Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1roLBI-0F8JDQ4zmgz1tPjgJmag.cer
File:                     1roLBI-0F8JDQ4zmgz1tPjgJmag.cer (raw, json)
Hash identifier:          VwUMQ55ImpxBOPC2YCE920Nk4KZstuR/7i9lJSkc9ng=
Subject key identifier:   D6:BA:0B:04:8F:B4:17:C2:43:43:8C:E6:83:3D:6D:3E:38:09:99:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7EFB68931B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/6d41ef-be4a-42e0-b9a0-205edc12b490/1/1roLBI-0F8JDQ4zmgz1tPjgJmag.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/6d41ef-be4a-42e0-b9a0-205edc12b490/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 04:05:59 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.66.236.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545383813915 (0x7efb68931b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:05:59 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d6ba0b048fb417c243438ce6833d6d3e380999a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:60:78:3a:65:c4:97:25:16:7e:4f:02:00:
                    d8:15:e3:f3:b9:93:43:ad:98:1a:cc:3f:cb:b9:45:
                    84:4b:a2:33:58:37:a1:c0:43:10:e7:cf:d2:a2:0c:
                    cb:e3:6a:3c:eb:5c:5b:00:1a:c5:69:79:4a:b3:f8:
                    85:e3:ba:0c:f3:55:40:a4:c5:40:11:88:4a:6c:be:
                    3d:90:f0:49:eb:c2:a8:b8:ae:62:29:e2:7e:14:18:
                    d7:ec:cc:4a:e6:e1:5d:b6:b3:9c:a2:9d:c5:dc:b0:
                    92:a4:77:ed:c2:a2:f5:b8:f7:dd:17:8d:42:11:b5:
                    e6:0d:21:5b:cf:da:9c:71:c0:d3:dd:69:97:21:e4:
                    28:fd:f1:1a:cd:66:54:5d:a5:b0:ed:6c:79:19:a7:
                    71:0c:7f:49:6d:7b:79:1d:07:cd:8d:65:e2:c9:dc:
                    df:72:40:de:b7:72:9b:51:dc:ac:97:c3:e3:58:df:
                    72:66:cc:30:d2:c6:e0:e1:6e:92:8a:78:5f:b5:bf:
                    e2:84:b9:36:9c:ec:0f:7d:86:81:4e:69:f1:df:02:
                    23:72:99:a1:70:0e:01:f5:3e:81:c1:04:f4:c8:0a:
                    97:fa:8b:7e:b7:6a:2a:de:09:cd:cf:70:47:b9:20:
                    fd:49:8c:35:b8:64:63:4f:a1:3e:54:3f:65:93:fe:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BA:0B:04:8F:B4:17:C2:43:43:8C:E6:83:3D:6D:3E:38:09:99:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d41ef-be4a-42e0-b9a0-205edc12b490/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d41ef-be4a-42e0-b9a0-205edc12b490/1/1roLBI-0F8JDQ4zmgz1tPjgJmag.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:61:7e:f7:5d:18:07:b5:86:7e:ca:a3:d9:2d:33:21:17:f5:
         ca:4a:a6:9e:2e:ee:a0:4e:d4:84:de:ec:4f:a5:a4:14:fc:28:
         79:3c:e2:16:6f:a2:4d:f1:e7:d2:5b:c2:31:9b:97:ac:43:a4:
         4c:88:6f:bc:16:0f:2d:9a:aa:7a:45:28:1c:3d:8c:32:e6:c9:
         19:3c:22:23:74:47:31:6c:c3:71:8c:66:14:f0:46:c7:76:b8:
         a1:4f:9e:b6:9f:b6:a5:ff:ef:e8:f3:48:7b:7d:37:0e:a1:f6:
         40:51:49:67:0b:2a:a6:52:a3:98:b3:24:8c:88:9a:9d:a0:32:
         41:87:14:87:76:e1:49:b7:b8:01:55:2e:de:b1:26:de:e2:fb:
         1d:59:f7:d0:54:1c:7f:c2:65:83:8b:89:bb:2e:b0:70:81:47:
         26:3c:e3:0d:58:4f:a6:50:1e:13:5a:c4:20:e5:a6:8b:63:58:
         54:a2:90:e7:22:4b:d2:35:53:3a:6b:14:93:e4:03:c4:d6:1f:
         e7:bf:ca:98:e2:bc:aa:33:ae:d8:63:a1:1a:a5:66:ba:4d:ad:
         fd:14:ea:71:67:55:08:ea:56:61:45:26:cd:42:34:78:23:49:
         24:b8:88:51:76:9a:0a:f3:79:50:3d:9b:dc:85:7e:52:09:e3:
         ee:b7:5e:a9
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFfvtokxswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwNDA1NTlaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGQ2YmEwYjA0OGZi
NDE3YzI0MzQzOGNlNjgzM2Q2ZDNlMzgwOTk5YTgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCi2GB4OmXElyUWfk8CANgV4/O5k0OtmBrMP8u5RYRLojNY
N6HAQxDnz9KiDMvjajzrXFsAGsVpeUqz+IXjugzzVUCkxUARiEpsvj2Q8Enrwqi4
rmIp4n4UGNfszErm4V22s5yincXcsJKkd+3CovW4990XjUIRteYNIVvP2pxxwNPd
aZch5Cj98RrNZlRdpbDtbHkZp3EMf0lte3kdB82NZeLJ3N9yQN63cptR3KyXw+NY
33JmzDDSxuDhbpKKeF+1v+KEuTac7A99hoFOafHfAiNymaFwDgH1PoHBBPTICpf6
i363aireCc3PcEe5IP1JjDW4ZGNPoT5UP2WT/nGPAgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU1roLBI+0F8JDQ4zmgz1tPjgJmagwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNmQ0MWVmLWJlNGEtNDJlMC1i
OWEwLTIwNWVkYzEyYjQ5MC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82ZDQxZWYtYmU0YS00MmUwLWI5
YTAtMjA1ZWRjMTJiNDkwLzEvMXJvTEJJLTBGOEpEUTR6bWd6MXRQamdKbWFnLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAItQuwwDQYJKoZIhvcNAQELBQADggEBAJJhfvddGAe1hn7Ko9ktMyEX
9cpKpp4u7qBO1ITe7E+lpBT8KHk84hZvok3x59JbwjGbl6xDpEyIb7wWDy2aqnpF
KBw9jDLmyRk8IiN0RzFsw3GMZhTwRsd2uKFPnraftqX/7+jzSHt9Nw6h9kBRSWcL
KqZSo5izJIyImp2gMkGHFId24Um3uAFVLt6xJt7i+x1Z99BUHH/CZYOLibsusHCB
RyY84w1YT6ZQHhNaxCDlpotjWFSikOciS9I1UzprFJPkA8TWH+e/ypjivKozrthj
oRqlZrpNrf0U6nFnVQjqVmFFJs1CNHgjSSS4iFF2mgrzeVA9m9yFflIJ4+63Xqk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-ams.rpki-client.org