki-client on console-ams.rpki-client.org