Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8B-HojJVjekmtxgJ0VRs_XOiSDU.cer
File:                     8B-HojJVjekmtxgJ0VRs_XOiSDU.cer (raw, json)
Hash identifier:          SnOX8DgrOV7NqY7DGJN9RF3zN2Lcj4Iv2yI3UXK0GsI=
Subject key identifier:   F0:1F:87:A2:32:55:8D:E9:26:B7:18:09:D1:54:6C:FD:73:A2:48:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       84CBED671C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/bb31e8-2628-4252-b7f7-7989b7f063a0/1/8B-HojJVjekmtxgJ0VRs_XOiSDU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/bb31e8-2628-4252-b7f7-7989b7f063a0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 08:00:57 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 185.233.40.0/22
                          IP: 2a0d:6500::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570357016348 (0x84cbed671c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:00:57 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f01f87a232558de926b71809d1546cfd73a24835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:d6:75:ce:58:6e:b7:26:76:24:94:ae:cc:
                    04:28:8c:e1:a8:83:f3:8f:5a:7e:2c:24:26:69:0b:
                    ad:95:3b:bd:96:25:94:0b:a6:70:3d:e0:61:41:a0:
                    d8:2c:79:65:1c:c5:26:c2:2c:a1:00:42:c9:0e:52:
                    f8:bd:ac:a1:b2:24:bb:c9:26:a4:71:7e:73:6f:79:
                    cc:b5:c4:af:2a:7d:b4:99:de:dc:c0:29:9e:65:95:
                    f7:b1:73:be:f8:02:c5:46:3c:f3:d7:09:61:62:90:
                    34:86:c8:c7:7d:ef:79:68:cf:7e:36:dc:e0:35:11:
                    56:b7:ff:84:8a:a9:51:5e:36:72:f4:8f:6f:a1:3d:
                    3c:67:85:ce:cf:b9:68:62:70:e3:9d:70:4a:e9:58:
                    42:9e:35:f9:24:e0:49:06:be:91:5e:a6:bb:a8:3c:
                    3a:ff:b3:95:26:7c:9d:d0:ef:ca:4e:97:b3:fa:80:
                    e1:00:ca:5f:5d:03:7c:2c:bb:fb:84:02:b1:2f:a1:
                    57:dc:8a:e4:f1:85:1d:d8:09:f4:a8:0f:50:12:26:
                    34:d1:3f:27:06:34:81:dc:4b:2d:7e:cf:67:09:ba:
                    50:17:49:f4:a2:d3:7e:5e:a8:22:93:ab:93:f0:91:
                    85:02:65:d8:06:6b:fe:c0:22:24:7b:c4:c3:01:2e:
                    b9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1F:87:A2:32:55:8D:E9:26:B7:18:09:D1:54:6C:FD:73:A2:48:35
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bb31e8-2628-4252-b7f7-7989b7f063a0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bb31e8-2628-4252-b7f7-7989b7f063a0/1/8B-HojJVjekmtxgJ0VRs_XOiSDU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.40.0/22
                IPv6:
                  2a0d:6500::/29

    Signature Algorithm: sha256WithRSAEncryption
         5b:79:ad:9c:e9:a2:94:7f:3a:e3:9e:d7:a9:e8:e1:62:98:b7:
         f4:9b:81:b2:5e:cf:2f:93:8b:c4:1e:15:04:3a:1a:31:4b:69:
         27:38:df:86:93:38:3e:b2:c2:4e:3b:f7:6d:75:3a:e8:53:f1:
         69:fb:29:a5:a7:36:71:2e:b7:10:4d:84:9c:8b:01:4d:97:45:
         ea:27:e1:5c:eb:a5:0c:d0:9f:18:f5:02:79:e2:a2:d6:b5:d3:
         41:42:e5:80:30:8e:26:ee:4a:38:e5:18:e4:d6:f6:34:a0:8e:
         0a:01:c7:4c:35:df:de:05:4a:f9:67:a8:be:fc:54:42:67:cb:
         67:88:43:3e:26:8e:ab:c6:15:2f:38:ef:f4:4f:8c:0f:fc:12:
         78:3b:91:f3:0c:bf:10:62:58:31:6a:4e:9d:78:50:1c:6b:bb:
         00:a1:83:66:6d:5d:37:91:4b:80:5b:39:6f:e2:91:52:37:af:
         65:ce:23:b9:83:6f:4b:2b:5f:ba:41:ae:f1:e4:e4:7a:90:a2:
         0f:41:e5:fb:59:0e:3f:a6:9f:07:28:e1:71:3e:48:40:6f:ae:
         3c:cf:4e:9a:c7:47:a9:e7:53:af:c8:27:d3:f1:1a:68:bb:70:
         45:ff:18:b0:2c:19:c1:8f:f4:20:57:fc:05:61:f3:e9:3f:21:
         70:a9:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-ams.rpki-client.org