Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9evj5GOu41s18Og2wBwvt9tEEk8.cer
File:                     9evj5GOu41s18Og2wBwvt9tEEk8.cer (raw, json)
Hash identifier:          1HM16xy1Llsf1oNDQEEf7UMJpadlpDVLT7jIsq/1Qmk=
Subject key identifier:   F5:EB:E3:E4:63:AE:E3:5B:35:F0:E8:36:C0:1C:2F:B7:DB:44:12:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7EBD3AFA64
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a5/18acf0-3dd0-439d-b57e-4d55f6d3fdb6/1/9evj5GOu41s18Og2wBwvt9tEEk8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a5/18acf0-3dd0-439d-b57e-4d55f6d3fdb6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:59:18 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.65.76.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544340638308 (0x7ebd3afa64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:59:18 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f5ebe3e463aee35b35f0e836c01c2fb7db44124f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0b:bd:5a:2b:d9:ad:02:1c:6b:58:76:7d:98:
                    ec:93:b3:93:e3:cd:82:55:2d:e4:29:a5:b4:6b:87:
                    d4:39:2b:b5:ae:c9:d8:15:fb:d7:b6:35:f6:db:7b:
                    0d:8f:2b:50:73:bd:7e:32:cb:c2:24:aa:f8:3c:1f:
                    d6:6c:60:a7:b7:6a:00:f5:00:19:ba:a7:99:0b:5f:
                    89:60:2e:0d:9e:60:d4:e7:92:28:b8:5b:5e:82:21:
                    9e:a3:81:02:f8:16:3c:9f:bb:21:cd:7b:df:d3:7a:
                    bd:3e:b9:4c:2e:33:ed:98:bb:74:db:33:7b:34:fd:
                    2f:9d:ff:3b:cb:6f:76:84:22:95:be:59:da:a7:21:
                    08:e7:34:39:16:20:98:a8:46:12:0e:25:21:e1:d7:
                    e3:59:6b:51:6c:c8:9a:ca:e4:97:c7:a8:5b:a6:51:
                    ea:a5:6d:37:b3:eb:e3:01:f1:99:8a:02:99:30:8c:
                    2f:35:0a:ee:73:85:5f:7f:8c:a6:89:d5:36:32:4f:
                    86:d0:a6:da:af:23:63:a0:7c:77:0b:d9:7e:bc:bc:
                    39:a7:1e:b9:ee:b1:31:cc:1c:89:19:32:37:80:be:
                    98:c0:93:51:c6:c3:2f:5a:43:d3:5f:32:96:a7:de:
                    e3:9e:0c:2e:33:db:7d:d9:68:05:57:6c:3a:38:0b:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EB:E3:E4:63:AE:E3:5B:35:F0:E8:36:C0:1C:2F:B7:DB:44:12:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/18acf0-3dd0-439d-b57e-4d55f6d3fdb6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/18acf0-3dd0-439d-b57e-4d55f6d3fdb6/1/9evj5GOu41s18Og2wBwvt9tEEk8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:31:c6:c6:be:f9:aa:e1:5a:d2:1b:d0:c8:09:d9:56:b0:5e:
         59:c7:b9:2f:a3:f9:90:6f:c1:d5:b9:b4:65:43:9f:7d:f2:68:
         0e:65:e4:36:1a:7e:e4:1c:2c:a8:ae:84:ac:4c:72:32:44:47:
         29:fe:1d:b9:95:04:00:21:56:6b:bd:5d:9b:fc:3c:98:3d:5e:
         a6:13:7e:c8:12:e8:7e:ef:c2:78:de:00:e6:e1:9b:76:08:23:
         81:8d:0d:52:d7:93:18:21:d4:bb:dd:89:f4:ce:8a:3f:c4:58:
         78:68:69:e8:34:fd:3a:12:c5:42:78:ec:52:18:8a:ea:2d:7c:
         0b:af:26:72:33:63:e0:7d:7a:92:02:7a:23:64:92:88:34:9c:
         01:1c:ab:f9:f9:6b:67:34:4d:c1:62:8f:bf:52:ca:c8:bb:e6:
         cd:25:b8:b9:fe:8f:80:cd:3d:5c:51:56:9e:d8:35:81:1a:65:
         f4:ef:18:51:73:8d:b8:26:07:c4:34:5e:b3:e9:1a:b5:a8:53:
         50:46:59:66:c0:74:a4:4e:27:57:85:3d:44:d2:04:61:35:8f:
         85:9c:b1:f4:89:a2:86:eb:e1:e6:d0:4a:d2:21:85:4f:a4:67:
         64:38:ec:ba:56:66:36:bd:37:ab:47:3d:bc:f0:de:54:df:d4:
         55:a1:a5:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-ams.rpki-client.org