Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0Y67l0sJPXQ6EqSTEuxvvEEQFnU.cer
File:                     0Y67l0sJPXQ6EqSTEuxvvEEQFnU.cer (raw, json)
Hash identifier:          FlXjI7z28II+M5jicqr4tTOjKVcX4yxkjOr02UCAsTY=
Subject key identifier:   D1:8E:BB:97:4B:09:3D:74:3A:12:A4:93:12:EC:6F:BC:41:10:16:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       76D620F5D2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/a553f5-3f71-4550-af4d-d53b614688c3/1/0Y67l0sJPXQ6EqSTEuxvvEEQFnU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/a553f5-3f71-4550-af4d-d53b614688c3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:37:20 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.155.164.0/22
                          IP: 2a0f:f80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510398625234 (0x76d620f5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:37:20 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d18ebb974b093d743a12a49312ec6fbc41101675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:90:dd:93:d3:d8:1d:41:50:c7:ea:94:bd:6a:
                    fa:92:36:1e:70:49:85:06:03:b1:31:69:3d:14:e7:
                    9d:16:dd:c2:a7:29:99:89:d1:c2:83:35:a4:88:1e:
                    37:85:61:b7:32:38:a9:46:a5:b9:33:77:0c:3f:71:
                    62:7a:c2:69:c5:f6:64:16:bd:30:f1:a8:cb:71:9f:
                    00:64:a0:84:67:b7:3c:31:f1:f2:1d:8a:ee:56:54:
                    bf:6b:68:4c:43:68:82:46:34:8b:86:e1:a1:59:62:
                    45:f0:56:b4:5c:c1:70:8b:ea:15:f8:fe:15:6f:d7:
                    9a:36:57:ef:56:de:eb:b3:b8:fd:2b:19:aa:2a:f9:
                    57:5f:33:20:4c:df:be:56:d1:f0:3a:8f:44:a5:e2:
                    fb:9c:33:1e:cc:60:07:29:c4:ba:df:3c:d2:d1:67:
                    68:b1:09:31:81:d1:cb:05:d3:ec:9a:52:d1:a8:0f:
                    74:b8:17:82:83:d7:0a:43:c4:ba:25:51:e8:69:2c:
                    1c:e2:d1:9f:c7:ba:5d:20:87:bc:fc:83:13:d8:bc:
                    62:a1:7e:c1:c0:58:a2:37:27:f3:c1:4b:0f:e9:5d:
                    a4:45:22:39:8d:fd:ba:4e:60:14:5b:53:94:36:2f:
                    fb:48:f7:72:c3:9e:da:76:5c:87:4d:c8:8c:b5:22:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8E:BB:97:4B:09:3D:74:3A:12:A4:93:12:EC:6F:BC:41:10:16:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a553f5-3f71-4550-af4d-d53b614688c3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a553f5-3f71-4550-af4d-d53b614688c3/1/0Y67l0sJPXQ6EqSTEuxvvEEQFnU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.164.0/22
                IPv6:
                  2a0f:f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         67:a8:cd:97:8d:95:59:5a:c3:ef:ff:fe:d2:06:8c:07:dc:12:
         d5:c2:21:4a:cb:02:18:df:92:1d:b7:4d:65:53:23:04:8d:c5:
         55:76:8b:97:2f:26:cb:cf:2b:88:76:a1:e3:69:c5:9c:77:82:
         9f:9c:75:7e:a4:2c:4d:15:e6:7f:5c:93:b1:14:1a:15:8b:44:
         d8:0f:d3:4d:3c:6d:b1:20:29:53:3d:34:ca:a1:c9:8a:4b:bf:
         8c:7a:72:ca:df:06:80:72:b4:bd:31:af:16:1a:6c:06:1e:34:
         2a:c2:3b:e1:95:74:32:13:55:9a:2b:94:28:ae:2b:f9:4f:e9:
         1d:3e:3f:36:ee:5a:7e:c8:e5:e6:86:70:7b:c1:8d:c7:ba:24:
         00:be:e6:98:c9:a5:b2:02:78:fc:b6:e7:5f:24:8e:55:17:60:
         b4:02:af:1d:60:03:1a:96:7e:74:34:80:7f:7b:5f:0e:c7:8d:
         3e:69:63:02:c0:4a:ac:86:d2:7e:80:8f:10:7b:6a:62:55:6c:
         70:d0:e4:5a:ed:a8:03:5e:c3:93:c5:c1:83:ca:58:f2:f6:83:
         ac:34:41:99:ff:64:95:4c:28:21:da:85:5f:8b:31:62:68:04:
         5f:50:be:60:44:96:0d:7c:36:fc:1b:f4:da:a9:cc:05:3e:8b:
         1e:3b:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-ams.rpki-client.org