Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4svrjx315v1Po0q4CEXWnzd-y98.cer
File:                     4svrjx315v1Po0q4CEXWnzd-y98.cer (raw, json)
Hash identifier:          /9o3UicgGC5+LCZRScyhl6GYi64v624huENnSiCg6bI=
Subject key identifier:   E2:CB:EB:8F:1D:F5:E6:FD:4F:A3:4A:B8:08:45:D6:9F:37:7E:CB:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9EC9222A88
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/06/c4b41f-ae26-4f45-b44f-8f0492b2ca7c/1/4svrjx315v1Po0q4CEXWnzd-y98.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/06/c4b41f-ae26-4f45-b44f-8f0492b2ca7c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 05:52:24 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 49873
                          AS: 203435
                          IP: 185.135.0.0/22
                          IP: 205.201.55.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681979292296 (0x9ec9222a88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:52:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2cbeb8f1df5e6fd4fa34ab80845d69f377ecbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:61:85:aa:96:6d:65:d0:e8:c3:e5:42:d1:7f:
                    d1:71:68:41:8d:cb:c9:f6:6e:4b:4e:73:8b:93:f7:
                    7e:3f:7e:9e:7b:2d:87:34:4a:cf:c8:14:7e:2e:97:
                    38:b9:d2:8f:b4:3d:2e:93:91:98:fb:00:b0:71:57:
                    e3:cd:4d:1a:38:38:c8:e2:c6:16:f8:bc:be:cc:0f:
                    2d:12:16:bb:03:2d:18:08:00:03:62:d0:4d:71:ca:
                    7e:76:25:f1:df:00:ce:0a:34:34:0c:42:66:30:93:
                    21:3e:e5:9a:32:ab:b4:00:ed:86:9e:a6:33:93:52:
                    5d:18:07:5a:9a:41:12:16:3b:05:b4:7a:9a:ae:f7:
                    10:24:89:3c:54:58:e4:35:69:f1:6b:b6:3d:52:ae:
                    ed:eb:ac:8f:35:8b:7f:c5:f5:99:e3:dd:2b:7c:21:
                    01:83:f7:9a:fa:a4:7d:3b:65:66:ce:6f:6e:47:f5:
                    1a:bd:f0:7a:33:c0:ec:b8:ca:19:b7:5a:3a:bc:37:
                    10:9f:9c:a8:23:ed:07:3a:02:7a:e8:8a:2e:a9:5e:
                    2d:79:3a:a6:db:89:e9:69:10:da:30:ea:29:ec:17:
                    1c:19:fe:7b:86:21:c6:a9:ea:bb:6b:ac:5b:db:ef:
                    56:9e:78:ec:d4:99:91:94:54:2e:d2:ea:63:eb:8b:
                    de:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CB:EB:8F:1D:F5:E6:FD:4F:A3:4A:B8:08:45:D6:9F:37:7E:CB:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c4b41f-ae26-4f45-b44f-8f0492b2ca7c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c4b41f-ae26-4f45-b44f-8f0492b2ca7c/1/4svrjx315v1Po0q4CEXWnzd-y98.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.0.0/22
                  205.201.55.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49873
                  203435

    Signature Algorithm: sha256WithRSAEncryption
         4c:7e:09:20:f1:d7:3b:4b:fa:5d:c4:ca:b1:c3:3d:02:a2:4a:
         7d:86:4c:ce:d9:bb:af:0a:2b:6b:3a:b6:3a:05:d5:00:8e:4f:
         ac:69:12:41:20:5b:87:43:32:cc:7a:a6:8a:dd:43:a0:56:4e:
         11:70:0e:03:26:45:58:c0:ca:f2:72:53:7a:70:fe:11:76:0a:
         04:62:03:a3:e5:91:07:b5:0a:57:ad:4e:6a:02:51:4b:04:c2:
         91:24:00:ac:86:57:80:56:89:48:b4:c5:33:c0:9e:23:88:fd:
         de:04:50:fd:8b:27:d1:01:15:3b:e0:9d:e2:37:e8:16:82:c4:
         3b:27:ab:95:37:3a:b0:40:df:36:a2:40:e6:fe:b0:e3:41:a2:
         39:a6:5c:93:3e:54:df:d6:75:a2:d7:8b:a0:15:51:2c:4f:04:
         1c:3f:be:f2:f1:e3:bd:49:37:fa:bc:aa:a8:ff:3f:53:e4:46:
         51:77:79:f9:58:e3:d0:1d:3e:f0:4f:f6:1f:c7:eb:38:19:92:
         fd:2c:81:fe:d0:34:0e:9e:29:07:d9:b8:11:77:66:e5:b6:ce:
         59:cc:0a:9d:18:e1:1f:0d:e7:f8:e2:a8:f7:18:ff:97:b5:ed:
         21:52:cd:23:36:d9:88:35:51:7d:ca:e1:d5:ed:d5:d6:df:64:
         a7:5d:f9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:05 2023 by rpki-client on console-fra.rpki-client.org