Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5EzAYAd7DNjWEEe0gNEdcGbIVdM.cer
File:                     5EzAYAd7DNjWEEe0gNEdcGbIVdM.cer (raw, json)
Hash identifier:          Tz6BYYazoMiGnulveqmaocbxqmnT0aqNQpDs8kzUuGQ=
Subject key identifier:   E4:4C:C0:60:07:7B:0C:D8:D6:10:47:B4:80:D1:1D:70:66:C8:55:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       6241949E17
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c9/ed8df7-573b-4fbe-b1b1-57df299faee8/1/5EzAYAd7DNjWEEe0gNEdcGbIVdM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c9/ed8df7-573b-4fbe-b1b1-57df299faee8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:28:20 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 197529
                          IP: 46.226.72.0/21
                          IP: 185.176.124.0/22
                          IP: 2a00:5a00::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422007053847 (0x6241949e17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:28:20 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e44cc060077b0cd8d61047b480d11d7066c855d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:e3:2b:aa:03:7a:c7:81:c2:8d:82:f2:32:
                    1a:2c:f2:0a:9d:df:26:aa:26:69:91:02:b3:43:5c:
                    19:f6:61:46:09:5a:87:ae:8a:f0:18:bf:a6:b9:1c:
                    62:4c:82:69:33:fe:ad:c5:f2:1e:36:df:72:73:dd:
                    1f:30:59:10:bb:6b:0b:db:7b:fc:e1:ca:8f:94:88:
                    a2:52:4a:1c:8b:a7:ee:c5:c6:81:4f:92:e6:79:be:
                    fd:3f:44:94:4b:9c:da:e7:98:5a:59:18:ae:8d:70:
                    c6:ea:61:50:71:df:f6:0f:f4:39:e0:d0:18:bb:f4:
                    3f:86:a2:f7:6d:a7:b3:42:dc:81:f1:61:72:69:9b:
                    0b:0d:b0:2d:bc:d0:c4:cb:17:17:0c:b8:e3:57:6e:
                    2b:a4:6b:41:0a:d0:7b:4d:16:fb:3a:82:a0:54:18:
                    59:0a:41:3d:5a:ed:ff:b8:7d:1e:60:b0:9c:cf:71:
                    40:0a:4d:7d:91:37:e0:42:da:0b:c4:9f:50:8f:b5:
                    96:09:de:a2:8b:b9:f9:b4:75:f7:35:62:d4:2e:10:
                    4b:9e:67:a3:c9:89:81:37:d7:88:74:52:9d:56:26:
                    11:97:79:48:2c:33:0e:43:22:3e:2b:cb:c1:a8:58:
                    75:4d:de:6c:88:aa:84:6a:3e:f3:77:aa:d5:e1:38:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4C:C0:60:07:7B:0C:D8:D6:10:47:B4:80:D1:1D:70:66:C8:55:D3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ed8df7-573b-4fbe-b1b1-57df299faee8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ed8df7-573b-4fbe-b1b1-57df299faee8/1/5EzAYAd7DNjWEEe0gNEdcGbIVdM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.72.0/21
                  185.176.124.0/22
                IPv6:
                  2a00:5a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197529

    Signature Algorithm: sha256WithRSAEncryption
         09:ce:4f:d1:4d:1c:e0:f1:27:44:85:ad:50:73:fc:40:28:3e:
         cb:74:fe:f1:3d:6f:e5:4d:98:fe:28:6c:d3:6c:58:25:fd:e0:
         56:e8:48:36:53:0b:a5:3c:96:84:7f:08:5a:cf:41:41:a6:28:
         a7:74:87:a2:3d:a1:7e:3f:c9:b0:94:81:cb:a7:98:cf:54:72:
         f6:ae:ff:d7:dd:56:cd:93:fe:aa:98:47:cf:7e:9e:8a:1d:fb:
         9c:4c:a6:65:c9:d3:5b:8e:59:58:54:63:80:d5:f8:2e:7e:39:
         b7:ff:ff:24:ca:cd:90:db:0f:83:e7:6e:9c:6f:3a:83:5e:74:
         55:c1:1d:78:ad:67:19:a2:a9:e5:c7:53:c0:ac:58:80:9d:b4:
         86:18:03:ad:4f:9c:ea:cd:12:85:42:3c:e6:6a:38:c6:93:40:
         19:6b:c1:77:af:a9:d4:ea:b3:99:aa:ae:76:0c:c2:49:65:c0:
         71:21:b5:a3:6f:cf:a4:f3:d1:f5:87:22:af:5b:b8:2c:81:eb:
         57:1e:7a:cc:34:39:a9:03:0b:34:b8:9a:f1:dc:bd:af:62:d8:
         09:0f:9e:60:58:cb:00:02:fd:51:bc:ae:d0:e9:a4:0a:55:6d:
         99:49:eb:66:62:39:c1:0f:aa:26:e0:70:4a:ed:df:b5:f0:d7:
         23:0e:8b:fe
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIFYkGUnhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDAy
MjQxNTI4MjBaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGU0NGNjMDYwMDc3
YjBjZDhkNjEwNDdiNDgwZDExZDcwNjZjODU1ZDMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCTWeMrqgN6x4HCjYLyMhos8gqd3yaqJmmRArNDXBn2YUYJ
WoeuivAYv6a5HGJMgmkz/q3F8h4233Jz3R8wWRC7awvbe/zhyo+UiKJSShyLp+7F
xoFPkuZ5vv0/RJRLnNrnmFpZGK6NcMbqYVBx3/YP9Dng0Bi79D+Govdtp7NC3IHx
YXJpmwsNsC280MTLFxcMuONXbiuka0EK0HtNFvs6gqBUGFkKQT1a7f+4fR5gsJzP
cUAKTX2RN+BC2gvEn1CPtZYJ3qKLufm0dfc1YtQuEEueZ6PJiYE314h0Up1WJhGX
eUgsMw5DIj4ry8GoWHVN3myIqoRqPvN3qtXhOJYDAgMBAAGjggK1MIICsTAdBgNV
HQ4EFgQU5EzAYAd7DNjWEEe0gNEdcGbIVdMwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvZWQ4ZGY3LTU3M2ItNGZiZS1i
MWIxLTU3ZGYyOTlmYWVlOC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lZDhkZjctNTczYi00ZmJlLWIx
YjEtNTdkZjI5OWZhZWU4LzEvNUV6QVlBZDdETmpXRUVlMGdORWRjR2JJVmRNLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIE
AgABMAwDBAMu4kgDBAK5sHwwDQQCAAIwBwMFACoAWgAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDAwOZMA0GCSqGSIb3DQEBCwUAA4IBAQAJzk/RTRzg8SdEha1Qc/xA
KD7LdP7xPW/lTZj+KGzTbFgl/eBW6Eg2UwulPJaEfwhaz0FBpiindIeiPaF+P8mw
lIHLp5jPVHL2rv/X3VbNk/6qmEfPfp6KHfucTKZlydNbjllYVGOA1fgufjm3//8k
ys2Q2w+D526cbzqDXnRVwR14rWcZoqnlx1PArFiAnbSGGAOtT5zqzRKFQjzmajjG
k0AZa8F3r6nU6rOZqq52DMJJZcBxIbWjb8+k89H1hyKvW7gsgetXHnrMNDmpAws0
uJrx3L2vYtgJD55gWMsAAv1RvK7Q6aQKVW2ZSetmYjnBD6om4HBK7d+18NcjDov+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:48 2023 by rpki-client on console-fra.rpki-client.org