Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23qoOWRmj_XljtGwwSYrFO6j3GY.cer
File:                     23qoOWRmj_XljtGwwSYrFO6j3GY.cer (raw, json)
Hash identifier:          6uNCDuEvTVf5ZeMBChqVKCNs+lREYEWeIJFIIFldsjY=
Subject key identifier:   DB:7A:A8:39:64:66:8F:F5:E5:8E:D1:B0:C1:26:2B:14:EE:A3:DC:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       77159D0A26
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a0/775365-cb7c-4d50-9e0a-c40e50fc5699/1/23qoOWRmj_XljtGwwSYrFO6j3GY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a0/775365-cb7c-4d50-9e0a-c40e50fc5699/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:42:37 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.13.244.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511463721510 (0x77159d0a26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:42:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=db7aa83964668ff5e58ed1b0c1262b14eea3dc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:10:c4:74:64:77:22:82:0e:4f:89:62:87:4c:
                    3a:ed:97:ee:2b:ae:21:ba:b1:68:7b:10:4c:4c:0e:
                    9c:5a:a0:5f:45:fe:ff:0e:d5:0c:6e:8e:39:45:dd:
                    ed:b8:f2:7a:78:1d:31:38:e2:45:18:d7:e9:47:ca:
                    ec:db:28:6b:1c:6b:50:81:ae:7d:0e:93:6a:ca:99:
                    e2:33:68:35:69:ba:14:a9:9f:a6:68:81:1a:04:8c:
                    bf:4e:66:61:57:dc:21:cb:e7:f3:cb:60:c8:5a:fb:
                    b6:19:5e:0d:d7:e3:3c:bb:dd:35:9e:b3:d2:8c:16:
                    2d:00:7f:1f:47:0f:93:d7:35:2b:92:12:25:b9:1c:
                    23:fa:b4:08:d7:5b:97:ba:f7:f5:d8:52:86:16:f9:
                    03:d1:c2:6a:90:fb:ab:45:fc:64:8c:38:f7:25:b7:
                    71:2f:47:7a:d3:21:ca:15:5a:95:b8:e1:27:00:da:
                    ce:65:f4:ea:3c:31:16:f3:e7:a6:93:fc:23:56:b0:
                    49:3b:2b:48:c4:39:0c:13:9e:c1:54:19:0d:12:e7:
                    af:ad:ee:89:43:39:07:98:1a:16:d8:d0:77:ed:22:
                    54:c1:67:74:9e:b3:af:7c:88:c9:e9:fa:e5:39:97:
                    1e:c9:82:bd:a0:44:8e:58:a0:a9:7f:07:e0:e7:3a:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7A:A8:39:64:66:8F:F5:E5:8E:D1:B0:C1:26:2B:14:EE:A3:DC:66
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/775365-cb7c-4d50-9e0a-c40e50fc5699/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/775365-cb7c-4d50-9e0a-c40e50fc5699/1/23qoOWRmj_XljtGwwSYrFO6j3GY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:4b:d5:3c:fe:81:fa:d1:5b:2b:d5:6a:64:95:4a:c6:6c:
         e3:4c:b6:b5:0d:34:58:5a:86:eb:2d:65:3a:78:3c:d6:3f:4e:
         6f:65:a3:c2:27:51:92:a1:34:0c:a5:ce:4d:65:d2:6a:9e:c3:
         77:ef:6b:b9:87:89:ef:f5:6a:eb:4b:0b:72:7b:eb:08:ce:cd:
         a1:13:f4:62:1e:9a:ae:76:e4:c1:ae:e1:21:08:c0:43:2f:12:
         d5:38:ab:a4:e4:22:9b:dd:41:e1:99:a1:3c:db:96:22:b2:61:
         ee:25:12:84:67:94:2c:7c:99:5e:e7:fc:bc:ab:66:8d:6a:93:
         93:22:a6:c2:36:0e:28:78:98:ba:51:32:64:29:4a:d9:21:c3:
         e0:87:23:a9:54:ed:5c:32:99:dd:ae:0c:55:72:af:c4:07:d1:
         6f:b2:26:0b:2a:57:ed:2f:ec:d2:5d:fa:1a:0e:5a:69:5b:0d:
         34:89:9c:1c:56:b8:31:cd:5d:51:f9:dd:e4:5a:34:2b:db:ed:
         1d:bf:ab:d4:b0:a7:76:4b:9a:09:d9:e3:a9:bf:13:1a:cf:7d:
         2a:54:8c:d5:39:b8:09:75:86:46:bd:5e:ef:76:71:a9:80:11:
         fa:30:01:3e:82:41:15:2c:46:69:80:54:e5:c5:b2:f2:fa:5d:
         99:5c:10:a7
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFdxWdCiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDQyMzdaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGRiN2FhODM5NjQ2
NjhmZjVlNThlZDFiMGMxMjYyYjE0ZWVhM2RjNjYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD2EMR0ZHcigg5PiWKHTDrtl+4rriG6sWh7EExMDpxaoF9F
/v8O1QxujjlF3e248np4HTE44kUY1+lHyuzbKGsca1CBrn0Ok2rKmeIzaDVpuhSp
n6ZogRoEjL9OZmFX3CHL5/PLYMha+7YZXg3X4zy73TWes9KMFi0Afx9HD5PXNSuS
EiW5HCP6tAjXW5e69/XYUoYW+QPRwmqQ+6tF/GSMOPclt3EvR3rTIcoVWpW44ScA
2s5l9Oo8MRbz56aT/CNWsEk7K0jEOQwTnsFUGQ0S56+t7olDOQeYGhbY0HftIlTB
Z3Ses698iMnp+uU5lx7Jgr2gRI5YoKl/B+DnOgo7AgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU23qoOWRmj/XljtGwwSYrFO6j3GYwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzc1MzY1LWNiN2MtNGQ1MC05
ZTBhLWM0MGU1MGZjNTY5OS8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NzUzNjUtY2I3Yy00ZDUwLTll
MGEtYzQwZTUwZmM1Njk5LzEvMjNxb09XUm1qX1hsanRHd3dTWXJGTzZqM0dZLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAItDfQwDQYJKoZIhvcNAQELBQADggEBAKGPS9U8/oH60Vsr1WpklUrG
bONMtrUNNFhahustZTp4PNY/Tm9lo8InUZKhNAylzk1l0mqew3fva7mHie/1autL
C3J76wjOzaET9GIemq525MGu4SEIwEMvEtU4q6TkIpvdQeGZoTzbliKyYe4lEoRn
lCx8mV7n/LyrZo1qk5MipsI2Dih4mLpRMmQpStkhw+CHI6lU7Vwymd2uDFVyr8QH
0W+yJgsqV+0v7NJd+hoOWmlbDTSJnBxWuDHNXVH53eRaNCvb7R2/q9Swp3ZLmgnZ
46m/ExrPfSpUjNU5uAl1hka9Xu92camAEfowAT6CQRUsRmmAVOXFsvL6XZlcEKc=
-----END CERTIFICATE-----