Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AUWUTVfcuiUaDYgkEqYEEsCJtWI.cer
File:                     AUWUTVfcuiUaDYgkEqYEEsCJtWI.cer (raw, json)
Hash identifier:          JBvnd+nTPC6ZErounnPXuGv8b/fhiBM0/Rj7k1l2IUI=
Subject key identifier:   01:45:94:4D:57:DC:BA:25:1A:0D:88:24:12:A6:04:12:C0:89:B5:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       811A21D4C4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0e/6232cb-6528-4d24-98f1-26cb7b041e2f/1/AUWUTVfcuiUaDYgkEqYEEsCJtWI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0e/6232cb-6528-4d24-98f1-26cb7b041e2f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:13:44 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 57768
                          IP: 5.187.8.0/21
                          IP: 37.75.128.0/21
                          IP: 185.46.176.0/22
                          IP: 2a01:88e0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554489205956 (0x811a21d4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:13:44 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0145944d57dcba251a0d882412a60412c089b562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:30:60:ab:30:b7:82:85:22:ff:0a:31:65:
                    af:a1:c2:52:4d:25:7c:57:32:7d:2c:c6:d7:a3:e7:
                    b2:82:36:01:6e:01:e2:3f:8f:de:81:22:7c:ce:b7:
                    88:5f:5b:7c:25:4c:77:0a:01:6f:23:ae:26:11:23:
                    14:5f:01:a2:d0:32:4c:e0:54:bc:34:28:09:2f:ee:
                    10:c8:61:6e:d5:5d:95:6a:64:d9:00:3f:87:b1:6a:
                    52:e8:4a:79:ec:15:18:ce:2b:96:4e:8b:e0:86:a2:
                    cb:6f:0b:33:d1:db:e6:d3:69:dc:0e:10:4f:98:76:
                    cf:c9:10:0c:e3:cc:c4:21:47:d5:b0:99:34:28:0a:
                    30:9d:86:1b:7b:f7:85:59:fa:2f:e1:f6:16:f1:a3:
                    a3:92:de:18:7b:13:7c:ed:91:84:00:06:ed:43:b6:
                    ab:19:2f:1d:ba:6a:b0:90:42:37:25:9f:12:5d:07:
                    58:57:5f:49:bd:88:d2:e7:82:45:57:af:d7:ef:e3:
                    d8:ae:76:e3:df:ca:34:02:56:5b:fc:0d:cb:78:ce:
                    3f:32:43:56:c1:31:5b:47:fd:d7:8a:f1:17:41:2d:
                    5d:f0:d9:0a:90:cb:f1:15:c3:b7:e7:db:e3:da:66:
                    1b:08:28:92:20:6e:6a:da:dd:77:d7:65:d0:4b:5a:
                    6e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:45:94:4D:57:DC:BA:25:1A:0D:88:24:12:A6:04:12:C0:89:B5:62
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6232cb-6528-4d24-98f1-26cb7b041e2f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6232cb-6528-4d24-98f1-26cb7b041e2f/1/AUWUTVfcuiUaDYgkEqYEEsCJtWI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.187.8.0/21
                  37.75.128.0/21
                  185.46.176.0/22
                IPv6:
                  2a01:88e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57768

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:e8:d4:04:8f:57:09:4a:eb:5a:55:3d:85:6e:d3:8e:c0:
         cf:75:23:02:e2:1a:fe:3d:72:5b:60:60:d1:90:08:90:71:5c:
         e7:2b:ba:98:fe:94:6f:3d:01:f5:76:de:f1:85:43:f8:41:19:
         5d:af:07:f5:cd:2c:c1:d7:95:70:ab:89:54:8d:fd:2f:6f:46:
         9a:be:2e:02:44:7e:d8:e6:ed:76:ae:2c:0a:e8:45:4a:de:b6:
         d4:03:8b:82:a1:3e:99:13:9a:d0:74:68:bc:4c:b5:54:2a:84:
         00:9c:7f:3b:8b:25:ac:7a:d0:b1:77:0a:7a:06:07:b8:ea:a0:
         90:e2:47:8f:b0:e4:e7:80:4b:db:37:47:11:3f:9e:ab:a0:1d:
         49:83:a3:4b:d5:31:f3:fd:56:a3:a6:6b:6a:a3:40:e5:e9:0a:
         59:e4:95:23:70:cf:ad:fd:5d:6b:fc:4b:15:07:52:ec:be:dc:
         08:6c:87:b4:af:4a:f4:0a:88:b8:b5:6e:36:e1:f8:8d:31:46:
         fe:7f:0b:fa:ab:ae:f2:1f:43:0c:dc:08:5c:84:5c:1a:c7:0a:
         f8:08:2e:2c:5f:c5:50:13:8c:55:ce:0e:67:1b:26:47:cd:cc:
         22:c6:96:cd:25:8a:7b:7b:9e:7d:45:5a:63:45:56:ac:75:90:
         68:87:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----