Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0gA-9gmwqq4v0cpvpzRUg4tsxUM.cer
File:                     0gA-9gmwqq4v0cpvpzRUg4tsxUM.cer (raw, json)
Hash identifier:          FDPuMU5zkNWZZ1A+sOnZC0EtHzuk8avjN/wpH2YSYMg=
Subject key identifier:   D2:00:3E:F6:09:B0:AA:AE:2F:D1:CA:6F:A7:34:54:83:8B:6C:C5:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       752C1C63B0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/635293/0/D2003EF609B0AAAE2FD1CA6FA73454838B6CC543.mft
caRepository:             rsync://nostromo.heficed.net/repo/635293/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:01:08 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 5.252.76.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503251231664 (0x752c1c63b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:08 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d2003ef609b0aaae2fd1ca6fa73454838b6cc543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:ed:3e:cb:03:2d:8c:ee:1d:9c:1d:d9:0f:
                    6d:04:5c:75:7d:2b:4b:47:6d:90:d3:bb:43:18:92:
                    43:29:65:3d:49:6d:a4:f8:45:e3:2e:72:a4:8d:50:
                    76:03:18:fb:2a:c4:82:ce:eb:15:56:74:4d:35:5c:
                    4b:e3:6d:64:dd:70:f3:f6:12:78:28:cb:fd:0d:b2:
                    90:b5:3e:7d:f6:cf:a7:cd:7f:30:56:57:c0:42:a6:
                    52:99:ea:7f:43:af:5e:1c:27:97:85:7a:f8:9c:84:
                    04:ec:26:3e:37:42:af:17:5a:00:cb:83:ac:de:13:
                    24:af:6d:48:12:3f:7a:5b:a9:11:ac:50:33:83:19:
                    fc:8e:40:b3:b9:83:de:cb:7d:45:b9:cc:e8:6c:f0:
                    df:7e:79:ad:20:4f:b0:28:01:21:ff:c2:39:83:68:
                    ab:85:04:00:0e:50:40:48:1e:e1:dd:d1:ed:75:cf:
                    45:9f:14:2b:f9:c8:44:d3:93:2f:fd:bc:86:9e:5a:
                    0b:c3:08:b7:0b:8e:48:8c:1d:85:44:7d:41:c6:49:
                    43:ba:f7:ba:63:00:d1:05:24:d3:fd:5b:54:c9:7c:
                    5d:89:1c:5f:dd:d6:d0:e1:a1:78:2b:19:90:f4:09:
                    64:b6:58:49:bf:5a:6c:70:67:92:5d:ca:20:d8:96:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:00:3E:F6:09:B0:AA:AE:2F:D1:CA:6F:A7:34:54:83:8B:6C:C5:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635293/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635293/0/D2003EF609B0AAAE2FD1CA6FA73454838B6CC543.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:bf:bf:68:9b:13:87:24:61:f5:4b:a2:8e:19:90:cc:ff:79:
         ca:66:23:44:47:c8:5b:d8:51:db:4f:02:df:71:a9:0b:de:a4:
         b8:8a:4f:ae:5f:d9:1b:58:2e:cc:f2:ca:f8:1e:df:98:d0:a4:
         8a:c6:bb:f2:0f:c7:f3:70:72:59:94:59:a9:47:14:40:11:19:
         4c:d5:f6:19:9b:f5:4c:ef:08:6b:87:a1:87:28:58:8d:a3:6d:
         1f:ac:fe:94:4e:bd:b0:79:d7:66:2f:d2:8a:5f:9f:07:ce:cb:
         4b:6d:44:78:62:20:40:cb:c8:53:11:fd:54:de:45:59:eb:4e:
         e9:56:48:c6:b7:c7:5f:c1:53:6e:ec:d8:4e:32:2d:d4:4c:fa:
         ea:ef:73:8e:d3:13:2b:84:e7:30:03:b6:a0:ce:eb:d2:64:4f:
         64:83:df:b4:dd:fa:f1:35:4a:16:a3:c1:cd:41:16:f9:0c:a2:
         31:01:ce:e1:12:43:82:5f:bd:58:ea:21:f5:75:01:6d:e1:b1:
         d8:18:cc:ab:bf:10:d0:58:d1:1f:f3:01:81:92:03:3a:89:2d:
         49:3c:1a:37:b8:ed:d9:f2:55:3f:48:79:87:13:54:8a:6a:fc:
         48:3e:5a:b9:5d:7b:e2:59:d5:a0:67:b4:d9:a0:38:ee:61:cb:
         bf:6e:4e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:56 2023 by rpki-client on console-fra.rpki-client.org