Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EhyN0uWAzCmNQHV7Sg5DkVxaT-k.cer
File:                     EhyN0uWAzCmNQHV7Sg5DkVxaT-k.cer (raw, json)
Hash identifier:          tR7JPcXFPX3LjvUwZleviNhPFGJHgO48sJT3KXWpg4c=
Subject key identifier:   12:1C:8D:D2:E5:80:CC:29:8D:40:75:7B:4A:0E:43:91:5C:5A:4F:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       751E5EFD5A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/635324/0/121C8DD2E580CC298D40757B4A0E43915C5A4FE9.mft
caRepository:             rsync://nostromo.heficed.net/repo/635324/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:00:16 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.89.240.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503020715354 (0x751e5efd5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=121c8dd2e580cc298d40757b4a0e43915c5a4fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:c4:62:3c:d3:5c:25:72:34:2b:ff:24:65:
                    10:24:8a:76:5c:fc:c6:9d:6d:89:0c:a0:6e:ec:b5:
                    e0:a9:df:0f:1f:31:11:22:06:77:66:d4:8f:9e:c2:
                    8a:6f:8a:ff:c9:6e:16:b4:ec:76:ed:1d:77:b9:a1:
                    a8:ce:45:6c:6d:cc:98:28:21:eb:58:8d:b6:3f:dd:
                    7c:52:de:46:64:1b:08:45:81:1f:e9:7b:f5:88:90:
                    72:7c:4e:05:ab:d7:3a:36:87:9b:e6:4a:0c:e5:64:
                    40:e1:71:1e:93:b1:b5:35:49:b7:5c:c1:b0:71:02:
                    4f:05:a7:b1:b4:b1:63:ec:1a:76:1c:59:13:f9:e6:
                    9a:d1:76:0d:e5:3f:7f:ad:57:03:2c:34:df:cc:87:
                    7e:f6:f0:2e:16:0c:d0:2d:00:1d:c5:df:db:e6:91:
                    a7:e0:3f:23:87:92:75:64:fb:a8:31:de:1a:bd:a8:
                    ab:a9:32:e7:10:e0:66:52:b8:3e:75:d4:8d:f9:3f:
                    25:05:58:20:00:85:98:de:82:36:d5:8f:c6:89:83:
                    20:14:99:41:53:d6:23:f8:27:d5:47:a7:e4:c1:eb:
                    fa:b5:d8:56:4a:e0:c9:29:0c:bd:4c:58:7c:5e:1e:
                    31:77:4c:29:5a:fb:64:1a:cc:5d:59:49:3a:c2:ba:
                    e2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1C:8D:D2:E5:80:CC:29:8D:40:75:7B:4A:0E:43:91:5C:5A:4F:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635324/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635324/0/121C8DD2E580CC298D40757B4A0E43915C5A4FE9.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:7f:3a:59:0e:19:1d:a7:fe:46:08:ac:79:b4:62:4b:9c:89:
         9b:95:47:5b:35:2f:9c:d1:96:f1:3f:dd:be:57:25:f0:62:59:
         ee:26:ec:5d:aa:9d:17:49:6e:b8:8d:ba:06:b4:4e:ba:d0:21:
         10:2a:d9:d8:d0:63:38:d5:f7:36:a2:64:10:9e:6a:64:e3:d5:
         04:fd:30:e5:09:83:7f:85:aa:3a:88:eb:3c:48:2f:54:87:9b:
         fd:01:d4:7d:e6:0e:77:72:84:57:49:d4:a3:b1:94:cb:b7:76:
         fb:99:de:9d:10:5f:bc:b2:c4:c1:a5:2b:b3:fc:72:ef:35:a9:
         ac:76:bc:65:2d:bf:6d:16:15:6a:e2:82:da:b6:ee:e2:58:1f:
         4b:b0:f9:4f:d8:3f:01:b3:b7:ac:17:25:62:93:40:71:8c:63:
         5b:d7:46:83:b1:a7:ca:4c:01:dc:22:e6:b6:fd:f9:b1:58:92:
         6f:e6:eb:39:ac:57:1b:44:e3:57:3c:28:6d:77:4c:09:3b:82:
         67:0f:9f:5c:3f:00:36:75:32:68:f5:b5:3d:6e:46:dc:98:cb:
         02:11:84:d5:ae:ca:23:70:67:0f:20:f9:d6:3a:f2:ad:de:b5:
         ac:72:37:87:9b:93:8c:2d:87:25:14:98:70:29:d9:b0:b6:2f:
         3a:8a:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:11 2023 by rpki-client on console-ams.rpki-client.org