Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/492ZIaoHhm2-GRGeNWoswBPObl0.cer
File:                     492ZIaoHhm2-GRGeNWoswBPObl0.cer (raw, json)
Hash identifier:          PBViwYp7mzrsEnaCT6cvSfXBPjpBZ/smOTsD+usomW8=
Subject key identifier:   E3:DD:99:21:AA:07:86:6D:BE:19:11:9E:35:6A:2C:C0:13:CE:6E:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7EEDE549CE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/ed09cd-426e-489c-8227-001f33fdfe34/1/492ZIaoHhm2-GRGeNWoswBPObl0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/ed09cd-426e-489c-8227-001f33fdfe34/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 04:04:20 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 194.169.176.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545157106126 (0x7eede549ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:04:20 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e3dd9921aa07866dbe19119e356a2cc013ce6e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:30:68:7a:2d:88:f0:64:ba:17:0f:a0:a8:
                    cc:89:c2:70:97:08:b9:87:a1:81:7d:e5:68:44:ee:
                    f4:57:6f:83:9b:4a:48:62:38:04:14:10:4e:c0:7c:
                    66:a4:d4:03:c1:50:21:e0:7a:e2:24:96:1f:9f:cc:
                    d7:6f:6c:9f:cd:ec:22:f3:31:8e:25:01:02:39:2d:
                    f7:30:c2:e1:1f:80:d5:6f:aa:af:2b:89:a2:13:22:
                    e7:d3:f1:27:97:8b:3a:ab:5e:87:b1:b1:9f:ca:4a:
                    de:93:c3:80:e6:f1:8a:19:f5:e5:27:68:32:2a:50:
                    db:e9:66:e2:9d:73:96:d5:b1:28:98:d3:48:88:ae:
                    28:ac:7e:c4:ba:f4:9b:73:fb:32:4b:54:92:fe:f3:
                    ab:da:72:bd:4b:de:b6:d4:cb:54:85:8d:65:67:ba:
                    a7:7e:3d:02:f4:6f:0c:59:a5:27:c2:ba:33:14:2e:
                    62:5e:f7:7b:77:d7:62:89:b0:96:39:93:3e:01:d2:
                    81:96:1d:d3:03:62:91:43:5a:3a:7a:14:e2:5b:22:
                    33:7b:e9:c4:3c:93:23:6e:9a:4d:b4:d1:a9:b6:e9:
                    6f:70:7d:9a:8b:c9:22:de:99:dc:84:78:d0:30:7a:
                    f1:08:7e:98:92:04:8d:ae:c2:00:87:67:37:f9:70:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DD:99:21:AA:07:86:6D:BE:19:11:9E:35:6A:2C:C0:13:CE:6E:5D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ed09cd-426e-489c-8227-001f33fdfe34/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ed09cd-426e-489c-8227-001f33fdfe34/1/492ZIaoHhm2-GRGeNWoswBPObl0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.169.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:ae:a0:60:46:9c:df:d3:c3:df:c1:a0:6e:68:c7:89:d8:6c:
         30:4a:e0:19:30:d8:22:4c:c6:ee:fb:f7:53:a5:44:1c:d2:ca:
         d6:c8:44:ef:fe:0b:c2:74:f2:2d:68:82:6c:03:96:18:43:af:
         aa:5d:b6:f1:27:01:a9:3e:26:1f:88:45:b4:10:a3:6d:18:89:
         3c:8a:b9:d3:ec:ce:4d:8a:a3:29:b0:c6:35:b1:c6:f7:b0:68:
         c0:b3:23:b4:5d:1b:3c:7e:a7:db:aa:fc:26:f6:8b:7d:fa:d4:
         69:fe:e3:3c:7c:ea:bd:03:c1:83:b2:0b:22:82:18:9b:a9:27:
         27:92:32:fb:67:8a:a6:6f:e2:22:2d:42:c2:fc:3a:e2:e3:4e:
         de:23:d5:6b:bc:29:fb:78:99:b8:ef:e8:7e:da:bb:cf:f6:10:
         7b:ae:bf:fd:c9:1a:f7:7a:10:2a:d7:7e:65:79:f2:b0:d1:5e:
         53:e6:e2:24:10:53:e2:92:28:0d:60:ec:bf:67:e1:36:78:9d:
         06:a7:49:ab:93:b4:4b:63:ba:a3:b6:07:3b:4a:89:24:7e:ac:
         bc:10:ee:62:0a:df:3d:89:a1:c9:c6:32:76:bc:61:23:15:2d:
         1d:88:4b:c9:b8:fc:3d:ab:f6:67:d6:cb:aa:c9:14:6f:0f:01:
         ae:9e:26:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----