Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0wV1r-WJF0MLO1Zq89nLyc7UpWs.cer
File:                     0wV1r-WJF0MLO1Zq89nLyc7UpWs.cer (raw, json)
Hash identifier:          3yL9E8ZDmRpv0xc01cDG9ksYy24aMSCOUICxbHo7wr4=
Subject key identifier:   D3:05:75:AF:E5:89:17:43:0B:3B:56:6A:F3:D9:CB:C9:CE:D4:A5:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9EBA26FE28
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/0wV1r-WJF0MLO1Zq89nLyc7UpWs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 05:51:36 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 48704
                          IP: 185.171.220.0/22
                          IP: 2a0d:9d40::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681727950376 (0x9eba26fe28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:51:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d30575afe58917430b3b566af3d9cbc9ced4a56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:b5:61:9d:e5:49:8c:45:c8:8c:f5:c3:fe:
                    e7:bc:08:e3:7f:b8:76:4b:21:ae:8b:ea:c8:c1:c8:
                    7b:f5:9f:1c:91:1b:a4:f5:c3:b8:de:b4:00:5b:b8:
                    2f:3c:11:10:cb:02:1f:69:d5:88:3b:57:6e:b6:02:
                    54:4a:ca:aa:94:89:a3:34:41:6e:b0:6a:04:89:26:
                    55:d4:f6:7f:36:4c:fe:28:3f:87:48:a8:41:a8:ac:
                    0f:b1:fa:0a:2c:1d:f6:f0:ba:21:c1:a0:8a:b4:06:
                    73:74:90:42:43:1d:ac:42:b0:2e:f1:7b:a8:37:2f:
                    b3:80:79:7a:30:c5:fa:76:52:39:04:4a:70:dc:3a:
                    fc:d0:43:bb:1e:71:e8:d5:1a:09:d7:d7:a7:76:1a:
                    af:2e:60:f0:5a:7e:c6:04:d4:1b:bd:95:33:08:72:
                    12:78:74:75:4d:03:75:43:40:d1:37:c8:72:ac:00:
                    16:1c:c1:e2:30:fd:0a:d4:ef:29:2b:df:49:c8:24:
                    c9:13:05:4a:7a:51:6c:51:cc:ca:79:6c:7a:74:ef:
                    3e:f5:aa:0d:d8:f1:c6:55:c4:57:c3:a6:25:26:82:
                    41:d3:46:10:44:b5:3a:14:e2:e0:50:af:b3:f9:7d:
                    94:f6:6e:f1:7a:19:37:f9:ec:36:41:6a:d0:c2:b2:
                    87:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:05:75:AF:E5:89:17:43:0B:3B:56:6A:F3:D9:CB:C9:CE:D4:A5:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/0wV1r-WJF0MLO1Zq89nLyc7UpWs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.171.220.0/22
                IPv6:
                  2a0d:9d40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48704

    Signature Algorithm: sha256WithRSAEncryption
         46:69:f2:56:11:20:63:6a:e7:4d:02:49:39:de:bf:51:9e:8d:
         2e:13:52:23:30:11:74:9f:27:6b:04:61:70:3e:38:b7:84:c3:
         9a:b5:dc:db:28:cc:b6:bf:c3:af:b6:89:47:5a:61:ff:4e:c2:
         fd:6f:64:18:59:ca:c4:68:1b:7f:9a:4d:8f:a1:76:21:1e:78:
         08:c8:30:16:c6:b5:b7:c3:77:a0:b8:c3:35:a1:dc:ee:6e:d8:
         27:ea:87:78:c7:86:93:10:ce:c6:67:a6:16:3a:74:af:74:b9:
         9e:3d:be:b8:57:44:86:66:0f:a0:7e:b5:a8:50:94:12:6a:00:
         1a:0e:35:47:a7:b4:a6:3f:e1:b8:5e:a7:4c:e5:8e:fc:a6:85:
         20:92:79:50:d7:1b:e1:12:1a:a8:09:bd:8c:ea:68:79:b5:ef:
         6e:9a:c1:cc:69:88:ba:39:54:e6:c8:75:50:a1:e8:fa:47:4b:
         db:25:d6:03:e8:b4:86:9f:a7:74:23:02:54:ba:81:49:03:4d:
         ec:44:99:17:5a:02:67:f4:56:e6:01:fa:d7:3b:a6:3f:26:5d:
         18:bb:ab:dd:0e:6b:01:3a:2a:6f:33:c7:da:2d:a4:8a:d3:9a:
         1c:20:de:88:bf:80:af:2d:26:1f:01:f5:41:62:67:e2:1a:93:
         c3:31:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----