Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YE9WO25gXzQKm9eRNtze23GKDTc.cer
File:                     YE9WO25gXzQKm9eRNtze23GKDTc.cer (raw, json)
Hash identifier:          sKxoc9/HsklOS1B67wW1ACatDxBwrCONf6JFaPUiZZI=
Subject key identifier:   60:4F:56:3B:6E:60:5F:34:0A:9B:D7:91:36:DC:DE:DB:71:8A:0D:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       752E0F91CB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/1123701/0/604F563B6E605F340A9BD79136DCDEDB718A0D37.mft
caRepository:             rsync://nostromo.heficed.net/repo/1123701/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:01:17 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 149.62.40.0/22
                          IP: 2a0d:4c40::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503283945931 (0x752e0f91cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=604f563b6e605f340a9bd79136dcdedb718a0d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:08:de:40:62:f3:8d:57:86:78:25:eb:ae:
                    74:f0:1c:b1:2f:7c:bd:78:db:8a:a4:8f:bb:75:07:
                    b0:a3:a1:85:c3:f2:68:d9:43:99:6c:78:4f:74:c6:
                    a2:54:11:6d:43:a1:bc:44:72:4c:b2:26:cb:6b:21:
                    a0:50:f2:a8:47:55:a8:36:e9:2c:f1:b9:26:75:95:
                    b5:ca:78:ff:68:b0:1d:34:db:29:7b:86:59:e8:27:
                    8d:e8:67:b7:ba:c0:8e:3c:58:0e:12:4f:ca:6e:f3:
                    fd:ee:63:bc:8f:43:d0:96:bb:42:9b:46:77:e9:7c:
                    6a:13:ae:67:80:43:26:aa:88:c9:01:2f:5c:32:76:
                    9b:8b:4d:85:19:ba:f5:86:ca:d1:4d:cb:d6:07:3d:
                    41:af:20:a7:76:67:3b:de:d1:88:c7:bb:e0:20:b4:
                    4d:60:19:47:1c:1d:81:81:c3:a4:6d:c1:39:39:19:
                    51:96:45:4c:3c:c8:a2:ab:13:d3:a7:7a:c1:5d:54:
                    30:6d:0b:93:f5:79:ca:84:b4:05:6c:53:64:f9:a7:
                    15:76:c6:70:d7:9c:1d:d6:96:af:47:ae:9a:66:25:
                    38:6f:09:8f:ed:47:52:09:f3:3a:fc:50:f2:17:29:
                    29:25:a7:b1:84:15:c3:5c:03:27:12:40:e5:85:5a:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4F:56:3B:6E:60:5F:34:0A:9B:D7:91:36:DC:DE:DB:71:8A:0D:37
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123701/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123701/0/604F563B6E605F340A9BD79136DCDEDB718A0D37.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.62.40.0/22
                IPv6:
                  2a0d:4c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         a3:d9:22:2a:e2:27:52:d6:1e:bd:88:35:bd:13:53:32:2b:56:
         08:4e:39:2d:04:34:0e:08:b9:2f:3a:6d:01:1d:08:7a:a5:5e:
         4d:61:8d:c9:95:bf:70:e4:75:17:6e:a2:81:51:63:eb:eb:32:
         61:1d:a9:a2:88:3e:eb:0f:c6:ea:d8:97:63:62:1e:1e:44:43:
         c7:05:1e:18:86:20:ed:d6:8b:a3:d4:ea:1c:76:0b:1c:eb:84:
         2a:d6:6c:18:2b:01:21:b4:95:42:f7:16:c8:cb:c7:ee:b7:78:
         1a:6a:41:94:91:5c:83:5a:6a:7a:91:9a:72:b8:86:ac:f2:92:
         2e:74:f2:86:54:1e:2b:ee:bb:f1:d4:ef:89:8b:7a:28:dd:a7:
         09:78:1e:4e:a7:0c:cd:9d:33:0e:2a:95:91:a7:b5:04:6d:36:
         79:98:bf:3e:10:11:94:1e:59:63:25:77:d0:51:7d:a9:2c:b3:
         92:2e:ab:82:c3:69:35:cf:de:9e:8c:78:14:92:52:cd:f3:79:
         0b:77:54:80:0f:a2:65:8f:29:d6:f8:1b:ee:e2:19:1c:d0:ae:
         2d:15:0f:88:9c:33:e6:94:d5:2a:77:05:8e:77:f7:80:93:57:
         b0:db:4b:da:3f:4c:19:6b:66:53:9c:63:b5:ee:da:82:33:71:
         fb:ca:63:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----