Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3QNEhTMxsXRxyzMPvAHh5e92VjM.cer
File:                     3QNEhTMxsXRxyzMPvAHh5e92VjM.cer (raw, json)
Hash identifier:          ZGw8ntgjSnOk9wTsGUNwwS8SW9G4Y4pCGHecL+QxesI=
Subject key identifier:   DD:03:44:85:33:31:B1:74:71:CB:33:0F:BC:01:E1:E5:EF:76:56:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5C45061030
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/27a316-a8a6-416b-938b-becf33100a57/1/3QNEhTMxsXRxyzMPvAHh5e92VjM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/27a316-a8a6-416b-938b-becf33100a57/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 14:58:26 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 44494
                          IP: 80.245.16.0/20
                          IP: 185.81.52.0/22
                          IP: 2a00:9020::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396295016496 (0x5c45061030)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 14:58:26 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=dd0344853331b17471cb330fbc01e1e5ef765633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:76:82:ca:c3:de:19:e8:e1:bd:08:64:b6:
                    9e:9d:36:ca:93:84:d6:ca:dc:c2:e2:22:13:dd:e0:
                    f8:83:c9:29:e8:99:e7:1c:c5:92:1d:4b:56:45:a5:
                    1e:37:3d:d8:bd:85:62:ed:b8:16:09:c5:9b:eb:44:
                    ff:3b:3a:71:7f:b9:3b:35:79:be:e5:81:d6:da:be:
                    58:88:24:85:02:9b:b1:4d:16:10:e3:0c:69:25:d5:
                    fc:34:ff:22:77:5e:05:55:fa:1e:b7:9a:e3:2f:5e:
                    4f:8e:87:e3:3d:22:9c:a2:8d:86:ac:76:bd:ef:b9:
                    2f:e5:80:88:e8:c8:d9:33:ea:ad:47:e9:4f:fa:aa:
                    99:c8:88:c5:ab:77:36:a6:b8:11:b2:84:8b:90:92:
                    bd:b5:f3:b1:df:2d:1b:70:c6:c9:a0:bc:7f:1c:c5:
                    c5:68:38:19:14:50:11:e3:b2:ce:51:53:da:e5:8a:
                    1e:f5:25:e5:d7:63:cd:1f:bb:b9:16:b8:11:fc:50:
                    65:1d:b7:93:f5:59:24:0d:06:82:67:c8:30:84:55:
                    fa:94:91:3d:5d:26:5b:16:4f:b0:46:10:49:9c:35:
                    36:32:eb:1f:77:cd:57:81:dd:30:db:6b:86:7a:0b:
                    91:3d:4f:56:fc:c3:83:d0:e2:56:03:9f:7a:22:c7:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:03:44:85:33:31:B1:74:71:CB:33:0F:BC:01:E1:E5:EF:76:56:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/27a316-a8a6-416b-938b-becf33100a57/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/27a316-a8a6-416b-938b-becf33100a57/1/3QNEhTMxsXRxyzMPvAHh5e92VjM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.245.16.0/20
                  185.81.52.0/22
                IPv6:
                  2a00:9020::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44494

    Signature Algorithm: sha256WithRSAEncryption
         5b:df:1f:c0:c5:c0:a9:45:0c:c7:65:6e:21:6a:70:72:97:f7:
         9e:c4:26:26:41:81:d6:a6:0d:e3:a1:76:75:10:eb:84:97:6f:
         b2:21:72:87:6a:f6:23:f5:3f:53:9e:ab:1f:45:ef:7e:17:33:
         58:e7:68:c8:b1:cf:3c:15:ac:de:b3:7f:d2:42:cc:d2:ca:35:
         8d:f6:64:f6:22:b8:8b:ae:be:21:9e:3d:8b:61:8a:74:82:fe:
         6d:03:6c:ed:4b:3c:f1:2e:50:16:f6:23:5c:71:19:74:ff:6a:
         72:68:e0:14:b4:50:c0:df:60:f2:66:14:fc:5c:5a:c9:04:4a:
         3d:97:85:18:2a:a9:bb:91:4f:ce:a6:1c:3b:63:bf:1d:30:1f:
         d2:d0:b4:59:75:ff:19:90:85:ae:05:e0:24:02:2c:63:40:84:
         80:c6:0a:8f:47:d2:1b:36:7e:e0:b6:d3:32:54:d7:b4:76:c7:
         64:53:ce:c9:b9:fb:4e:46:ce:5c:77:ac:0a:fc:8d:4c:b3:21:
         74:64:59:3f:69:a5:38:f1:c0:aa:ac:17:e7:6c:d8:db:b1:13:
         11:db:36:75:bd:9e:76:cf:76:34:cb:4d:9c:3b:6c:0f:6b:ee:
         76:4a:17:2a:4d:9c:90:2b:ae:dc:11:55:d9:77:98:48:f4:e4:
         85:98:37:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:29 2023 by rpki-client on console-ams.rpki-client.org