Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6mjS-nTVMVH48j9KJvLMth8EL6E.cer
File:                     6mjS-nTVMVH48j9KJvLMth8EL6E.cer (raw, json)
Hash identifier:          Zcx2HPHtUECEe+7soO8RnJOShV8zYgn6I2ugTWQ23DE=
Subject key identifier:   EA:68:D2:FA:74:D5:31:51:F8:F2:3F:4A:26:F2:CC:B6:1F:04:2F:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       81874C32CA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/aeecf8-1f38-4719-9b1a-10851197960f/1/6mjS-nTVMVH48j9KJvLMth8EL6E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/aeecf8-1f38-4719-9b1a-10851197960f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:32:40 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 44252
                          IP: 5.154.225.0/24
                          IP: 31.14.33.0/24
                          IP: 37.153.174.0/23
                          IP: 89.34.2.0/24
                          IP: 89.39.144.0/23
                          IP: 89.42.12.0/24
                          IP: 89.46.126.0/23
                          IP: 89.47.40.0/23
                          IP: 92.60.224.0/20
                          IP: 93.113.250.0/23
                          IP: 94.228.224.0/20
                          IP: 176.67.192.0/19
                          IP: 178.17.16.0/20
                          IP: 185.27.128.0/22
                          IP: 185.36.255.0/24
                          IP: 185.71.88.0/22
                          IP: 188.215.30.0/24
                          IP: 188.240.88.0/24
                          IP: 188.240.200.0/23
                          IP: 2a04:1dc0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556320699082 (0x81874c32ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:40 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ea68d2fa74d53151f8f23f4a26f2ccb61f042fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:6d:ed:af:da:25:dc:ec:e6:cf:58:b3:81:
                    c9:04:ef:fa:70:80:77:17:3d:03:ef:b8:37:7d:82:
                    39:c7:e4:de:b1:a0:65:66:ba:80:42:b8:20:a3:c7:
                    f9:0d:c1:a2:a9:52:b2:b3:6a:d6:06:1c:d0:d8:7e:
                    7a:bb:c0:0e:94:0a:bc:bf:07:ad:bd:bd:6a:e4:dd:
                    02:aa:9d:f7:cb:14:40:4b:00:b2:8d:46:96:5c:5c:
                    6a:89:0a:a7:6c:95:56:5d:8e:a1:56:0b:9e:8b:99:
                    d3:e5:ad:9f:81:aa:13:c6:e0:37:c0:6d:25:ec:4c:
                    2a:34:f9:53:81:0a:15:e6:b6:a3:72:f7:b6:b3:85:
                    c0:99:82:a4:45:33:72:79:6a:14:4b:44:b2:56:b5:
                    cf:79:83:1d:6b:bf:49:19:5d:54:d1:f1:72:15:8e:
                    f2:43:2a:e2:25:a8:8b:b1:0e:40:45:71:30:62:cf:
                    05:8e:6c:42:0e:12:bf:c4:ba:59:6d:51:89:17:dc:
                    63:24:e0:75:fe:ce:3d:37:31:85:dc:9d:52:d8:53:
                    7b:50:a6:a9:20:81:e7:68:7b:5f:2d:89:48:ec:80:
                    16:3d:39:b1:c6:70:3a:1d:de:0f:5a:37:dc:64:50:
                    28:74:f0:0e:68:37:0a:5b:66:15:de:7c:c3:9c:07:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:68:D2:FA:74:D5:31:51:F8:F2:3F:4A:26:F2:CC:B6:1F:04:2F:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aeecf8-1f38-4719-9b1a-10851197960f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aeecf8-1f38-4719-9b1a-10851197960f/1/6mjS-nTVMVH48j9KJvLMth8EL6E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.154.225.0/24
                  31.14.33.0/24
                  37.153.174.0/23
                  89.34.2.0/24
                  89.39.144.0/23
                  89.42.12.0/24
                  89.46.126.0/23
                  89.47.40.0/23
                  92.60.224.0/20
                  93.113.250.0/23
                  94.228.224.0/20
                  176.67.192.0/19
                  178.17.16.0/20
                  185.27.128.0/22
                  185.36.255.0/24
                  185.71.88.0/22
                  188.215.30.0/24
                  188.240.88.0/24
                  188.240.200.0/23
                IPv6:
                  2a04:1dc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44252

    Signature Algorithm: sha256WithRSAEncryption
         3e:42:74:28:bf:95:21:ec:74:29:a2:72:b2:fe:16:23:60:98:
         f3:49:7a:b8:ce:84:b4:ae:a0:ad:2a:e8:c3:41:a0:33:91:d6:
         25:61:34:cf:9a:5f:33:de:d3:7e:af:1a:b0:b3:78:6a:a5:e7:
         fc:41:eb:92:ed:ab:3d:f1:43:ae:5d:e1:e1:b8:f6:18:9d:ae:
         b2:bc:d2:3d:d2:16:87:b3:70:ba:af:f5:8f:25:ee:2c:53:5b:
         8e:31:0e:be:f5:a9:0d:c6:92:d3:57:ee:f4:72:cf:f3:1a:17:
         0e:34:e0:8c:ea:b2:34:74:bd:f9:0c:65:cc:5c:19:d5:66:c2:
         e4:60:2a:bd:c5:f6:00:db:7c:f8:da:b2:4b:ab:b1:c1:1a:f9:
         3f:06:fe:43:62:64:94:10:ef:67:82:56:34:4f:21:d8:57:c3:
         95:7d:e5:ed:e1:c4:eb:81:72:78:1c:29:be:a2:d8:05:4a:8e:
         0d:4a:32:2a:88:27:c9:a7:94:83:f9:cf:50:8a:cc:0e:5f:c0:
         cb:68:24:fc:b0:20:7a:26:cf:03:69:4f:35:55:72:2a:2a:3e:
         65:e5:23:5a:79:5e:b4:7d:62:2d:36:53:b1:30:b4:a9:ef:66:
         88:63:09:81:84:5d:50:94:0d:2d:b4:2c:24:57:88:b2:20:1e:
         1b:56:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:23 2023 by rpki-client on console-ams.rpki-client.org