Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0WOGDru-E5I-5i2B0GsHPLHZ540.cer
File:                     0WOGDru-E5I-5i2B0GsHPLHZ540.cer (raw, json)
Hash identifier:          W64d07JF2jNVzDJ6rjZAebYrI7+zZ3GETpuIwCc/LUg=
Subject key identifier:   D1:63:86:0E:BB:BE:13:92:3E:E6:2D:81:D0:6B:07:3C:B1:D9:E7:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7CF0B9C17C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dd/79cb73-1cde-46c9-9130-f5a63a8fb9d2/1/0WOGDru-E5I-5i2B0GsHPLHZ540.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dd/79cb73-1cde-46c9-9130-f5a63a8fb9d2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:14:23 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 2.56.188.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536614650236 (0x7cf0b9c17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:14:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d163860ebbbe13923ee62d81d06b073cb1d9e78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:02:df:bd:1f:f0:40:ef:d4:1b:4c:04:35:
                    5f:68:76:59:51:bf:de:e7:ee:6d:31:b9:3f:84:62:
                    9a:d3:ba:4e:18:d1:25:5e:e2:61:7e:30:7c:34:48:
                    67:b9:22:7e:51:c1:68:74:78:c5:a6:c6:ef:c6:3e:
                    6a:d6:19:d7:ca:b1:f6:d5:69:04:4d:ca:cf:62:5e:
                    78:81:5b:22:4f:0a:5f:6d:53:7e:1c:6c:37:42:be:
                    81:b3:77:3a:73:f0:38:83:c1:ee:77:aa:ab:c7:dc:
                    0c:9f:e0:ba:6e:f8:1b:40:fa:f6:99:c2:53:d3:2d:
                    d7:6a:93:19:06:b1:74:70:c8:74:19:24:e1:cf:5a:
                    76:ce:b4:1b:09:52:f7:a9:8e:10:fa:92:57:63:af:
                    a5:1e:c5:83:86:fe:b4:13:d9:7e:0b:4a:f2:de:04:
                    f5:6a:96:9c:1f:12:1f:4b:8a:e1:96:80:14:f9:99:
                    f2:fd:18:46:4d:fc:6a:e6:7c:6d:58:fc:ab:65:cf:
                    53:e4:a6:2d:13:f5:96:34:7a:ca:c1:4b:bd:41:6b:
                    61:86:93:25:89:46:cf:c0:c4:d0:38:65:25:4c:8e:
                    b2:18:55:b2:b5:bf:92:a2:4a:79:9d:96:69:90:07:
                    65:eb:95:41:96:6d:6b:fb:45:26:95:20:0d:c9:b7:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:63:86:0E:BB:BE:13:92:3E:E6:2D:81:D0:6B:07:3C:B1:D9:E7:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/79cb73-1cde-46c9-9130-f5a63a8fb9d2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/79cb73-1cde-46c9-9130-f5a63a8fb9d2/1/0WOGDru-E5I-5i2B0GsHPLHZ540.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:f9:c4:42:6c:7d:50:90:12:ba:cd:b5:73:0d:41:65:74:a3:
         fc:e4:c7:e3:d2:4a:bb:b4:99:c2:09:d8:c8:56:8e:30:d3:e2:
         c6:f0:d8:4b:5f:84:8f:e6:50:cb:b6:0d:55:da:00:37:06:76:
         e2:c1:36:6c:b5:1b:4d:ca:4c:44:e9:15:0b:54:dc:2e:66:54:
         d6:13:3c:74:e1:4e:57:ed:61:aa:e0:e8:f9:28:34:82:bc:86:
         9c:1f:3f:4c:fe:85:0c:fc:dc:84:75:b7:5c:76:66:ac:67:44:
         35:e9:79:2f:43:b7:aa:82:4a:37:84:43:51:12:bd:23:be:6b:
         43:bb:d2:94:7d:91:72:8b:d8:b7:4b:1d:19:4b:3b:73:14:9f:
         db:b1:79:91:39:ef:2a:e7:21:e7:33:41:d9:3c:5a:a8:83:f6:
         93:e9:3a:ce:7f:e2:e8:8d:2c:74:0f:51:ed:22:17:9f:42:17:
         ac:55:df:53:61:67:6b:fa:16:13:d9:42:6f:b3:1c:0c:dc:db:
         b7:d0:bb:63:89:7d:58:1c:1d:eb:2a:5e:87:87:2d:70:cf:5a:
         7a:30:d0:96:1e:ec:aa:cc:b0:52:e9:cb:2f:63:b3:a8:d2:0b:
         1b:4e:e9:f6:cc:34:70:df:d8:57:3f:51:75:05:f9:4a:62:5a:
         22:69:bf:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-ams.rpki-client.org