Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69C91JDtQxUg651UFMubsJ-yf4M.cer
File:                     69C91JDtQxUg651UFMubsJ-yf4M.cer (raw, json)
Hash identifier:          Doipw05ZB6nrdDCaZdaA+kRAdIFGCGggphn+mTMMSS8=
Subject key identifier:   EB:D0:BD:D4:90:ED:43:15:20:EB:9D:54:14:CB:9B:B0:9F:B2:7F:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       78071B7AAE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/2dff59-01d7-4de3-b821-87c83d0350a4/1/69C91JDtQxUg651UFMubsJ-yf4M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/2dff59-01d7-4de3-b821-87c83d0350a4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:04:40 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.140.220.0/22
                          IP: 2a0e:c7c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515515316910 (0x78071b7aae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:04:40 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ebd0bdd490ed431520eb9d5414cb9bb09fb27f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:17:75:95:35:2c:ee:8b:ef:25:a0:3a:e1:
                    c3:e4:81:29:af:1d:59:5b:50:3c:f3:b0:62:58:77:
                    fc:0d:4a:7c:4c:59:87:ad:5c:01:e7:75:1f:2d:7f:
                    97:d7:bd:0d:2a:cf:09:f6:3e:ff:c2:57:1b:e9:a0:
                    ac:bb:11:20:4a:c0:d9:02:17:3c:b7:69:26:8d:fb:
                    50:8f:5b:75:36:58:1c:a4:cb:ab:58:f7:f7:91:b6:
                    69:86:4c:80:8b:d4:17:0f:68:b5:be:5a:74:02:17:
                    66:3e:7b:63:9f:6d:10:e2:47:7e:ea:ca:89:b6:2a:
                    fe:20:70:7b:40:71:d7:f6:dd:8a:55:74:0a:55:9c:
                    8b:fb:92:56:ce:e5:94:51:2c:5c:ff:6d:cd:18:e5:
                    42:2c:bb:be:cf:6d:bf:7f:83:20:e0:ea:d0:07:7c:
                    00:4f:e9:7b:f7:fc:35:0f:5b:79:f1:4e:13:c2:ae:
                    12:1c:10:a7:2b:e1:3c:f0:81:37:08:de:c6:24:85:
                    55:a0:d0:50:97:d3:e9:fc:e4:40:4c:95:0e:29:ba:
                    c9:3c:fe:41:91:70:58:60:71:43:d1:ed:16:a5:2d:
                    c4:f6:f7:5c:60:42:d8:7e:50:4e:84:32:73:2c:25:
                    bc:3f:40:5f:f2:e1:cc:ef:f4:01:89:46:db:25:45:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D0:BD:D4:90:ED:43:15:20:EB:9D:54:14:CB:9B:B0:9F:B2:7F:83
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2dff59-01d7-4de3-b821-87c83d0350a4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2dff59-01d7-4de3-b821-87c83d0350a4/1/69C91JDtQxUg651UFMubsJ-yf4M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.220.0/22
                IPv6:
                  2a0e:c7c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         96:03:72:fa:b7:e3:d6:d8:88:90:25:e1:2e:7d:81:b3:f1:cc:
         1e:68:d9:3b:43:13:65:e5:53:5c:ff:74:62:93:12:e8:f3:9c:
         af:20:44:45:00:34:2d:b5:bb:de:5d:35:c7:aa:27:ac:92:58:
         06:5e:28:55:3f:f5:97:f5:c4:22:0b:35:8e:b8:68:a7:1c:8f:
         31:24:2e:43:76:31:f1:59:88:11:3a:79:13:f9:43:30:b7:c7:
         81:7b:4e:42:93:1d:0b:d1:36:9c:57:38:1f:82:ab:cb:56:dd:
         96:91:9a:a6:2d:85:41:18:2c:c2:1f:f5:92:15:23:24:99:21:
         ac:b9:86:d1:22:11:b6:eb:5b:89:b6:5c:3b:21:71:f0:ae:fa:
         e7:45:03:49:17:b8:c5:39:27:bc:40:ab:47:8c:e5:71:66:2c:
         35:3d:9c:f3:b2:11:bc:8f:cf:6b:8b:e5:33:4f:86:2e:41:a6:
         a5:55:ff:df:a6:e3:fe:ac:0f:3e:cb:3b:2c:7b:13:0b:3e:78:
         82:63:f8:44:7f:d4:a1:cd:a0:70:fc:67:2d:da:1f:9e:88:2a:
         60:d9:b3:2d:ba:63:73:f3:67:b3:b7:79:84:b5:db:c0:ef:d1:
         14:43:26:3b:40:a7:94:1f:ca:27:a7:25:a1:ca:a5:7b:1d:da:
         1e:f9:b4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:04 2023 by rpki-client on console-ams.rpki-client.org