Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-BlLls88ONiIhkY81NQ_hI2VqpQ.cer
File:                     1-BlLls88ONiIhkY81NQ_hI2VqpQ.cer (raw, json)
Hash identifier:          miiQANwAyZ9Pxk1uAp2TzZABxCjP4U4Y98gF19xoNNs=
Subject key identifier:   F8:19:4B:96:CF:3C:38:D8:88:86:46:3C:D4:D4:3F:84:8D:95:AA:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7BEEECB450
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/20a21b-dd18-4722-a392-9786290423c0/1/1-BlLls88ONiIhkY81NQ_hI2VqpQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/20a21b-dd18-4722-a392-9786290423c0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:49:59 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.153.252.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532289467472 (0x7beeecb450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:49:59 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f8194b96cf3c38d88886463cd4d43f848d95aa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:d3:1e:43:86:cb:26:cf:87:9a:d5:81:e3:
                    63:e2:65:8d:dc:68:13:65:3d:3d:30:a2:8f:3b:55:
                    ab:48:57:40:f8:2c:e7:13:19:ec:2e:1f:bc:77:43:
                    03:11:55:1b:a7:4b:ba:d5:38:ad:5a:fe:41:9b:f1:
                    99:7e:d9:ea:4c:03:9e:e0:02:49:e8:13:38:b7:60:
                    d6:d1:10:cc:ec:8c:72:57:bb:f8:2d:30:25:fe:2b:
                    69:bc:17:00:63:f4:ed:de:a7:cf:af:41:3e:c6:6e:
                    49:0c:92:72:0a:93:5a:6e:42:a0:1a:dd:9e:06:1d:
                    10:5a:84:96:c1:06:d6:10:f7:2f:58:ca:93:29:63:
                    81:8f:93:69:be:dd:40:29:a3:d9:51:8e:8c:29:7c:
                    c6:9e:71:09:87:34:9c:6f:ec:1d:87:56:f7:e8:c0:
                    b3:3f:f3:c5:56:50:28:6c:ea:78:8f:9a:66:f5:18:
                    28:20:85:4c:8e:4b:81:85:93:1d:e7:0c:00:91:ae:
                    1a:0f:d7:9a:d5:b8:9c:61:0e:80:c3:9e:1b:73:42:
                    db:a3:c4:37:74:e4:59:0a:e3:53:50:db:0f:b3:40:
                    74:b7:1a:a2:c6:fe:5b:af:16:99:d9:9b:03:99:88:
                    24:b1:d8:e4:2d:1a:90:1e:7d:f8:73:2a:fe:2c:20:
                    42:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:19:4B:96:CF:3C:38:D8:88:86:46:3C:D4:D4:3F:84:8D:95:AA:94
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/20a21b-dd18-4722-a392-9786290423c0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/20a21b-dd18-4722-a392-9786290423c0/1/1-BlLls88ONiIhkY81NQ_hI2VqpQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:20:c9:bd:0c:ac:93:ef:b6:cc:55:c3:1e:37:10:af:d4:8c:
         a5:b0:a9:50:56:fc:92:3e:cd:a0:61:4f:99:8d:1b:da:9a:9e:
         85:ed:49:7d:46:5e:de:01:d1:9f:fd:83:c3:fe:89:c4:71:9e:
         df:77:8f:5c:98:d1:da:3f:81:d9:66:c7:c5:4d:96:fb:fc:cb:
         49:5b:84:d4:80:52:b6:60:cd:70:0b:7c:a1:cc:cc:65:67:46:
         c8:47:51:3b:7e:9e:53:3e:10:c0:ce:45:68:d4:28:4a:1e:5c:
         ca:6d:0f:87:ce:da:3a:54:18:2a:b0:e1:fd:11:95:c8:54:89:
         ba:0c:48:bc:68:88:fe:a9:f2:cf:1e:57:b4:8d:f5:b7:1d:a1:
         27:00:fe:93:98:e2:c0:65:95:d7:50:dd:e2:df:f8:d0:ae:aa:
         7c:34:29:99:fc:d8:c0:64:8d:3f:11:53:50:51:bd:fa:07:06:
         cd:b0:72:e1:fc:2f:3d:3c:07:dd:84:b5:55:5f:6d:f0:0b:72:
         fe:1d:2e:b1:43:8c:2c:7e:35:ef:41:81:88:d8:2c:39:46:47:
         a0:3b:63:e4:ff:03:35:43:1c:e5:aa:69:f9:48:c2:80:9a:fe:
         a4:24:36:ce:a3:49:0b:be:94:30:70:7a:37:6a:cf:cb:aa:50:
         7f:0f:4f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:55 2023 by rpki-client on console-ams.rpki-client.org