Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_vUjj-ulUNeEqwG30HSIRPpku-o.cer
File:                     _vUjj-ulUNeEqwG30HSIRPpku-o.cer (raw, json)
Hash identifier:          2c+H148KmgrEo8FeqxQ/B0mHjFd7Lk1RgacIK0cGWHQ=
Subject key identifier:   FE:F5:23:8F:EB:A5:50:D7:84:AB:01:B7:D0:74:88:44:FA:64:BB:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       806915C92E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/6369ff-af72-4b2c-bb58-ec066d688515/1/_vUjj-ulUNeEqwG30HSIRPpku-o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/6369ff-af72-4b2c-bb58-ec066d688515/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 04:53:08 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 35487
                          AS: 47553
                          AS: 48386
                          AS: 50069
                          AS: 57578
                          AS: 57695
                          AS: 58313
                          AS: 58342
                          IP: 185.209.84.0/22
                          IP: 185.234.212.0/22
                          IP: 188.244.96.0/22
                          IP: 2a0b:4340::/29
                          IP: 2a0d:2900::/29
                          IP: 2a0d:5640::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551518849326 (0x806915c92e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:53:08 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=fef5238feba550d784ab01b7d0748844fa64bbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:74:ae:01:a5:2e:2f:f8:ec:a8:a1:30:be:
                    bb:f1:bc:87:39:cb:1e:4e:1d:34:1c:e4:fb:88:90:
                    2c:7e:bf:1d:65:ed:15:3e:fa:07:45:85:8f:40:92:
                    08:6d:28:a4:fa:a6:3c:66:c5:64:68:b3:46:a3:b1:
                    9e:12:f4:f4:1f:c2:bc:95:8a:b4:9b:b2:01:43:86:
                    d0:37:07:56:f1:37:9b:f6:5d:4a:91:2f:49:a8:ea:
                    b5:0e:41:83:08:3d:25:b8:56:85:c2:fd:2f:da:14:
                    6b:2c:93:9a:b3:e4:f5:e1:29:37:7a:66:47:12:cc:
                    7c:ac:f4:f5:74:8e:92:f9:b8:18:d7:e5:85:ad:ec:
                    74:21:fb:ff:36:ab:05:f9:00:27:80:75:5d:7c:07:
                    30:71:86:a2:f9:be:2a:cd:60:6a:62:5e:7a:11:3e:
                    1d:ba:de:75:7a:4a:4c:91:24:55:17:32:29:21:2a:
                    35:9f:fb:97:7f:f4:69:4c:ae:c2:22:d7:8f:fb:16:
                    9e:16:6e:25:6a:c4:d3:d6:29:1e:f1:1d:8a:d4:a0:
                    b4:1b:38:ee:93:7d:34:4a:c6:a7:a9:b7:49:cb:5e:
                    ac:ef:f0:00:2e:1a:4e:d4:39:75:1c:de:e2:b2:cf:
                    e2:af:e6:c3:14:ba:6b:19:ce:e0:d6:4b:32:4f:19:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F5:23:8F:EB:A5:50:D7:84:AB:01:B7:D0:74:88:44:FA:64:BB:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6369ff-af72-4b2c-bb58-ec066d688515/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6369ff-af72-4b2c-bb58-ec066d688515/1/_vUjj-ulUNeEqwG30HSIRPpku-o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.84.0/22
                  185.234.212.0/22
                  188.244.96.0/22
                IPv6:
                  2a0b:4340::/29
                  2a0d:2900::/29
                  2a0d:5640::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35487
                  47553
                  48386
                  50069
                  57578
                  57695
                  58313
                  58342

    Signature Algorithm: sha256WithRSAEncryption
         46:df:17:37:21:07:63:39:ad:e7:ea:22:4d:ad:4a:c0:50:13:
         7b:34:8c:c9:d0:af:66:12:28:fb:2b:78:62:c2:b0:88:9b:59:
         ab:6f:80:cf:4a:72:1c:72:e2:0d:0d:16:4e:6b:7d:17:88:e9:
         36:41:c2:37:3c:f0:b4:80:38:4f:f5:d6:fd:38:33:d5:fe:4a:
         86:07:6b:25:1f:da:19:47:50:d9:4a:5f:49:ad:8d:a9:27:94:
         9c:43:82:9b:aa:1f:8b:0b:cc:ec:3c:1e:5b:23:02:10:e6:c2:
         6b:1f:34:5a:40:9b:c9:ad:1c:7e:8a:11:7e:cb:9f:ef:92:36:
         bf:ba:0c:6b:92:38:69:0c:f0:80:20:0b:71:f7:1d:2b:32:da:
         a4:6b:e4:78:4f:00:9e:67:5c:9a:d9:69:be:a3:de:6d:d5:7e:
         ec:af:06:c6:74:9a:83:55:68:2a:25:4c:14:55:6d:b2:6c:50:
         af:c4:82:29:28:94:9d:85:f6:c6:48:ee:60:e1:5c:56:f2:0e:
         7c:5f:65:8a:88:d0:6a:6b:34:8d:d8:65:34:d8:c4:52:97:ef:
         21:5d:a3:ff:a6:6f:c8:54:42:45:98:97:2c:3a:cf:5a:3d:18:
         7f:87:f1:12:8a:3e:20:4b:a3:1d:ea:f5:51:d6:d7:6e:44:bd:
         b7:ff:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:29 2023 by rpki-client on console-fra.rpki-client.org