Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0EDS0rzTPFBzkSW56lfOPPsgTX8.cer
File:                     0EDS0rzTPFBzkSW56lfOPPsgTX8.cer (raw, json)
Hash identifier:          0fEyEI+bsPI3ND78Em3SuEBOLmORqIyE9OUkUuUAEuw=
Subject key identifier:   D0:40:D2:D2:BC:D3:3C:50:73:91:25:B9:EA:57:CE:3C:FB:20:4D:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AEA4DBE2CE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/674d9e-68af-41e5-8057-47ef0d97a98e/1/0EDS0rzTPFBzkSW56lfOPPsgTX8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/674d9e-68af-41e5-8057-47ef0d97a98e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 15 Mar 2022 10:18:26 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 91.230.49.0/24
                          IP: 2a12:a8c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750090183374 (0xaea4dbe2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 15 10:18:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d040d2d2bcd33c50739125b9ea57ce3cfb204d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:10:de:79:25:04:b9:28:9f:82:b0:3d:21:
                    ed:e2:dd:32:0b:c9:48:2c:ea:fd:19:1d:20:02:c6:
                    5e:b0:76:28:4d:db:7c:10:96:ec:b9:c4:79:69:db:
                    4d:59:66:b4:b2:7e:2b:33:71:9f:f3:18:88:51:27:
                    ad:46:0a:0e:40:83:f2:21:bd:ac:cc:f5:ff:8f:6c:
                    d3:a6:2c:ac:14:14:ee:56:6e:1e:6a:75:c6:b1:55:
                    ea:ce:05:70:34:a1:eb:dd:d0:4a:2e:41:61:08:b4:
                    3c:fc:07:ff:2f:00:9a:92:ee:21:d5:59:9a:f5:36:
                    9d:03:63:eb:0d:00:84:9f:1c:f0:2b:a7:19:f5:c2:
                    85:28:62:7c:ca:d4:03:1a:5b:87:a2:a1:cd:56:df:
                    6c:cc:9f:4a:81:3a:9b:88:47:3c:7a:03:db:13:c7:
                    78:15:9d:0f:12:07:3e:76:ff:c5:97:ce:f9:61:7b:
                    22:ff:ce:9f:ec:d0:b0:73:f2:5f:b8:6d:af:ac:1e:
                    ad:c7:1e:72:c8:d2:02:e9:a1:d3:c9:74:f8:6d:5a:
                    48:55:9d:a9:ff:f1:63:37:f2:df:b6:0e:fa:b0:2e:
                    fb:26:65:13:a1:14:8d:fd:6f:d4:eb:27:2e:36:4d:
                    52:9e:1d:ad:73:b2:ba:9d:08:8b:f8:46:07:b3:e5:
                    d9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:40:D2:D2:BC:D3:3C:50:73:91:25:B9:EA:57:CE:3C:FB:20:4D:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/674d9e-68af-41e5-8057-47ef0d97a98e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/674d9e-68af-41e5-8057-47ef0d97a98e/1/0EDS0rzTPFBzkSW56lfOPPsgTX8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.49.0/24
                IPv6:
                  2a12:a8c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6d:76:14:03:53:30:c3:c2:57:87:aa:35:fa:0c:0f:11:e5:fc:
         66:83:bc:79:80:07:cf:5a:4d:85:d7:5b:0f:e4:85:00:ae:81:
         a1:6a:eb:42:e3:a4:b0:7f:c0:75:9a:a9:1d:2f:ae:37:8b:72:
         e2:e7:14:dc:b7:c1:d7:3d:80:7f:df:58:66:f1:c9:08:35:2f:
         b2:31:1e:d4:a5:5b:06:45:f0:cf:18:e1:3a:e8:1f:66:15:4c:
         bc:e0:03:30:22:ae:e3:85:50:99:f3:7c:25:69:fe:e4:d6:26:
         6c:94:80:ad:85:38:88:13:ed:6b:7e:f9:ce:3a:d3:f1:ce:4e:
         0c:d0:a8:dc:a1:d8:0b:47:fc:7f:0b:d4:ec:82:5e:6b:e7:a3:
         b2:21:22:95:ed:8a:ff:38:39:2e:fa:95:43:d9:f4:22:6a:77:
         1c:a6:e8:8e:27:5c:e4:e2:c9:ca:ed:77:fb:14:89:c3:ac:e2:
         8f:35:ac:5f:13:1f:5f:2d:5c:95:12:44:23:f7:30:a1:ce:ee:
         ff:be:8b:45:fe:bc:33:d1:a7:a8:49:be:4d:b0:6f:22:1a:ca:
         e6:45:9b:7d:de:ef:db:0a:9b:32:44:49:b2:45:96:e3:cc:83:
         74:de:b6:70:70:19:54:ee:15:13:4e:a2:97:08:6a:a8:29:56:
         36:a6:b9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-ams.rpki-client.org