Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3qQq2DYePRXat04Fw9jR600ilGE.cer
File:                     3qQq2DYePRXat04Fw9jR600ilGE.cer (raw, json)
Hash identifier:          KkrjxxpV53UI7eKJiFXu9uC9zylvfb5LUDYFcYgudBU=
Subject key identifier:   DE:A4:2A:D8:36:1E:3D:15:DA:B7:4E:05:C3:D8:D1:EB:4D:22:94:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       8125D8B5E2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d9/904375-f2d8-40a1-b6d2-f48fdd7aad80/1/3qQq2DYePRXat04Fw9jR600ilGE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d9/904375-f2d8-40a1-b6d2-f48fdd7aad80/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:15:21 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 35085
                          AS: 47449
                          IP: 45.12.184.0/22
                          IP: 2a0e:b700::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554685740514 (0x8125d8b5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:15:21 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dea42ad8361e3d15dab74e05c3d8d1eb4d229461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:75:bc:c0:c6:cc:1b:d7:5b:22:3e:3f:90:
                    60:60:4e:d5:35:dd:3e:4e:60:79:6d:1a:bc:88:27:
                    a7:77:5e:7f:78:b1:f8:1e:00:20:eb:95:a6:ab:5e:
                    6a:e1:9e:a5:a8:70:7a:a3:48:f9:ca:7f:79:e3:a0:
                    01:33:cb:d2:e3:92:7d:cd:c7:85:9b:4d:78:57:7c:
                    60:66:27:d5:48:2a:2a:b4:e1:41:fa:85:f1:f9:83:
                    e4:42:60:77:f7:f1:25:6f:8d:aa:f6:f5:08:54:48:
                    50:95:1f:ec:1a:a5:84:98:2b:25:33:45:16:a1:60:
                    72:82:5c:71:31:ac:c6:69:9e:cb:a5:47:8c:91:1a:
                    ce:44:5a:d4:9d:91:50:af:a1:17:d3:ba:36:b2:bc:
                    35:7b:c9:91:fd:3c:2b:e5:32:e8:0b:ca:73:50:bc:
                    ac:13:b0:b6:a6:28:66:5e:0f:e4:cf:5a:49:c2:9a:
                    39:2c:b2:85:0d:db:95:e8:7d:ae:20:ba:74:57:4c:
                    6f:66:da:6d:27:14:77:d4:c5:6c:ae:59:d5:90:b4:
                    5d:6b:e3:ca:d7:a1:31:c1:27:88:01:7e:a6:eb:9f:
                    3a:a1:4f:d4:0b:bf:c6:8b:69:3b:55:d5:65:2c:0b:
                    1b:2b:84:af:18:2f:b4:c0:7e:dc:6a:c2:2d:01:2f:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A4:2A:D8:36:1E:3D:15:DA:B7:4E:05:C3:D8:D1:EB:4D:22:94:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/904375-f2d8-40a1-b6d2-f48fdd7aad80/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/904375-f2d8-40a1-b6d2-f48fdd7aad80/1/3qQq2DYePRXat04Fw9jR600ilGE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.184.0/22
                IPv6:
                  2a0e:b700::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35085
                  47449

    Signature Algorithm: sha256WithRSAEncryption
         80:98:27:b0:04:16:71:2f:44:9c:e8:0c:2d:73:dc:37:6e:d3:
         a3:30:00:f7:a5:14:36:98:44:f1:39:70:db:4a:46:b5:0e:f9:
         73:02:92:1b:83:e2:b9:05:54:c3:44:bf:56:e4:ac:20:f4:1b:
         21:d7:66:5b:b8:85:20:fb:1c:c9:03:47:2d:f1:6a:d3:c2:fb:
         d4:33:b5:93:91:c7:87:6a:e8:65:47:33:86:f4:d9:18:2f:44:
         a3:a8:0a:77:39:a9:e8:bf:7e:90:07:f7:86:cb:1c:d3:4b:97:
         2f:d0:fe:d1:a3:c6:af:83:98:75:a3:2f:10:ed:3d:6e:30:35:
         59:79:7c:d6:74:d6:b8:fe:f2:be:0c:03:5b:40:22:0c:44:9f:
         1a:d0:6b:74:50:25:8a:25:27:50:e8:e7:8d:50:78:70:a3:ce:
         8e:23:81:ad:e3:26:c3:b0:41:12:a4:96:6f:f5:2a:60:cc:e7:
         49:58:c6:cd:de:6a:13:5b:17:45:8d:8b:1b:a7:99:f9:50:b5:
         dc:d0:86:fc:52:d0:e7:15:9c:ae:26:e3:60:ac:ae:9a:c9:c5:
         49:d7:af:58:ac:17:a1:d1:9e:a3:70:73:5f:67:cc:77:69:3f:
         ce:c3:dc:7c:80:b3:7a:49:95:71:1c:db:ce:1a:6e:e1:18:f3:
         d6:1b:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----