Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/277w76IYjxLvP-kr74k0VInQbkY.cer
File:                     277w76IYjxLvP-kr74k0VInQbkY.cer (raw, json)
Hash identifier:          jj1OycrNpYW++AkbMwBPqS10P7TJoA/9OvLYVzVXLjM=
Subject key identifier:   DB:BE:F0:EF:A2:18:8F:12:EF:3F:E9:2B:EF:89:34:54:89:D0:6E:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       71199A0713
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0d/b0592f-c32f-457b-86e7-c37c33895d79/1/277w76IYjxLvP-kr74k0VInQbkY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0d/b0592f-c32f-457b-86e7-c37c33895d79/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 26 Oct 2020 08:05:57 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 194.110.168.0/22
                          IP: 2a0d:4c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485760829203 (0x71199a0713)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 26 08:05:57 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=dbbef0efa2188f12ef3fe92bef89345489d06e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:58:59:6c:49:b3:5d:b3:f4:32:80:71:39:
                    65:6e:be:14:6e:88:11:4d:9e:ed:e8:a3:3f:13:fc:
                    f6:a1:3b:02:43:38:38:ee:a6:e9:a8:b4:cc:62:48:
                    40:a3:49:76:55:af:e3:c0:1e:3f:bc:ab:6b:20:8d:
                    a3:8b:81:70:70:b4:8d:fb:51:38:32:16:05:de:99:
                    9a:e9:65:b0:9f:58:37:2c:02:29:fe:c1:60:77:0b:
                    3d:c7:1f:e7:e5:68:03:0c:c0:ce:8e:1a:a0:db:02:
                    4f:98:a6:2b:a2:33:52:13:48:1b:b3:7a:2e:ae:fc:
                    52:1f:7c:5c:93:01:11:92:40:27:e8:ac:b8:27:7a:
                    53:83:11:a3:0a:6f:b1:cd:bc:fd:80:de:42:22:62:
                    7f:45:b4:46:c6:bb:79:02:1a:3a:f4:cd:6c:a5:87:
                    d3:c2:b5:de:db:ad:5d:b6:a9:4f:d5:17:7f:96:ec:
                    2e:22:f4:f3:a9:5e:a8:de:5d:c2:14:f3:21:91:61:
                    72:16:a7:8c:59:d8:24:c4:be:f4:6e:ae:fe:4e:ea:
                    2b:07:83:82:33:b4:27:ae:f2:47:34:0e:fa:6e:f7:
                    0f:68:95:c3:39:dd:c4:bb:04:af:37:fa:0c:0d:7c:
                    1f:aa:53:49:cb:14:d6:52:d5:ab:31:66:b9:51:41:
                    42:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BE:F0:EF:A2:18:8F:12:EF:3F:E9:2B:EF:89:34:54:89:D0:6E:46
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b0592f-c32f-457b-86e7-c37c33895d79/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b0592f-c32f-457b-86e7-c37c33895d79/1/277w76IYjxLvP-kr74k0VInQbkY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.168.0/22
                IPv6:
                  2a0d:4c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:f1:21:62:de:b7:7e:36:ac:e4:e9:c9:3f:9d:3f:43:36:2c:
         ff:e5:f8:8e:9e:19:48:5d:c9:3e:fd:ea:1c:11:fb:4e:83:83:
         c0:6d:7d:ae:91:6c:00:b7:33:88:14:a3:91:f9:c7:f9:45:4c:
         72:ff:c7:37:ba:5b:58:9a:b8:bc:60:d0:c7:c1:0c:88:c2:1a:
         30:36:6f:7c:20:80:4a:2e:e9:a5:3e:f9:b7:51:e6:15:1e:c2:
         27:a5:45:aa:b2:42:29:d6:80:d6:e0:5f:70:c7:ee:cb:02:b7:
         8f:33:ec:dc:9a:1e:a0:15:a3:ce:71:1f:3c:1a:2f:60:aa:0c:
         94:7a:03:84:6b:58:1e:aa:b3:9e:4a:b1:c1:6b:ca:df:d9:e9:
         28:e6:06:e3:d4:fa:b0:4a:74:e8:cd:a4:a1:53:6c:b1:52:4d:
         26:e5:49:82:49:f5:bb:d7:89:77:ef:ca:1c:66:65:e2:e9:c8:
         0c:bd:92:ae:b1:91:b6:4e:1d:bb:f3:cd:4a:96:25:bb:e1:6f:
         fb:a8:fa:4a:fe:08:70:11:72:8e:de:66:21:54:90:75:06:ab:
         91:51:e1:28:32:e3:39:13:fc:2e:ba:ea:60:a9:de:0b:71:c2:
         f4:ac:08:94:0a:c9:67:9e:85:70:47:4c:85:7c:37:ab:14:6f:
         5c:f9:7f:10
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIFcRmaBxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDEw
MjYwODA1NTdaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGRiYmVmMGVmYTIx
ODhmMTJlZjNmZTkyYmVmODkzNDU0ODlkMDZlNDYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8hFhZbEmzXbP0MoBxOWVuvhRuiBFNnu3ooz8T/PahOwJD
ODjupumotMxiSECjSXZVr+PAHj+8q2sgjaOLgXBwtI37UTgyFgXemZrpZbCfWDcs
Ain+wWB3Cz3HH+flaAMMwM6OGqDbAk+YpiuiM1ITSBuzei6u/FIffFyTARGSQCfo
rLgnelODEaMKb7HNvP2A3kIiYn9FtEbGu3kCGjr0zWylh9PCtd7brV22qU/VF3+W
7C4i9POpXqjeXcIU8yGRYXIWp4xZ2CTEvvRurv5O6isHg4IztCeu8kc0Dvpu9w9o
lcM53cS7BK83+gwNfB+qU0nLFNZS1asxZrlRQUJRAgMBAAGjggKTMIICjzAdBgNV
HQ4EFgQU277w76IYjxLvP+kr74k0VInQbkYwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvYjA1OTJmLWMzMmYtNDU3Yi04
NmU3LWMzN2MzMzg5NWQ3OS8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMDU5MmYtYzMyZi00NTdiLTg2
ZTctYzM3YzMzODk1ZDc5LzEvMjc3dzc2SVlqeEx2UC1rcjc0azBWSW5RYmtZLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBALCbqgwDQQCAAIwBwMFAyoNBMAwDQYJKoZIhvcNAQELBQADggEBAHXx
IWLet342rOTpyT+dP0M2LP/l+I6eGUhdyT796hwR+06Dg8Btfa6RbAC3M4gUo5H5
x/lFTHL/xze6W1iauLxg0MfBDIjCGjA2b3wggEou6aU++bdR5hUewielRaqyQinW
gNbgX3DH7ssCt48z7NyaHqAVo85xHzwaL2CqDJR6A4RrWB6qs55KscFryt/Z6Sjm
BuPU+rBKdOjNpKFTbLFSTSblSYJJ9bvXiXfvyhxmZeLpyAy9kq6xkbZOHbvzzUqW
Jbvhb/uo+kr+CHARco7eZiFUkHUGq5FR4Sgy4zkT/C666mCp3gtxwvSsCJQKyWee
hXBHTIV8N6sUb1z5fxA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:32 2023 by rpki-client on console-fra.rpki-client.org