Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6t9rgm3mhaLJdWjF6m6B9oiQAKw.cer
File:                     6t9rgm3mhaLJdWjF6m6B9oiQAKw.cer (raw, json)
Hash identifier:          O/vhoIes4H3OLvhYNNBXBaZN3WoPcsUEUt1PuXugryw=
Subject key identifier:   EA:DF:6B:82:6D:E6:85:A2:C9:75:68:C5:EA:6E:81:F6:88:90:00:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       58E62479A6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/fa458a-efc8-499d-86db-eb5473d854ae/1/6t9rgm3mhaLJdWjF6m6B9oiQAKw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/fa458a-efc8-499d-86db-eb5473d854ae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 14:41:34 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 58045
                          IP: 37.209.240.0/21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381818272166 (0x58e62479a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 14:41:34 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=eadf6b826de685a2c97568c5ea6e81f6889000ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:14:dc:a6:b8:63:84:fb:cf:ac:8b:3a:c3:
                    2c:13:b4:f7:ac:e3:1c:ce:a6:fb:4f:8d:1f:e5:d0:
                    8f:e4:73:3f:ed:25:5d:e1:db:89:89:7b:ba:72:e7:
                    83:af:5c:cd:35:2d:ae:1f:33:31:70:29:25:b6:b9:
                    a2:56:08:4f:86:6b:88:ed:fc:90:16:62:89:46:f2:
                    a2:1a:be:75:06:45:bc:8e:bd:16:b1:e5:97:22:f3:
                    52:b4:91:08:50:af:3e:a5:71:5b:20:e6:4a:56:06:
                    e6:e6:e9:fb:b2:e6:cf:e5:57:6e:35:cf:8d:d3:24:
                    2c:51:56:c7:38:8e:72:2f:47:fc:f8:4d:c8:c3:be:
                    7c:70:0e:ec:0e:1c:24:30:8a:d4:4f:90:dc:10:de:
                    38:45:1b:07:d6:b0:e5:65:fc:2b:0f:c1:1d:2f:8c:
                    b7:20:42:4a:ae:56:85:fe:55:1d:54:30:d3:ad:24:
                    91:d0:a4:4f:fd:49:64:25:af:77:d2:ca:d6:7a:4e:
                    62:3a:62:aa:91:71:a7:ce:20:c2:fe:a0:19:f2:00:
                    de:20:67:e2:d5:9e:cf:a6:17:07:31:fd:e5:3b:81:
                    95:a1:9c:e0:5e:09:9b:e4:78:d6:9a:14:58:94:a1:
                    70:6f:ff:02:e5:4d:eb:67:fe:81:7e:22:8d:e1:97:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DF:6B:82:6D:E6:85:A2:C9:75:68:C5:EA:6E:81:F6:88:90:00:AC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fa458a-efc8-499d-86db-eb5473d854ae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fa458a-efc8-499d-86db-eb5473d854ae/1/6t9rgm3mhaLJdWjF6m6B9oiQAKw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.209.240.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58045

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:70:3a:2f:1f:51:c0:0a:57:d7:2b:99:b7:6c:09:86:52:
         7d:c5:26:0b:4e:fc:12:30:91:35:af:c1:5f:ae:df:cb:4b:8d:
         b8:44:fb:ef:0f:15:8f:5c:cf:9c:c7:f3:54:e9:d5:74:9f:6d:
         df:fa:e8:aa:8c:c9:f9:35:72:7b:8e:82:8e:88:7b:91:d6:27:
         4c:7e:60:b2:dd:3d:0c:6c:8b:f5:2f:de:31:b9:9f:25:96:3e:
         8c:86:eb:d8:86:74:27:72:1d:52:04:7b:77:c2:90:1b:e6:b2:
         11:fb:71:dc:56:6b:72:c5:20:2c:57:d6:ad:99:2a:07:a4:a9:
         83:4a:33:aa:f6:c7:a6:bd:f5:4a:4d:dc:31:fc:42:cb:12:b4:
         86:44:7d:e0:82:e9:79:05:fe:48:4f:7c:44:91:d9:de:97:d6:
         dc:a2:36:99:8c:48:af:17:83:fe:bb:0a:4e:5b:1e:69:ee:fe:
         65:93:8e:12:71:99:32:40:1a:7c:77:e2:6b:6c:0e:21:12:a4:
         8a:e0:82:9f:be:b4:79:85:65:aa:d6:ae:ea:93:c3:f2:4a:1c:
         b4:4e:45:a2:36:0a:f8:ce:d9:ac:70:9c:fd:a9:f7:1d:ea:cc:
         08:12:67:76:58:ab:1b:34:fd:00:67:96:df:6d:12:f0:45:d4:
         6e:93:bb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:23 2023 by rpki-client on console-ams.rpki-client.org