Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0RzKXn_RahDbpyBJ_XFDLxGtjfw.cer
File:                     0RzKXn_RahDbpyBJ_XFDLxGtjfw.cer (raw, json)
Hash identifier:          /6f9bZ3AOKgXMOwv/32S4s6q5PSR7m8lu56YdkwRoZs=
Subject key identifier:   D1:1C:CA:5E:7F:D1:6A:10:DB:A7:20:49:FD:71:43:2F:11:AD:8D:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A533124BFD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a2/d92dee-ca39-4e31-a3d6-e8a42560a32e/1/0RzKXn_RahDbpyBJ_XFDLxGtjfw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a2/d92dee-ca39-4e31-a3d6-e8a42560a32e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 10:59:14 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.137.176.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709526440957 (0xa533124bfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:59:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d11cca5e7fd16a10dba72049fd71432f11ad8dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:e9:1e:83:ea:9a:e8:88:27:00:8f:96:c1:
                    30:06:53:56:b4:6b:8b:6b:37:80:34:44:17:e9:82:
                    70:3b:47:16:91:4c:5d:81:5e:50:bf:6b:e9:69:1c:
                    c5:cf:65:b4:33:9d:b8:9a:07:e4:aa:d4:e6:5b:7f:
                    27:ec:aa:32:09:51:9d:2c:93:51:58:e3:0d:1f:a2:
                    e7:40:7f:d3:c5:c2:9f:8f:1c:7e:a2:8c:06:29:e3:
                    76:33:cd:72:09:80:87:ae:7d:d8:65:e9:44:52:2c:
                    df:f1:e6:c7:c9:8b:c7:f4:b5:d1:8b:3d:d7:7d:11:
                    e4:5a:6e:e5:7f:3a:02:12:f9:9d:ba:51:1c:1e:e9:
                    91:ab:15:28:40:14:e6:aa:ab:14:85:b9:13:7f:00:
                    0f:c4:94:c1:6a:a4:77:8b:b5:00:eb:63:ec:a6:5f:
                    51:41:8d:88:fb:8f:7f:54:e9:6a:21:66:7f:e9:58:
                    9b:b4:89:f1:a1:27:0a:28:9f:2a:25:ea:ad:a4:6e:
                    06:5b:26:f5:04:7e:c5:d5:15:c3:b7:81:20:de:f0:
                    09:b2:c1:6c:04:54:45:e1:c7:93:81:05:a7:33:4a:
                    83:95:d5:f0:69:ed:e1:0e:9f:36:ca:7a:c5:65:e0:
                    34:08:7d:c6:23:97:9e:9f:8b:da:2a:5c:c0:93:a3:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1C:CA:5E:7F:D1:6A:10:DB:A7:20:49:FD:71:43:2F:11:AD:8D:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d92dee-ca39-4e31-a3d6-e8a42560a32e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d92dee-ca39-4e31-a3d6-e8a42560a32e/1/0RzKXn_RahDbpyBJ_XFDLxGtjfw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:b3:ff:91:ae:b0:8a:82:3e:33:39:c1:42:ab:f8:ba:f9:6e:
         83:7e:24:67:88:5f:44:29:e6:50:26:35:6f:9c:e0:cd:9e:c3:
         6c:59:f5:95:a5:ec:0f:f5:56:d3:12:78:96:13:c9:2d:c3:37:
         24:17:95:96:f7:24:88:4d:d2:97:8f:cb:b4:b7:a3:eb:22:42:
         bf:ad:9e:72:5d:3f:84:a7:2b:a3:cd:ee:96:60:b7:e3:be:85:
         4c:e6:42:a5:15:de:ee:82:66:3f:73:8a:b9:a1:e2:a0:41:fa:
         e4:db:1b:38:11:db:02:ac:8b:2a:a0:2d:f9:3a:8f:04:09:43:
         45:b8:70:a4:21:27:81:dc:f4:4c:d2:e1:2e:e5:8e:7a:73:88:
         cc:40:d2:98:b5:31:e0:2d:14:d9:2e:41:c4:75:52:8f:ac:37:
         cc:4f:0c:57:a3:06:07:94:1b:89:8f:14:7a:5d:07:0a:46:c1:
         e9:b3:7c:15:ba:88:3a:ae:c8:ca:d7:c4:a2:94:d7:a0:4f:27:
         79:ca:d2:0e:9d:58:4d:29:7e:23:ee:f8:fd:2e:67:ae:b3:80:
         0c:fd:ee:c0:0f:f7:62:64:2d:0c:f3:81:6b:4e:a2:19:81:a7:
         00:21:fc:27:73:52:28:87:3d:27:13:69:c0:57:b4:5c:13:59:
         9f:3c:80:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-ams.rpki-client.org