Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9lNmdb20CNS090Hp1g6gOjes8nQ.cer
File:                     9lNmdb20CNS090Hp1g6gOjes8nQ.cer (raw, json)
Hash identifier:          civSJroUDItTfdSWAX1kdxNYuImUzIyRpoIX4igTWh0=
Subject key identifier:   F6:53:66:75:BD:B4:08:D4:B4:F7:41:E9:D6:0E:A0:3A:37:AC:F2:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5F1555D52D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/64/db0ae0-82d9-4d5e-938a-c4085c3125ab/1/9lNmdb20CNS090Hp1g6gOjes8nQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/64/db0ae0-82d9-4d5e-938a-c4085c3125ab/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:12:28 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 31302
                          IP: 83.221.0.0/19
                          IP: 2a0d:be00::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408379839789 (0x5f1555d52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:12:28 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=f6536675bdb408d4b4f741e9d60ea03a37acf274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:94:3c:c8:1e:df:3e:b6:85:08:66:6a:91:92:
                    e4:29:ae:20:9c:f7:0c:03:51:6c:c3:74:a0:b9:8d:
                    67:5c:36:4f:88:0f:99:75:86:c2:65:ba:8f:9c:8b:
                    e0:6d:e9:e1:d4:66:5d:00:29:7e:81:03:a6:13:fb:
                    db:72:93:9a:a1:dc:37:35:48:c3:e9:b5:ff:23:be:
                    4a:19:25:69:34:e2:fa:8d:05:24:f9:55:98:c1:42:
                    62:61:58:d9:87:c0:ff:cd:74:90:87:db:b5:8b:58:
                    45:83:8c:ed:ad:95:e7:db:b9:d1:0d:b3:01:af:12:
                    7e:8d:7d:52:5b:2b:4a:43:fc:25:d6:89:4d:94:45:
                    db:69:b1:16:41:6c:9e:e5:1e:7c:27:cb:ca:43:d4:
                    fb:77:e1:50:2e:f5:f1:91:4a:47:95:81:50:76:99:
                    fa:ee:d9:5c:89:72:2e:40:03:7c:a9:05:fa:bc:1e:
                    e2:5d:50:9f:ee:b8:83:31:ac:f7:24:35:1f:05:3a:
                    04:20:70:3a:70:18:ab:a8:40:e3:fe:5f:98:ad:be:
                    7d:86:4a:2b:c7:50:ee:00:a0:8a:12:2c:d0:c8:d7:
                    40:59:9b:a7:da:17:e6:b4:09:dd:27:1c:3b:c0:81:
                    d1:ee:5d:03:4a:ab:f1:d8:90:6f:42:0e:31:ac:1f:
                    8e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:53:66:75:BD:B4:08:D4:B4:F7:41:E9:D6:0E:A0:3A:37:AC:F2:74
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db0ae0-82d9-4d5e-938a-c4085c3125ab/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db0ae0-82d9-4d5e-938a-c4085c3125ab/1/9lNmdb20CNS090Hp1g6gOjes8nQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.221.0.0/19
                IPv6:
                  2a0d:be00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31302

    Signature Algorithm: sha256WithRSAEncryption
         4a:b9:93:7e:eb:8b:b6:1d:dd:30:90:d0:91:d9:65:8c:46:79:
         99:de:fa:51:d1:c6:75:9e:d3:2b:d0:e1:98:94:40:32:8e:d6:
         b4:c0:e0:a6:85:5c:89:f5:df:9a:1e:80:00:f8:f7:ca:3f:e6:
         85:e1:13:2b:de:eb:18:db:32:ca:62:08:a3:95:e0:e4:69:ca:
         e3:87:f6:e7:f0:f1:cf:a5:be:15:ad:f6:4f:8a:67:08:49:55:
         27:d8:36:65:f5:b8:b8:de:7e:a4:f8:1d:42:0c:d9:10:56:2e:
         e3:e6:a2:b7:d2:54:73:15:6c:79:d7:05:02:e6:5c:a5:83:eb:
         8c:77:52:d5:dc:37:2a:72:82:dc:5c:99:c3:94:bc:d2:a8:68:
         f9:5d:3b:c3:ac:82:4b:a1:ba:91:d2:a2:c1:59:c5:47:ba:92:
         92:a7:e0:3e:c6:75:7d:1a:1c:15:a9:b6:d5:0a:fc:95:d7:ad:
         86:f9:e2:b1:ab:01:d0:84:e2:97:c0:0d:84:6c:cd:04:65:30:
         d4:52:4d:82:f7:5b:62:8a:95:6c:78:47:8b:96:c3:2c:1b:73:
         ce:e7:d8:2a:3c:55:89:e5:6b:d9:08:c7:d8:9a:9a:1b:01:80:
         11:b4:fd:2c:14:3b:6f:09:22:66:65:47:18:ea:65:16:37:30:
         04:b4:d7:f6
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIFXxVV1S0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDAy
MjQxNTEyMjhaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY2NTM2Njc1YmRi
NDA4ZDRiNGY3NDFlOWQ2MGVhMDNhMzdhY2YyNzQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDolDzIHt8+toUIZmqRkuQpriCc9wwDUWzDdKC5jWdcNk+I
D5l1hsJluo+ci+Bt6eHUZl0AKX6BA6YT+9tyk5qh3Dc1SMPptf8jvkoZJWk04vqN
BST5VZjBQmJhWNmHwP/NdJCH27WLWEWDjO2tlefbudENswGvEn6NfVJbK0pD/CXW
iU2URdtpsRZBbJ7lHnwny8pD1Pt34VAu9fGRSkeVgVB2mfru2VyJci5AA3ypBfq8
HuJdUJ/uuIMxrPckNR8FOgQgcDpwGKuoQOP+X5itvn2GSivHUO4AoIoSLNDI10BZ
m6faF+a0Cd0nHDvAgdHuXQNKq/HYkG9CDjGsH47pAgMBAAGjggKuMIICqjAdBgNV
HQ4EFgQU9lNmdb20CNS090Hp1g6gOjes8nQwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvZGIwYWUwLTgyZDktNGQ1ZS05
MzhhLWM0MDg1YzMxMjVhYi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kYjBhZTAtODJkOS00ZDVlLTkz
OGEtYzQwODVjMzEyNWFiLzEvOWxObWRiMjBDTlMwOTBIcDFnNmdPamVzOG5RLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAVT3QAwDQQCAAIwBwMFAyoNvgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw
BAICekYwDQYJKoZIhvcNAQELBQADggEBAEq5k37ri7Yd3TCQ0JHZZYxGeZne+lHR
xnWe0yvQ4ZiUQDKO1rTA4KaFXIn135oegAD498o/5oXhEyve6xjbMspiCKOV4ORp
yuOH9ufw8c+lvhWt9k+KZwhJVSfYNmX1uLjefqT4HUIM2RBWLuPmorfSVHMVbHnX
BQLmXKWD64x3UtXcNypygtxcmcOUvNKoaPldO8OsgkuhupHSosFZxUe6kpKn4D7G
dX0aHBWpttUK/JXXrYb54rGrAdCE4pfADYRszQRlMNRSTYL3W2KKlWx4R4uWwywb
c87n2Co8VYnla9kIx9iamhsBgBG0/SwUO28JImZlRxjqZRY3MAS01/Y=
-----END CERTIFICATE-----