Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6oFVo1VTWLs3NX1tntnvaD6XhBk.cer
File:                     6oFVo1VTWLs3NX1tntnvaD6XhBk.cer (raw, json)
Hash identifier:          w3NbzrU997PLcI8xy4XiZeNYF5BhIDIR9DPEmMFtgFA=
Subject key identifier:   EA:81:55:A3:55:53:58:BB:37:35:7D:6D:9E:D9:EF:68:3E:97:84:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0184ECEF39779EC15D745DD5AD310D43B2E5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/85/7a1838-09ab-42d2-8187-2081df13bd2d/1/6oFVo1VTWLs3NX1tntnvaD6XhBk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/85/7a1838-09ab-42d2-8187-2081df13bd2d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 07 Dec 2022 14:13:31 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 185.40.105.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ec:ef:39:77:9e:c1:5d:74:5d:d5:ad:31:0d:43:b2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  7 14:13:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea8155a3555358bb37357d6d9ed9ef683e978419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:e6:91:fa:b4:fa:9e:56:08:83:cb:2f:15:
                    06:6f:63:09:7d:98:97:12:ac:5f:7f:ff:2b:f3:dd:
                    d6:47:c4:3c:12:26:f9:d4:20:98:a3:ce:b5:88:bb:
                    b0:8a:89:5a:3c:06:fa:d8:ec:e6:c1:53:15:7d:af:
                    e0:cd:f4:7d:3c:55:f0:3c:0f:ba:9e:3d:0b:0b:94:
                    2b:e1:f7:df:f1:41:b2:db:a9:f1:17:6b:6e:db:da:
                    34:27:5a:64:13:e9:a2:e8:c3:ee:6a:b9:7f:e0:ce:
                    b6:31:10:e0:79:44:7a:83:88:1b:24:d1:ce:88:f7:
                    a8:fd:d8:30:a5:30:09:81:fd:56:af:e2:9e:24:70:
                    be:88:03:2b:1e:22:a8:ac:2d:75:22:01:0a:fa:51:
                    20:b7:0b:5f:51:da:00:72:f4:fb:1b:b2:d2:d0:ba:
                    cc:3a:fc:6d:67:d4:e8:de:14:95:3d:8b:a5:2c:1f:
                    70:4e:40:27:96:da:7b:ef:26:30:44:c2:b3:b1:db:
                    31:d9:28:06:ce:7e:af:56:10:e9:68:76:f9:85:ec:
                    15:0e:fb:c5:fe:94:cc:06:62:d0:d7:e8:99:c2:57:
                    b6:48:d7:da:5d:35:3b:80:2c:81:1a:b8:e9:12:d0:
                    9b:79:73:8b:c5:2a:f6:55:0a:00:c4:97:18:f9:87:
                    b9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:81:55:A3:55:53:58:BB:37:35:7D:6D:9E:D9:EF:68:3E:97:84:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7a1838-09ab-42d2-8187-2081df13bd2d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7a1838-09ab-42d2-8187-2081df13bd2d/1/6oFVo1VTWLs3NX1tntnvaD6XhBk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.40.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:06:84:43:3b:f8:94:a4:dc:2a:e2:d4:be:b3:97:e5:74:47:
         b3:7e:bb:7d:2b:5e:52:6e:ea:34:18:ac:03:ad:89:2f:cc:e6:
         a0:06:cb:9c:5f:1e:85:41:27:e8:7a:97:62:8f:3e:ae:b3:13:
         c2:b7:ba:65:03:b0:7d:e2:6a:37:4d:5f:d1:40:f7:2a:da:07:
         6d:7e:37:b9:56:1b:95:86:b0:0a:78:cc:d1:e7:ff:7b:04:7f:
         97:f0:52:b8:ec:19:56:4d:27:8f:ea:35:b6:87:b9:c1:4e:e8:
         c5:5c:f6:c9:1c:aa:72:56:da:ba:6d:63:c7:22:fc:5c:d9:c7:
         bb:fd:d1:2b:77:4a:4a:86:91:29:c7:64:0a:a2:e5:38:d6:e9:
         7a:fb:af:02:c8:3e:c2:62:13:83:66:b6:73:05:45:fa:38:3b:
         07:6c:75:75:ff:0d:99:8e:7f:84:7f:1e:76:04:d4:50:e8:11:
         52:a6:e9:f4:e0:9b:1a:cb:37:7c:dc:7f:a6:6c:98:9d:f6:2f:
         0b:a3:04:94:28:c6:89:70:ab:ff:e4:7a:d9:41:b3:23:b2:9c:
         23:c3:92:f7:ec:8d:6e:b9:f1:69:c8:9d:63:9e:13:30:55:ae:
         78:c2:bd:09:51:ac:f3:a5:be:92:f1:48:63:c6:43:8d:3a:71:
         e9:09:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:09 2024 by rpki-client on console-ams.rpki-client.org