Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6ISAE3dwE4Et2UNHKyfF8srFLOA.cer
File:                     6ISAE3dwE4Et2UNHKyfF8srFLOA.cer (raw, json)
Hash identifier:          lSJ2IwSoh8BJ7qyyL8KuVULi8zBbucjbnpHMImw4jx0=
Subject key identifier:   E8:84:80:13:77:70:13:81:2D:D9:43:47:2B:27:C5:F2:CA:C5:2C:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01852BABCE552D6DFAA096040A8E363431EF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/E8848013777013812DD943472B27C5F2CAC52CE0.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 19 Dec 2022 18:35:57 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 61138
                          AS: 200681
                          AS: 203033
                          AS: 203856 -- 203858
                          IP: 5.253.84.0/22
                          IP: 185.90.60.0/22
                          IP: 185.99.132.0/22
                          IP: 185.121.160.0/22
                          IP: 185.121.168.0/22
                          IP: 185.121.176.0/22
                          IP: 185.147.32.0/22
                          IP: 185.195.236.0/22
                          IP: 185.214.172.0/22
                          IP: 185.236.212.0/22
                          IP: 2a05:dfc0::/29
                          IP: 2a06:1280::/29
                          IP: 2a06:9f40::/29
                          IP: 2a06:9f80::/29
                          IP: 2a06:a000::/29
                          IP: 2a07:54c0::/29
                          IP: 2a09:54c0::/29
                          IP: 2a0a:6040::/29
                          IP: 2a0b:9e40::/29
                          IP: 2a0d:d900::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2b:ab:ce:55:2d:6d:fa:a0:96:04:0a:8e:36:34:31:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 19 18:35:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8848013777013812dd943472b27c5f2cac52ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:df:fe:a0:82:ce:11:e9:50:b0:94:a8:43:ac:
                    31:da:e6:e6:17:af:84:c7:16:f1:e7:46:d3:14:33:
                    86:e4:4a:c0:02:b2:a0:07:5c:86:d8:df:34:48:1a:
                    4a:9c:9b:40:9e:a0:cb:64:c3:d8:55:36:f6:6c:44:
                    52:d2:e8:99:50:ff:f0:40:d0:4a:1f:81:a4:5f:5f:
                    52:e7:3c:64:d6:7f:81:b6:66:6e:9b:69:01:b8:8e:
                    3a:a9:26:b5:fb:83:dc:4c:49:14:30:11:e4:ed:a9:
                    f5:78:95:2c:72:87:d3:e3:a2:87:2a:27:b8:72:8a:
                    74:8f:26:5f:8f:57:c8:8a:4c:ab:0e:ad:09:31:c0:
                    75:05:47:56:1e:2d:ed:f9:ca:ab:99:41:37:93:7a:
                    cb:e3:64:20:3e:6f:02:ed:1f:2c:48:b8:04:cf:1b:
                    24:c4:52:21:f0:fc:8d:62:62:ca:4c:91:c9:7e:79:
                    a4:fe:ec:a1:d8:4c:b3:27:91:f6:d8:83:f6:07:9d:
                    b5:fb:01:75:31:e0:ab:8d:cb:db:9b:15:8e:02:d1:
                    c9:ea:10:fa:ee:ef:27:be:4a:67:5c:68:4a:33:9f:
                    d3:c9:71:af:97:d1:8a:da:44:2f:25:e2:d0:46:03:
                    40:54:fa:f1:54:7f:40:5d:ef:5e:6a:7e:6f:0b:d1:
                    79:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:84:80:13:77:70:13:81:2D:D9:43:47:2B:27:C5:F2:CA:C5:2C:E0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/E8848013777013812DD943472B27C5F2CAC52CE0.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.84.0/22
                  185.90.60.0/22
                  185.99.132.0/22
                  185.121.160.0/22
                  185.121.168.0/22
                  185.121.176.0/22
                  185.147.32.0/22
                  185.195.236.0/22
                  185.214.172.0/22
                  185.236.212.0/22
                IPv6:
                  2a05:dfc0::/29
                  2a06:1280::/29
                  2a06:9f40::/29
                  2a06:9f80::/29
                  2a06:a000::/29
                  2a07:54c0::/29
                  2a09:54c0::/29
                  2a0a:6040::/29
                  2a0b:9e40::/29
                  2a0d:d900::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61138
                  200681
                  203033
                  203856-203858

    Signature Algorithm: sha256WithRSAEncryption
         50:42:fa:98:82:d2:40:12:9b:d5:cf:b3:25:b4:6f:8d:14:6e:
         8c:1e:eb:97:14:d3:c4:57:f7:7a:67:63:81:57:72:21:78:43:
         18:a1:fa:b7:dd:fe:82:3a:79:7f:c9:30:2a:d0:e6:a2:c2:79:
         d6:c7:92:65:06:67:51:bf:47:54:7d:31:5f:12:71:47:13:e9:
         89:b7:20:6f:1f:00:b4:53:8f:77:c0:40:7c:90:08:23:1e:35:
         61:4e:3c:62:19:53:91:c1:0b:17:91:f7:2b:5e:71:82:51:52:
         72:6b:de:7a:6a:cb:cc:11:b8:78:e8:03:93:a9:ef:75:a4:8f:
         bc:cf:5f:d5:e8:f2:cf:4b:7d:f6:72:f6:e7:3b:26:3f:06:ae:
         ad:bd:16:d1:9a:7d:b4:34:a2:4d:26:af:43:a0:e8:51:13:2f:
         1c:d7:75:46:d4:6f:dc:46:61:c0:05:3f:a1:4a:c3:72:c7:c1:
         c3:14:2a:c8:b7:ef:e9:01:0d:8c:50:18:13:39:8d:e8:ac:55:
         0c:41:95:41:70:6d:70:45:e4:4a:84:39:a3:17:a5:03:36:f2:
         12:b2:c2:d5:08:ee:54:e1:5a:5f:f9:ae:88:3b:3c:16:fc:a0:
         07:27:4a:7d:90:bf:18:c4:70:82:cb:57:e9:de:67:7f:28:76:
         54:63:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:00 2024 by rpki-client on console-ams.rpki-client.org