Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/2B0F671D7AE79173881896E45806BAE58D91D4D6.cer
File:                     2B0F671D7AE79173881896E45806BAE58D91D4D6.cer (raw, json)
Hash identifier:          an242tfxoY/kCHUrrEGJs2BsVs/ZC471Vi/SezmDjqk=
Subject key identifier:   2B:0F:67:1D:7A:E7:91:73:88:18:96:E4:58:06:BA:E5:8D:91:D4:D6
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       25A9910419A152FA1FE95C8F96F1965AD655B89F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Manifest:                 rsync://rpki.kitten.network/repo/MythicalKitten/5/2B0F671D7AE79173881896E45806BAE58D91D4D6.mft
caRepository:             rsync://rpki.kitten.network/repo/MythicalKitten/5
Notify URL:               https://rpki.kitten.network/rrdp/notification.xml
Certificate not before:   Sat 21 Jan 2023 04:14:15 +0000
Certificate not after:    Sat 20 Jan 2024 04:19:15 +0000
Subordinate resources:    IP: 2602:fac2:6::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a9:91:04:19:a1:52:fa:1f:e9:5c:8f:96:f1:96:5a:d6:55:b8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Jan 21 04:14:15 2023 GMT
            Not After : Jan 20 04:19:15 2024 GMT
        Subject: CN=2B0F671D7AE79173881896E45806BAE58D91D4D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:62:49:fc:91:87:67:89:e9:e2:0b:ca:c2:
                    0b:a7:29:5f:a2:87:85:9e:86:ff:ca:c9:ca:13:d8:
                    e5:5f:99:11:43:15:63:f6:cb:ee:0a:2a:a3:b9:c8:
                    38:ed:c4:14:47:74:6e:c4:e6:17:ad:57:08:88:be:
                    7c:d2:09:12:fb:ac:77:9c:31:22:2c:50:ee:02:c6:
                    80:b4:76:46:3f:ba:7d:67:8b:36:fd:e7:26:7c:23:
                    34:fa:68:dc:78:51:c9:b6:2c:10:ef:94:0f:c8:ac:
                    03:fa:61:c3:1a:ff:82:db:fb:3e:b0:1d:46:fe:63:
                    0e:38:e4:0e:ee:7f:49:0c:de:16:83:87:89:d6:75:
                    dd:ef:57:cb:b2:ad:fa:d1:49:72:5b:97:e7:5f:ea:
                    cf:17:53:81:7f:a9:c9:8d:52:cb:8a:0f:34:db:0c:
                    4d:1f:f0:1b:8d:b3:a7:7e:6e:0e:50:dc:75:fc:b9:
                    d8:96:5e:3e:76:8b:28:ad:4b:c4:87:5e:3d:cd:8e:
                    cd:88:06:f8:57:02:0c:a4:4f:db:13:32:45:ba:ed:
                    09:9a:81:5c:86:47:d8:fe:03:d3:86:e7:bc:e2:b3:
                    b5:92:5d:98:3d:1e:62:4c:12:e0:ff:85:f8:11:35:
                    18:b3:c1:14:fb:f0:0d:05:8a:1c:3c:82:f3:71:53:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:0F:67:1D:7A:E7:91:73:88:18:96:E4:58:06:BA:E5:8D:91:D4:D6
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.kitten.network/repo/MythicalKitten/5
                RPKI Manifest - URI:rsync://rpki.kitten.network/repo/MythicalKitten/5/2B0F671D7AE79173881896E45806BAE58D91D4D6.mft
                RPKI Notify - URI:https://rpki.kitten.network/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:66:af:c5:df:2a:d1:29:9b:e5:36:0f:61:0d:7c:47:62:93:
         c5:41:d3:2a:93:cf:e0:41:4a:19:9a:70:66:14:cc:5f:ac:7f:
         7a:a3:73:76:a9:85:30:69:5d:bc:d0:cb:e4:46:a8:3c:a7:ca:
         b9:11:38:23:0b:69:a4:ef:56:1f:92:d0:9c:f3:a3:ff:a9:40:
         2c:32:fd:eb:0e:e1:48:03:08:4f:83:f0:87:01:73:8c:a9:72:
         f4:27:06:24:23:05:79:2f:f9:da:d8:66:f2:29:fe:d3:2f:aa:
         31:df:dc:94:8b:14:29:c5:6e:27:8d:fe:12:1b:a9:25:03:06:
         04:b4:da:f2:2f:a3:70:ae:8c:93:3c:aa:96:ec:94:47:db:82:
         15:f8:e2:42:d3:b7:e4:4a:6f:57:e8:72:68:64:bd:e1:ad:c6:
         2a:c0:e0:e0:b9:9e:07:02:f9:d4:4f:58:41:ee:c8:98:59:ad:
         68:23:4f:25:7f:e1:c3:40:d1:f1:a8:84:6a:01:57:e2:7f:c6:
         b5:ed:9d:79:70:ab:e6:a7:4a:ff:57:cd:ae:39:db:cf:07:11:
         e1:b1:90:0f:53:ec:18:05:b9:07:ee:0a:2d:de:3e:3a:80:f2:
         bd:86:6f:09:9e:32:be:a1:0f:25:74:d3:05:2b:4d:54:9f:bc:
         7a:b0:71:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org