Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15pF3GSyYOHNOtvBKDq2Jc2RnGc.cer
File:                     15pF3GSyYOHNOtvBKDq2Jc2RnGc.cer (raw, json)
Hash identifier:          bgqDjIc7/cxeWf/cs8yNhzgOKeXRO/navxz8nq4f00g=
Subject key identifier:   D7:9A:45:DC:64:B2:60:E1:CD:3A:DB:C1:28:3A:B6:25:CD:91:9C:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       751EA4CEAC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/1123971/0/D79A45DC64B260E1CD3ADBC1283AB625CD919C67.mft
caRepository:             rsync://nostromo.heficed.net/repo/1123971/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:00:18 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 213085
                          IP: 45.133.168.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503025290924 (0x751ea4ceac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:18 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d79a45dc64b260e1cd3adbc1283ab625cd919c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:1e:9a:1f:ef:99:8d:b1:e2:36:95:cf:f6:
                    1f:89:bc:a3:45:aa:f0:fb:d8:1f:5c:19:6c:d2:7a:
                    43:b1:8b:12:eb:05:ac:05:65:93:d6:de:02:eb:1f:
                    eb:4b:3b:11:86:d1:ed:c0:8b:83:1d:37:c6:ae:8c:
                    75:51:ea:ff:b9:6c:98:c0:a8:c8:ef:cf:74:42:e5:
                    c8:02:00:39:44:1d:2e:73:28:f4:2a:88:3e:b3:79:
                    e8:94:0d:ca:fc:91:79:8b:7b:2f:e3:43:25:41:b3:
                    a8:a1:0d:06:63:44:2f:d8:87:b2:56:2c:8b:5e:88:
                    eb:a0:f9:3d:19:97:0f:e8:cf:33:b9:7c:80:1b:56:
                    27:a7:19:9a:17:0f:af:14:f2:04:b1:53:04:81:23:
                    c4:3f:f0:dc:65:86:6e:c9:36:77:3d:e4:8f:cf:df:
                    5e:83:ab:3f:8f:35:77:81:39:cd:6a:a9:32:26:95:
                    e1:e0:d2:0f:42:23:e7:fc:b0:f6:62:7d:bf:32:30:
                    06:5f:0b:a5:36:c7:36:49:71:76:b9:9e:d1:4b:e1:
                    d3:c8:d8:e0:27:e0:a5:8e:7f:54:ca:77:e0:78:57:
                    5c:63:f2:99:90:1d:01:23:c8:2c:bb:0f:5f:bd:de:
                    88:db:ef:0d:dd:45:bc:da:1f:84:00:c2:fa:48:bc:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9A:45:DC:64:B2:60:E1:CD:3A:DB:C1:28:3A:B6:25:CD:91:9C:67
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123971/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123971/0/D79A45DC64B260E1CD3ADBC1283AB625CD919C67.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.168.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213085

    Signature Algorithm: sha256WithRSAEncryption
         88:f7:0c:91:a6:c9:97:fe:16:15:a6:41:70:36:89:54:df:d4:
         24:19:64:b9:ec:43:46:e7:17:19:4b:f9:ca:f3:d2:6e:d7:26:
         bb:30:2a:34:0c:62:96:ca:f6:16:41:31:d7:a3:fa:1f:5d:2a:
         72:ca:2d:f6:07:75:b6:6a:87:cd:69:ed:d1:1f:d9:2c:23:e7:
         a8:ab:12:46:f8:a5:20:b4:35:6d:5f:1c:81:12:e8:ea:40:47:
         2b:f8:24:9d:ee:43:da:10:b4:12:7f:d6:6a:3c:09:71:97:30:
         69:30:63:09:0f:89:08:50:61:59:ec:ac:3c:bf:db:d2:fe:05:
         f7:be:5a:a5:8d:55:28:a6:94:7f:1a:c1:37:30:14:b3:20:67:
         6e:17:9d:a6:ee:2c:3b:6f:5e:da:28:b5:fb:13:dd:fa:d9:33:
         c8:17:43:e9:79:4c:6e:5a:c0:08:3a:1f:f0:81:eb:28:98:b2:
         ca:cb:f7:e1:27:1c:20:65:67:a4:93:da:de:39:d6:9a:af:e1:
         14:74:9d:f9:bb:c1:80:cb:72:f2:fe:3f:7f:d9:0a:91:1c:f8:
         9f:d4:99:7f:47:99:de:73:20:59:39:8f:40:05:94:fc:87:d8:
         a9:0d:7e:c5:da:d5:60:be:3a:fb:33:c5:8d:db:17:16:d3:d0:
         ca:57:30:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org