Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2qJKiUony65hwK-NTzH3Xoqu_-w.cer
File:                     2qJKiUony65hwK-NTzH3Xoqu_-w.cer (raw, json)
Hash identifier:          IiKwDvmhqUd1tnWY3+Jr+3a8pWbsn1UWbna+pc1npIE=
Subject key identifier:   DA:A2:4A:89:4A:27:CB:AE:61:C0:AF:8D:4F:31:F7:5E:8A:AE:FF:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AD522378B2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d3/29d49b-74c8-4cbe-94a9-d0fce0e7635e/1/2qJKiUony65hwK-NTzH3Xoqu_-w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d3/29d49b-74c8-4cbe-94a9-d0fce0e7635e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 12 Feb 2022 11:00:19 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 195.158.254.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744407398578 (0xad522378b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 12 11:00:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=daa24a894a27cbae61c0af8d4f31f75e8aaeffec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:a3:35:1a:09:52:f1:57:51:59:ac:b6:c1:
                    6b:cc:a6:d6:e6:f9:b8:aa:92:20:d2:8a:d5:91:f1:
                    80:c8:1c:32:1a:3e:f8:5e:48:11:be:df:d8:b2:34:
                    7a:9a:97:17:cd:d9:52:42:42:4e:72:a0:ee:0b:f7:
                    62:09:3a:3e:62:24:9e:77:dc:8a:aa:27:35:83:de:
                    9b:73:4a:4c:1f:d2:37:fa:7e:89:a9:db:12:a8:a6:
                    a4:9f:45:bd:82:ad:79:46:12:fc:2c:db:fe:19:5b:
                    38:ea:7a:0a:9c:82:86:d1:9a:b9:cd:b9:fd:3f:10:
                    7a:39:36:19:9c:8e:7e:c4:dd:d4:55:3a:c6:fb:02:
                    a9:f1:1a:cd:15:ec:b9:9e:63:a2:29:f7:1d:b7:32:
                    42:13:53:14:4e:fe:8a:e5:94:da:fd:dc:42:e3:53:
                    e2:16:1f:43:2f:72:eb:6a:0b:42:4f:3a:70:96:5e:
                    e8:91:5d:eb:2a:5c:96:bd:ff:f2:f2:c4:1a:5d:64:
                    91:0f:dc:3a:9e:e1:c7:22:2d:77:07:5d:24:97:a3:
                    93:b1:c2:27:03:7a:a2:32:fe:f5:55:cc:cf:dc:14:
                    7f:22:39:d7:ab:ec:a2:09:82:f9:65:b4:49:91:ef:
                    01:8d:3d:2f:65:10:58:b9:c0:5d:80:8d:82:ed:44:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A2:4A:89:4A:27:CB:AE:61:C0:AF:8D:4F:31:F7:5E:8A:AE:FF:EC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/29d49b-74c8-4cbe-94a9-d0fce0e7635e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/29d49b-74c8-4cbe-94a9-d0fce0e7635e/1/2qJKiUony65hwK-NTzH3Xoqu_-w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.158.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:59:82:99:77:8a:0f:59:af:29:45:dc:a6:ce:62:2a:6c:38:
         89:bc:a9:b1:ed:db:2c:b6:71:ab:ac:f5:cd:3b:3f:27:ca:74:
         10:7d:64:52:bf:3c:95:65:a4:ec:61:0d:c1:41:ef:48:f6:0c:
         a5:91:2f:91:6e:0e:74:e0:bb:09:b1:3e:ac:4a:8b:d0:a8:fa:
         c9:5e:06:89:ea:d9:22:52:9f:5b:8b:19:73:68:40:ba:29:06:
         2f:c9:fa:a4:62:03:d3:2f:20:07:f5:b4:ad:09:17:e4:15:48:
         c0:6d:9f:f2:2f:d5:8e:d5:3e:f3:47:f9:45:1d:90:12:c0:25:
         e1:a3:1b:ce:03:b1:be:fa:49:b4:f0:df:09:57:c0:9f:6c:44:
         23:3b:e2:02:16:ee:88:0a:18:3e:af:c8:5f:96:e9:80:85:98:
         a7:73:e0:55:51:0d:ef:7c:89:ec:51:3e:86:b6:fd:91:53:f8:
         0e:16:47:e0:a3:10:0b:17:c3:63:6a:99:4b:9b:78:fe:f7:d6:
         b4:81:b7:f7:dc:68:57:c8:87:b2:69:9d:d1:bf:40:a0:9d:c2:
         33:1f:8d:c6:3d:5b:4a:99:ac:a1:cf:cb:67:8a:d6:50:23:ec:
         cc:02:61:0c:a0:24:e0:17:93:76:04:ef:f5:c4:9c:b3:e8:08:
         16:b1:b1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----