Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/D8934575D189EF7F17DA8118042496D41A4517DE.cer
File:                     D8934575D189EF7F17DA8118042496D41A4517DE.cer (raw, json)
Hash identifier:          7ZQYufCBvwcJ8wDPUJVItxzMAL4ZC3N6ozQceHP/6lY=
Subject key identifier:   D8:93:45:75:D1:89:EF:7F:17:DA:81:18:04:24:96:D4:1A:45:17:DE
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       325242E79350D3D0E8E0D07A6B7BB94D480F21A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Manifest:                 rsync://rpki.co/repo/HYSP/18/D8934575D189EF7F17DA8118042496D41A4517DE.mft
caRepository:             rsync://rpki.co/repo/HYSP/18/
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:03:05 +0000
Certificate not after:    Sat 06 Apr 2024 09:08:05 +0000
Subordinate resources:    AS: 7719
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:52:42:e7:93:50:d3:d0:e8:e0:d0:7a:6b:7b:b9:4d:48:0f:21:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000
        Validity
            Not Before: Apr  8 09:03:05 2023 GMT
            Not After : Apr  6 09:08:05 2024 GMT
        Subject: CN=D8934575D189EF7F17DA8118042496D41A4517DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:0a:76:54:f8:23:8f:0d:53:11:b9:c3:2f:
                    f5:ff:56:9a:7c:ea:b9:fa:f2:73:a8:fd:e7:43:57:
                    99:40:d2:5e:c9:91:8f:4c:31:f6:e9:3c:cc:fb:8b:
                    82:43:5c:ac:ce:63:45:fa:10:49:95:fd:b2:61:e4:
                    4c:35:f3:1e:c7:72:72:d1:e8:22:1a:0f:0e:0f:37:
                    ce:70:6a:23:6e:69:0e:c3:c0:53:9a:7b:59:10:fb:
                    ae:9b:8a:89:d5:2a:d4:c1:c8:74:0f:b8:4c:fd:bf:
                    a1:67:91:bc:67:31:ea:93:5d:de:ba:46:48:0f:ee:
                    a6:a6:0b:3c:99:18:b0:56:92:a1:48:82:b4:d3:67:
                    e3:f6:f6:61:fa:66:20:e6:56:0d:bf:3a:2d:a2:1f:
                    70:19:83:3f:d8:8d:1b:b5:72:2e:06:dd:1a:02:bd:
                    35:84:94:f5:ec:bf:78:76:2b:72:dc:64:ac:35:41:
                    04:e3:34:cf:0e:ed:ef:74:a8:ca:eb:6f:ad:74:62:
                    36:17:16:d8:98:7a:9e:aa:8a:f4:0d:3b:1f:6f:80:
                    57:83:3e:7a:95:8d:7f:1c:b5:4e:67:11:e7:ef:33:
                    bb:1c:2a:5a:79:47:88:6e:b4:dd:9d:09:d8:d3:4c:
                    44:2b:75:03:67:e0:b4:70:5c:33:ed:90:5e:11:11:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:93:45:75:D1:89:EF:7F:17:DA:81:18:04:24:96:D4:1A:45:17:DE
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/18
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/18/D8934575D189EF7F17DA8118042496D41A4517DE.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7719

    Signature Algorithm: sha256WithRSAEncryption
         2d:2d:c6:59:2c:14:a1:39:6e:2f:54:19:ac:5f:09:b6:93:ed:
         b4:36:b2:9e:6c:15:17:d9:57:44:b9:be:53:04:a2:7c:d3:c0:
         17:39:b7:fa:cb:b4:31:4e:be:ff:e5:2f:68:c9:b0:88:b1:78:
         78:02:ad:02:ed:63:37:02:e8:20:b5:9d:1b:5e:4f:bf:50:5a:
         e1:07:77:1d:91:e0:13:60:01:d9:68:6f:6c:79:d1:4b:7a:25:
         81:dc:ea:fb:cb:9a:2f:a3:a1:5c:74:b9:21:93:dd:47:f2:f0:
         d6:36:d8:5a:98:f7:80:9c:8f:5a:ce:31:05:c1:9c:bd:71:9e:
         9f:86:bf:c0:32:fb:91:d0:3c:a3:74:f8:df:65:f5:bf:09:22:
         ca:d4:24:54:2e:90:3e:6d:01:09:76:2e:77:7e:09:e2:fb:9f:
         12:02:36:aa:e9:fc:ef:c1:08:ef:62:0a:ed:a4:bd:aa:8a:54:
         16:be:e0:7f:8e:1c:ba:d1:43:74:d4:a8:6a:69:31:b2:a1:d2:
         83:da:c0:6c:94:b9:13:3e:48:ee:ca:67:0f:81:6c:8c:1b:69:
         3b:d3:b9:a4:98:8b:00:db:78:7d:7f:5a:63:16:f2:ef:f4:2f:
         df:27:52:2e:d2:a3:d5:2d:b8:25:a9:d4:54:ca:12:56:1c:44:
         eb:43:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:33:00 2025 by rpki-client