Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9mSUVFjTtNZ8G2RAgtN1TWaQg08.cer
File:                     9mSUVFjTtNZ8G2RAgtN1TWaQg08.cer (raw, json)
Hash identifier:          wokF7egA64Bs1Q0C3NNgurNHg/P9u2KdLc2GigGnqQw=
Subject key identifier:   F6:64:94:54:58:D3:B4:D6:7C:1B:64:40:82:D3:75:4D:66:90:83:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0184F8BCDC0FB7B04A9BBEBFE2E25974A0A9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/252326-5148-4ca5-a113-a2c3e42726a5/1/9mSUVFjTtNZ8G2RAgtN1TWaQg08.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/252326-5148-4ca5-a113-a2c3e42726a5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 09 Dec 2022 21:13:57 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 39674
                          IP: 46.250.224.0/19
                          IP: 193.93.152.0/22
                          IP: 2a00:8e00::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f8:bc:dc:0f:b7:b0:4a:9b:be:bf:e2:e2:59:74:a0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  9 21:13:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f664945458d3b4d67c1b644082d3754d6690834f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:25:02:43:6d:9e:e4:84:f2:78:61:92:d7:18:
                    2a:a7:eb:07:44:bb:2d:9e:85:45:a1:b1:d8:9f:d3:
                    4b:6c:d4:7a:fe:bf:33:e2:c1:a7:f7:5d:b5:58:e4:
                    19:5b:0c:2e:3d:9a:b3:9d:8a:91:7c:61:38:59:05:
                    88:bf:ca:f8:72:d5:c4:2b:c7:d8:63:43:9c:0e:51:
                    e2:a5:b7:6a:c3:b6:24:53:fd:4d:7b:fe:c4:3d:36:
                    95:ac:a1:ca:a7:f9:48:f8:81:bb:57:84:32:d2:1b:
                    fd:f3:b2:b8:b7:6c:f7:24:21:d9:7e:a7:86:11:25:
                    9f:2f:e6:5d:c2:71:01:fc:68:b4:4b:64:2f:ab:70:
                    95:18:29:65:3b:a7:20:8d:75:1b:73:c1:c7:ee:d4:
                    b6:ae:d0:b3:e3:ef:d0:4a:d3:c7:9e:31:18:ec:ac:
                    9d:2d:01:01:dc:96:90:7a:1d:e4:0f:17:93:91:84:
                    5c:00:2a:8e:ea:b2:e4:ca:c5:a6:77:59:ef:27:24:
                    64:b0:6f:03:27:29:d5:b5:6e:5f:71:af:1b:09:20:
                    6f:06:af:34:36:ae:69:0d:85:a9:33:94:d7:00:ca:
                    0c:ad:c4:8b:e6:57:0c:fe:d3:7b:d3:df:0d:5d:44:
                    1b:31:26:63:8f:93:04:64:5c:7e:78:13:a5:cd:7b:
                    1a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:64:94:54:58:D3:B4:D6:7C:1B:64:40:82:D3:75:4D:66:90:83:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/252326-5148-4ca5-a113-a2c3e42726a5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/252326-5148-4ca5-a113-a2c3e42726a5/1/9mSUVFjTtNZ8G2RAgtN1TWaQg08.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.250.224.0/19
                  193.93.152.0/22
                IPv6:
                  2a00:8e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39674

    Signature Algorithm: sha256WithRSAEncryption
         9f:2e:23:62:a6:b2:9e:8a:57:08:3d:ac:c8:3f:6f:cd:d1:80:
         62:d9:ca:f0:8a:97:3d:87:ed:81:84:41:b6:53:63:45:c5:0a:
         bf:e9:6a:fb:66:c1:26:42:43:eb:f2:b3:d8:0a:1e:2e:ea:d2:
         45:64:1a:a8:c6:2b:f3:f8:6a:3d:0f:5d:92:9a:40:bc:04:7b:
         6a:fc:a8:39:c0:c9:35:a4:b2:9a:07:e2:ad:ca:98:ce:ab:8e:
         f1:4f:01:76:bd:2b:e4:cd:20:41:6b:4e:a0:1e:41:f7:8b:1b:
         76:54:a5:5e:ba:9a:11:09:52:36:8e:ea:a2:74:64:97:98:2e:
         b4:5a:79:2d:4c:b8:19:16:b4:8d:af:3a:44:af:30:ec:fa:53:
         6e:3d:1d:34:5f:46:73:07:77:1d:71:2d:6d:a7:dc:93:95:de:
         c6:5a:f6:4b:de:59:73:e3:fb:05:d8:93:66:95:0a:1d:c5:43:
         e0:62:1a:e1:4c:22:51:11:36:a6:98:67:7c:52:a4:7c:97:73:
         cf:07:ef:95:64:8c:aa:0b:f3:42:e4:75:1f:8d:9d:f2:46:0f:
         bb:8d:ad:52:4a:48:3a:ac:03:0d:d0:b4:a1:3d:54:47:8d:03:
         9c:ad:80:2b:94:d5:f5:6c:de:a7:64:22:65:bf:de:bd:52:13:
         65:19:b7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:18 2024 by rpki-client on console-fra.rpki-client.org