Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7dp7QDkRF1kUxE-9NXOPCRPmOWk.cer
File:                     7dp7QDkRF1kUxE-9NXOPCRPmOWk.cer (raw, json)
Hash identifier:          QkTSwPZpcELLxLhryeg8EbMeWqDNn6g/topPAiQaZzI=
Subject key identifier:   ED:DA:7B:40:39:11:17:59:14:C4:4F:BD:35:73:8F:09:13:E6:39:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       83EE520693
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/5d3fa2-b4e3-4eb4-b5ca-75dea8545bac/1/7dp7QDkRF1kUxE-9NXOPCRPmOWk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/5d3fa2-b4e3-4eb4-b5ca-75dea8545bac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:32:21 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.15.16.0/22
                          IP: 2a0e:1c80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566639068819 (0x83ee520693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:21 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=edda7b403911175914c44fbd35738f0913e63969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:d0:2e:d1:71:12:4c:3f:0c:0f:d2:cb:2e:
                    ad:47:81:8b:16:fd:a3:68:9f:02:74:fe:8a:f3:e6:
                    ee:68:c5:ee:9b:ac:5a:80:29:b1:2c:bd:78:96:57:
                    e8:76:9a:32:be:cf:a4:d7:a8:5b:23:a6:48:d5:a4:
                    52:d2:47:27:5a:9c:cc:e0:43:e3:95:8b:96:c3:30:
                    09:b7:9b:0c:a3:34:a5:19:2a:40:ad:76:9d:15:6a:
                    8d:27:d1:45:4e:4d:4c:15:c6:5e:76:4b:47:da:3d:
                    17:37:50:a3:de:e6:7a:09:55:9c:2e:61:3f:2b:a1:
                    32:57:e5:9c:b3:12:87:54:3b:5e:af:55:37:cb:5c:
                    fe:87:69:9d:4c:7b:e8:2d:b9:51:1f:85:14:29:58:
                    67:e6:cf:19:a2:4c:8e:23:ab:4a:7e:cb:59:9c:1e:
                    9b:4f:cb:04:ca:bd:7a:de:93:4f:39:b3:e9:43:aa:
                    23:63:d0:1a:74:c8:d6:c8:b6:12:a8:2d:46:f4:99:
                    6d:7e:6f:a1:e4:f0:5a:70:25:8a:4e:5f:6f:da:0e:
                    cc:35:a9:c9:53:3e:18:f2:e5:dc:cc:21:dc:c2:39:
                    23:27:4c:59:44:17:aa:ff:34:70:5d:f2:5e:66:55:
                    fe:9a:47:93:1c:20:9b:55:97:58:f6:c4:a4:40:ef:
                    c2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DA:7B:40:39:11:17:59:14:C4:4F:BD:35:73:8F:09:13:E6:39:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5d3fa2-b4e3-4eb4-b5ca-75dea8545bac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5d3fa2-b4e3-4eb4-b5ca-75dea8545bac/1/7dp7QDkRF1kUxE-9NXOPCRPmOWk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.16.0/22
                IPv6:
                  2a0e:1c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         23:61:25:70:3f:ae:71:f4:a7:47:7a:48:4c:37:e7:d2:80:55:
         15:33:6e:b1:eb:d5:66:6c:48:6f:3d:0a:63:cb:21:77:45:60:
         25:74:59:83:be:95:53:4f:16:9b:cc:40:ff:1a:7f:e4:74:87:
         84:03:cd:eb:f0:de:20:3b:21:32:1a:a2:3c:9f:d4:93:3d:9c:
         80:06:74:5a:25:72:90:b7:22:9b:40:b9:94:77:7b:03:b7:58:
         78:c3:30:79:42:c1:e8:28:ed:4d:f2:86:93:e2:32:c6:3e:32:
         82:ef:fd:03:87:a2:bb:a0:ec:37:a4:2c:1e:63:05:a9:61:06:
         13:a1:d0:e4:86:4c:c5:44:f4:7c:10:4f:8e:1b:c5:3d:80:f0:
         30:a8:5a:6e:39:2c:74:e4:a5:bd:6c:1b:bc:62:15:ba:e0:be:
         e4:9c:f3:2b:18:f3:38:6f:0a:64:dd:4a:a2:00:a0:67:04:bf:
         12:72:47:eb:3d:3c:96:74:e5:8a:e0:ba:97:44:d9:d4:64:ef:
         e8:ad:c2:ea:b6:5d:b2:7f:b4:dc:97:09:04:69:d0:a1:79:18:
         6c:19:f4:63:25:1e:7b:fe:46:76:9b:84:6b:63:5f:aa:98:00:
         93:f3:b0:7e:73:c0:1f:f0:f0:70:08:b8:d4:99:5f:63:98:50:
         a3:db:22:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:27 2023 by rpki-client on console-fra.rpki-client.org