Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7X19HT7OfI-Tmy1v2tsrZT_ai-E.cer
File:                     7X19HT7OfI-Tmy1v2tsrZT_ai-E.cer (raw, json)
Hash identifier:          tM8Txwal8yZbYGXL4ijAUEwwhk00SG7EnmjvTYuQrGM=
Subject key identifier:   ED:7D:7D:1D:3E:CE:7C:8F:93:9B:2D:6F:DA:DB:2B:65:3F:DA:8B:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       6FEF800923
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/76e5db-5942-4211-8368-9b63067e3901/1/7X19HT7OfI-Tmy1v2tsrZT_ai-E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/76e5db-5942-4211-8368-9b63067e3901/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Oct 2020 07:39:19 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 34304
                          AS: 49174
                          IP: 85.204.139.0/24
                          IP: 86.107.57.0 -- 86.107.61.255
                          IP: 86.107.63.0/24
                          IP: 86.107.68.0/23
                          IP: 89.33.166.0/23
                          IP: 89.35.33.0/24
                          IP: 89.35.50.0/24
                          IP: 89.35.60.0/23
                          IP: 89.35.224.0 -- 89.35.226.255
                          IP: 89.35.228.0 -- 89.35.230.255
                          IP: 89.35.232.0 -- 89.35.236.255
                          IP: 89.35.238.0/23
                          IP: 89.42.28.0/24
                          IP: 89.42.38.0/23
                          IP: 89.42.59.0/24
                          IP: 89.43.194.0/23
                          IP: 89.44.246.0/24
                          IP: 89.45.163.0/24
                          IP: 89.46.220.0/23
                          IP: 89.47.0.0/24
                          IP: 89.47.8.0/23
                          IP: 89.47.11.0 -- 89.47.12.255
                          IP: 89.47.14.0/24
                          IP: 93.113.154.0 -- 93.113.156.255
                          IP: 93.114.138.0/23
                          IP: 93.114.172.0/22
                          IP: 188.210.88.0/24
                          IP: 188.211.164.0 -- 188.211.166.255
                          IP: 188.212.110.0/24
                          IP: 188.213.2.0/23
                          IP: 193.138.192.0/22
                          IP: 2a05:8880::/30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480759515427 (0x6fef800923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct  2 07:39:19 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=ed7d7d1d3ece7c8f939b2d6fdadb2b653fda8be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:b0:8d:87:10:18:37:dc:88:37:43:8c:32:
                    81:52:c0:65:70:73:b6:a3:b1:b3:34:77:87:41:d4:
                    7a:37:1c:91:ca:7c:2b:4c:ef:58:fc:04:77:3a:34:
                    61:18:73:05:a6:fe:a4:94:5e:72:3f:90:a6:9f:39:
                    70:47:9b:9d:f7:e6:96:23:25:90:43:5d:85:b9:59:
                    c6:44:f8:ca:86:78:56:c7:3b:52:96:df:77:c6:b1:
                    58:e6:72:40:95:91:03:74:1c:72:a4:6f:81:f3:1e:
                    2b:9f:9c:8d:79:5b:f0:bf:b7:d0:dd:84:b2:3e:16:
                    71:e4:6d:50:91:b3:e3:44:f1:36:3c:0c:ff:e1:6e:
                    4d:bf:92:fa:c8:be:7c:69:56:bd:9e:b2:a1:c3:5c:
                    0b:8e:88:ac:98:4f:88:bd:34:9a:e8:f6:da:f6:96:
                    5b:d3:48:8e:8b:e5:42:36:cf:04:19:fd:09:cb:6d:
                    70:db:6b:07:66:e8:00:e5:79:c3:07:cb:08:81:d9:
                    10:a7:b1:71:43:4b:a4:02:d7:5b:db:7e:15:52:2a:
                    8d:db:64:79:86:62:ed:b7:46:54:e9:3c:1b:e4:7d:
                    59:d6:4d:dc:08:ea:a2:59:4b:32:d4:ab:69:47:7e:
                    38:42:b1:22:8f:18:6f:b6:e9:64:bd:d8:0d:2f:7d:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7D:7D:1D:3E:CE:7C:8F:93:9B:2D:6F:DA:DB:2B:65:3F:DA:8B:E1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/76e5db-5942-4211-8368-9b63067e3901/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/76e5db-5942-4211-8368-9b63067e3901/1/7X19HT7OfI-Tmy1v2tsrZT_ai-E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.204.139.0/24
                  86.107.57.0-86.107.61.255
                  86.107.63.0/24
                  86.107.68.0/23
                  89.33.166.0/23
                  89.35.33.0/24
                  89.35.50.0/24
                  89.35.60.0/23
                  89.35.224.0-89.35.226.255
                  89.35.228.0-89.35.230.255
                  89.35.232.0-89.35.236.255
                  89.35.238.0/23
                  89.42.28.0/24
                  89.42.38.0/23
                  89.42.59.0/24
                  89.43.194.0/23
                  89.44.246.0/24
                  89.45.163.0/24
                  89.46.220.0/23
                  89.47.0.0/24
                  89.47.8.0/23
                  89.47.11.0-89.47.12.255
                  89.47.14.0/24
                  93.113.154.0-93.113.156.255
                  93.114.138.0/23
                  93.114.172.0/22
                  188.210.88.0/24
                  188.211.164.0-188.211.166.255
                  188.212.110.0/24
                  188.213.2.0/23
                  193.138.192.0/22
                IPv6:
                  2a05:8880::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34304
                  49174

    Signature Algorithm: sha256WithRSAEncryption
         ac:c6:fa:ef:d7:8e:48:0b:c0:fd:b4:f5:38:a1:65:08:3d:1d:
         31:30:75:1d:67:95:54:4a:c8:dd:f9:63:cd:47:34:30:cf:fa:
         08:dd:fe:fe:94:78:f1:a2:5c:fc:03:ca:30:aa:bf:35:61:a4:
         76:38:d6:e0:69:96:90:0e:79:23:02:9c:93:82:56:fe:d8:7f:
         52:7a:b8:55:37:41:9e:57:8a:a6:8b:4e:61:f8:52:28:6f:c6:
         33:db:3c:af:34:ed:81:6d:64:cb:4a:fc:9e:f8:3f:f4:5a:b1:
         ac:df:76:3f:0e:65:3d:9d:d5:61:99:f2:a0:ce:9e:a4:0b:6b:
         8e:74:77:04:e6:85:13:d6:99:2e:77:29:c5:5e:1c:b7:89:0d:
         83:1b:ee:29:14:81:3c:bc:a6:94:28:1c:fd:a4:85:97:d4:c1:
         4a:fa:e6:34:de:b0:66:10:bd:e4:4d:a4:14:31:81:ad:d6:5e:
         12:76:02:c4:a7:7b:f5:9a:12:a2:90:a1:c9:5d:14:91:a2:4d:
         a7:b2:69:ec:5b:2f:97:8e:9d:81:97:6a:70:f7:7a:c0:26:cc:
         8e:f6:03:c1:c0:ea:ab:3a:1c:49:b6:52:07:e2:18:5d:cd:35:
         7b:e0:6b:d6:78:14:3a:6d:59:b0:f4:39:f4:18:d3:c5:be:1e:
         02:eb:7c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-ams.rpki-client.org