Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0ZEIl4j2BOO3_nP9tpB_6OL5_gk.cer
File:                     0ZEIl4j2BOO3_nP9tpB_6OL5_gk.cer (raw, json)
Hash identifier:          5kcvEUwuhy03jgXSD26KnGZJVMhMhsGBD6L38zUyCg0=
Subject key identifier:   D1:91:08:97:88:F6:04:E3:B7:FE:73:FD:B6:90:7F:E8:E2:F9:FE:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       81A55A20C9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/21d486-ce91-410f-b241-6a806adbe5e7/1/0ZEIl4j2BOO3_nP9tpB_6OL5_gk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/21d486-ce91-410f-b241-6a806adbe5e7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:36:12 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.148.232.0/22
                          IP: 2a0a:f200::/29
                          IP: 2a0f:3e00::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556824928457 (0x81a55a20c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:36:12 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d191089788f604e3b7fe73fdb6907fe8e2f9fe09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:42:65:c4:89:95:67:3e:09:97:71:0a:6e:67:
                    a0:5b:67:a9:eb:8e:2c:34:e2:95:ba:9b:bb:1a:59:
                    c1:9e:ef:32:98:ab:ab:e3:55:ce:64:cc:a2:1b:dd:
                    ad:14:4e:8f:5a:67:c2:b2:19:dd:58:18:4d:9f:82:
                    a6:ee:ae:be:13:71:e0:dc:ac:a5:10:77:70:c4:8c:
                    b9:42:5b:5d:3a:d3:24:af:17:d8:ed:ab:08:52:e3:
                    76:b4:e4:80:4b:67:69:bb:0a:1b:8c:cf:dc:8f:fe:
                    b3:f1:cb:40:30:ea:be:23:15:9f:4f:97:e2:bc:b7:
                    97:28:0c:74:06:91:90:67:8c:a2:d0:b5:cf:e1:fd:
                    f7:f1:17:3d:4e:58:f6:87:f2:7a:69:98:5a:3c:b0:
                    c6:c7:56:d0:36:9a:75:64:c1:c0:a3:a0:c0:cb:0a:
                    a5:81:4a:cb:b7:3c:8f:b3:66:17:d4:c8:c8:06:fc:
                    7d:bb:ea:6b:6e:82:85:4e:86:39:07:e1:e5:01:81:
                    57:13:57:ae:b7:8f:d3:9c:86:7b:0e:26:ae:ef:e6:
                    0b:6b:7a:0e:59:26:b8:4a:2d:f0:e5:81:65:76:0d:
                    20:df:ae:69:44:22:52:fd:b8:d6:85:ff:7c:4b:8b:
                    ab:a2:0c:0f:e6:11:53:0e:40:54:75:8a:d5:98:bc:
                    49:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:91:08:97:88:F6:04:E3:B7:FE:73:FD:B6:90:7F:E8:E2:F9:FE:09
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/21d486-ce91-410f-b241-6a806adbe5e7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/21d486-ce91-410f-b241-6a806adbe5e7/1/0ZEIl4j2BOO3_nP9tpB_6OL5_gk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.232.0/22
                IPv6:
                  2a0a:f200::/29
                  2a0f:3e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         60:9f:ae:c1:af:83:76:51:2c:aa:79:11:f2:e7:9f:06:02:ee:
         39:50:30:bc:ed:14:4f:92:ac:fb:08:73:be:c6:87:54:42:67:
         ee:75:ce:79:1b:ba:21:13:6f:eb:d3:f7:2c:e7:53:da:c6:5a:
         9c:22:b4:43:23:cc:0c:96:01:76:df:e3:9a:2c:a8:36:26:c9:
         0f:f5:70:6b:e9:52:9b:d2:bb:7e:c3:af:ad:41:fb:d7:ac:74:
         8c:7f:9e:06:80:8e:92:6f:28:bb:1a:b1:e7:cc:d7:c5:4a:25:
         49:d3:f5:ea:b0:02:7b:49:86:a0:e4:40:e1:31:e1:e6:b5:80:
         c0:48:22:ec:d0:0b:74:d1:40:cc:2a:00:c5:33:43:6c:83:89:
         6a:91:03:e0:59:ba:10:b0:d9:a9:66:d7:6c:7f:c4:3d:a3:a2:
         38:f6:64:23:81:d7:82:5f:66:07:e1:af:11:f8:88:f7:ee:4c:
         e4:a1:d6:c8:4e:d2:c6:07:fc:67:1f:71:77:91:23:0b:47:7d:
         1c:a1:ea:a9:99:cd:97:d9:3e:dd:55:7a:ee:25:73:ce:aa:dd:
         56:6d:ff:4c:42:6d:a3:16:7f:1c:63:6f:98:f9:70:c7:71:ab:
         e2:87:39:cc:87:b3:a7:0a:bb:0c:cd:7d:5b:48:b9:8c:f5:43:
         ab:2a:16:7a
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIGAIGlWiDJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDUzNjEyWhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkMTkxMDg5Nzg4
ZjYwNGUzYjdmZTczZmRiNjkwN2ZlOGUyZjlmZTA5MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAjEJlxImVZz4Jl3EKbmegW2ep644sNOKVupu7GlnBnu8y
mKur41XOZMyiG92tFE6PWmfCshndWBhNn4Km7q6+E3Hg3KylEHdwxIy5QltdOtMk
rxfY7asIUuN2tOSAS2dpuwobjM/cj/6z8ctAMOq+IxWfT5fivLeXKAx0BpGQZ4yi
0LXP4f338Rc9Tlj2h/J6aZhaPLDGx1bQNpp1ZMHAo6DAywqlgUrLtzyPs2YX1MjI
Bvx9u+prboKFToY5B+HlAYFXE1eut4/TnIZ7Diau7+YLa3oOWSa4Si3w5YFldg0g
365pRCJS/bjWhf98S4urogwP5hFTDkBUdYrVmLxJXwIDAQABo4ICmjCCApYwHQYD
VR0OBBYEFNGRCJeI9gTjt/5z/baQf+ji+f4JMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzIxZDQ4Ni1jZTkxLTQxMGYt
YjI0MS02YTgwNmFkYmU1ZTcvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvMjFkNDg2LWNlOTEtNDEwZi1i
MjQxLTZhODA2YWRiZTVlNy8xLzBaRUlsNGoyQk9PM19uUDl0cEJfNk9MNV9nay5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAM
BAIAATAGAwQCLZToMBQEAgACMA4DBQMqCvIAAwUDKg8+ADANBgkqhkiG9w0BAQsF
AAOCAQEAYJ+uwa+DdlEsqnkR8uefBgLuOVAwvO0UT5Ks+whzvsaHVEJn7nXOeRu6
IRNv69P3LOdT2sZanCK0QyPMDJYBdt/jmiyoNibJD/Vwa+lSm9K7fsOvrUH716x0
jH+eBoCOkm8ouxqx58zXxUolSdP16rACe0mGoORA4THh5rWAwEgi7NALdNFAzCoA
xTNDbIOJapED4Fm6ELDZqWbXbH/EPaOiOPZkI4HXgl9mB+GvEfiI9+5M5KHWyE7S
xgf8Zx9xd5EjC0d9HKHqqZnNl9k+3VV67iVzzqrdVm3/TEJtoxZ/HGNvmPlwx3Gr
4oc5zIezpwq7DM19W0i5jPVDqyoWeg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:26 2023 by rpki-client on console-fra.rpki-client.org