Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-GQxTczW1D29fzVDFgdB53I7F94.cer
File:                     1-GQxTczW1D29fzVDFgdB53I7F94.cer (raw, json)
Hash identifier:          jNkKab8snThh99Q9UIDrsvTCEOSdr53EzTse33tmkW8=
Subject key identifier:   F8:64:31:4D:CC:D6:D4:3D:BD:7F:35:43:16:07:41:E7:72:3B:17:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0183EB528F6B4AB4B89704B5BE1E8D5594F5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/58f59e-a8bf-42f3-855b-c50d2de860f4/1/1-GQxTczW1D29fzVDFgdB53I7F94.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/58f59e-a8bf-42f3-855b-c50d2de860f4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Oct 2022 13:39:59 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.128.64.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:eb:52:8f:6b:4a:b4:b8:97:04:b5:be:1e:8d:55:94:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 18 13:39:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f864314dccd6d43dbd7f3543160741e7723b17de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3a:80:d3:15:d6:b1:77:ce:4d:bf:f6:c2:a0:
                    b2:fa:ec:0b:e8:3a:e4:08:5d:20:ad:12:ba:e1:b1:
                    c8:00:88:cb:54:4b:be:f3:d0:12:85:20:cd:71:52:
                    af:92:5c:e3:c9:61:d2:12:32:aa:62:bb:03:50:cb:
                    ea:d4:78:ca:d1:2d:06:76:ee:d0:5f:13:26:e0:4c:
                    7a:21:a2:2d:22:91:bc:c9:bc:27:b5:65:89:85:1c:
                    9f:61:56:92:8d:e3:c2:1e:d6:fa:8f:9b:2f:13:19:
                    f1:c9:66:1e:fd:52:1e:16:dc:48:0a:6f:d4:3a:65:
                    75:20:e6:89:63:23:cd:f3:46:7d:2c:a9:b0:a3:8a:
                    9f:87:db:80:37:d5:9d:ba:41:78:89:86:13:dd:48:
                    4e:32:f6:ed:e2:1d:1d:bf:f4:13:2f:47:77:02:fd:
                    b3:e3:44:6d:74:5c:88:b9:65:ff:fb:90:7a:45:a8:
                    84:a5:df:35:33:2e:01:dc:53:57:88:5b:1b:a2:61:
                    69:8b:59:d2:ed:20:70:d7:27:ce:c4:74:28:ce:b8:
                    9a:16:eb:c7:26:52:8b:2d:ba:3b:cc:dc:70:21:19:
                    c7:f8:df:06:c3:0c:3d:14:bc:5a:1a:23:ab:be:e6:
                    fe:29:49:37:8d:f4:62:4a:75:a0:83:38:6f:8f:b2:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:64:31:4D:CC:D6:D4:3D:BD:7F:35:43:16:07:41:E7:72:3B:17:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/58f59e-a8bf-42f3-855b-c50d2de860f4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/58f59e-a8bf-42f3-855b-c50d2de860f4/1/1-GQxTczW1D29fzVDFgdB53I7F94.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:21:67:9e:78:fa:ca:87:c9:d4:f3:a8:b4:86:52:3a:32:80:
         dc:e5:7c:7d:c5:ce:db:27:72:f6:52:73:b9:61:69:09:94:80:
         01:40:a0:ee:27:ce:fa:75:94:94:46:b8:10:f5:a4:ec:5e:4e:
         c7:c5:64:1b:e6:20:bd:21:b1:4f:cc:f3:08:dd:3e:81:37:8e:
         47:c8:78:db:9d:fa:c6:9d:99:48:4b:7d:48:f4:a4:af:ea:e0:
         85:c6:ef:6a:82:bd:df:15:ca:00:1e:ec:bb:a3:d6:60:c7:c6:
         7a:76:fa:fe:03:87:1a:6e:c0:c0:73:34:9b:47:83:61:fa:ef:
         b5:9c:24:cd:46:03:fa:3c:b8:11:f9:c8:ce:77:99:ed:b1:fa:
         87:42:d6:82:59:c4:0a:ff:a5:69:c0:96:4f:a8:eb:18:ec:d7:
         a2:8c:dc:02:60:59:9c:07:1b:0b:e5:d2:72:dd:39:44:ae:04:
         44:28:30:45:d9:b8:64:bd:2b:0d:c0:e3:7e:ce:3d:36:f7:2e:
         d3:23:e5:65:60:cb:ad:92:9c:bf:0c:25:d5:a8:12:56:1e:a0:
         16:86:f0:e6:e5:9a:08:33:1a:b6:d9:b1:b3:6a:b5:93:f2:23:
         11:2b:c6:cf:ed:88:46:21:6f:e1:10:84:cb:81:cb:93:87:b3:
         c3:f0:3b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:06 2023 by rpki-client on console-fra.rpki-client.org