Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EEjdEhIGASghQyheumZrE7Q0eY4.cer
File:                     EEjdEhIGASghQyheumZrE7Q0eY4.cer (raw, json)
Hash identifier:          DLvt0ijq4Pf3fjmhSQCTb8YP7zf0gc0swPqRz1GcRCg=
Subject key identifier:   10:48:DD:12:12:06:01:28:21:43:28:5E:BA:66:6B:13:B4:34:79:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       ABE8B9301A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/EEjdEhIGASghQyheumZrE7Q0eY4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 15 Jan 2022 13:28:07 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 208480
                          IP: 45.134.8.0/22
                          IP: 2a0e:82c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738343858202 (0xabe8b9301a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 15 13:28:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1048dd12120601282143285eba666b13b434798e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:03:48:2c:7f:43:61:01:71:ec:17:22:15:
                    f8:d9:6e:36:ca:f6:f6:8e:b1:df:0b:9a:90:f2:36:
                    61:fc:ca:d5:ea:6b:37:68:ba:ef:db:71:f8:01:77:
                    ae:ec:96:78:d4:c8:35:23:12:ac:e7:0b:c5:1a:c0:
                    a5:d9:b2:5b:7e:11:81:9f:47:0d:f1:d5:4c:b5:f2:
                    0c:6c:02:7d:07:32:1c:80:d7:db:f1:b2:84:47:47:
                    59:93:c5:f6:c6:ec:ae:80:24:d2:f5:69:d0:a3:ba:
                    46:b0:72:4b:c2:17:b9:69:51:ef:8f:7a:49:a2:77:
                    88:80:55:29:c1:3f:ee:f7:ef:54:15:a2:dd:15:ac:
                    34:12:d0:52:c2:7b:4a:f9:4d:b8:97:76:74:1c:30:
                    07:d2:a5:f9:47:6c:1b:d4:86:4a:bf:c0:01:8b:b7:
                    db:d3:82:57:9b:fa:93:d3:93:d5:1d:31:10:32:d0:
                    a2:f9:a5:45:b7:ee:ce:9e:5c:fb:91:b0:9e:fc:1f:
                    b7:c7:09:4c:ec:69:d9:14:13:e1:28:a3:c8:ed:c6:
                    4d:3a:dd:56:df:f6:a8:cd:e9:e5:45:f9:67:7d:ef:
                    82:b2:f8:f5:5f:f9:da:20:4d:b4:71:9a:84:c3:08:
                    cf:5d:d5:a4:3a:82:29:7f:99:fe:a5:ee:51:e8:37:
                    cc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:48:DD:12:12:06:01:28:21:43:28:5E:BA:66:6B:13:B4:34:79:8E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/EEjdEhIGASghQyheumZrE7Q0eY4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.8.0/22
                IPv6:
                  2a0e:82c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208480

    Signature Algorithm: sha256WithRSAEncryption
         b0:7d:9c:20:aa:b4:fa:e1:4c:68:ea:a2:43:47:e0:f9:a9:cb:
         06:9a:e3:74:17:b9:bb:b6:7b:bc:ac:7d:d7:9a:ce:ff:09:a6:
         b3:7b:c6:ce:a0:55:d2:04:98:4d:0c:cb:44:fb:d4:21:0c:1a:
         30:e3:49:db:b3:2f:9b:ad:3c:54:26:df:b0:a8:fc:fd:a8:9d:
         01:22:b6:02:e2:38:83:d6:0c:38:01:35:19:0e:06:a9:9e:0b:
         f8:09:c9:87:53:22:39:22:4e:f8:79:9b:70:bf:72:8f:08:62:
         59:98:f3:2d:34:3a:33:6f:a2:b4:5a:b7:31:eb:a4:d1:e3:a6:
         f6:be:44:0a:4b:50:0e:50:62:a9:c5:d7:71:78:3e:48:78:01:
         49:e5:42:09:9b:b2:1d:a9:90:27:b7:5f:dd:e3:bd:11:1a:d5:
         e8:7a:cb:ea:5f:c9:9d:55:de:67:37:dd:19:c8:0a:74:77:3b:
         13:f8:3b:2f:a1:0d:23:cd:a6:b3:da:b1:42:80:64:16:8c:d9:
         5a:03:35:c5:13:d1:a6:b4:d3:b0:bb:62:a1:aa:27:d6:c8:ed:
         00:e9:c1:fd:73:8e:75:57:81:e6:ce:6a:11:01:fe:8d:ba:f6:
         95:a5:70:ec:fa:10:7a:c2:ca:d3:9f:4b:a0:b8:a9:40:32:f6:
         d5:af:58:57
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIGAKvouTAaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTE1MTMyODA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxMDQ4ZGQxMjEy
MDYwMTI4MjE0MzI4NWViYTY2NmIxM2I0MzQ3OThlMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAovYDSCx/Q2EBcewXIhX42W42yvb2jrHfC5qQ8jZh/MrV
6ms3aLrv23H4AXeu7JZ41Mg1IxKs5wvFGsCl2bJbfhGBn0cN8dVMtfIMbAJ9BzIc
gNfb8bKER0dZk8X2xuyugCTS9WnQo7pGsHJLwhe5aVHvj3pJoneIgFUpwT/u9+9U
FaLdFaw0EtBSwntK+U24l3Z0HDAH0qX5R2wb1IZKv8ABi7fb04JXm/qT05PVHTEQ
MtCi+aVFt+7Onlz7kbCe/B+3xwlM7GnZFBPhKKPI7cZNOt1W3/aozenlRflnfe+C
svj1X/naIE20cZqEwwjPXdWkOoIpf5n+pe5R6DfMYQIDAQABo4ICrzCCAqswHQYD
VR0OBBYEFBBI3RISBgEoIUMoXrpmaxO0NHmOMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzc4MGQwOS1mMGNlLTQ5MjUt
YmQ2OC0wNWFjOWZiNWM0ZGMvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvNzgwZDA5LWYwY2UtNDkyNS1i
ZDY4LTA1YWM5ZmI1YzRkYy8xL0VFamRFaElHQVNnaFF5aGV1bVpyRTdRMGVZNC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLYYIMA0EAgACMAcDBQMqDoLAMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMuYDANBgkqhkiG9w0BAQsFAAOCAQEAsH2cIKq0+uFMaOqiQ0fg+anLBprj
dBe5u7Z7vKx915rO/wmms3vGzqBV0gSYTQzLRPvUIQwaMONJ27Mvm608VCbfsKj8
/aidASK2AuI4g9YMOAE1GQ4GqZ4L+AnJh1MiOSJO+HmbcL9yjwhiWZjzLTQ6M2+i
tFq3Meuk0eOm9r5ECktQDlBiqcXXcXg+SHgBSeVCCZuyHamQJ7df3eO9ERrV6HrL
6l/JnVXeZzfdGcgKdHc7E/g7L6ENI82ms9qxQoBkFozZWgM1xRPRprTTsLtioaon
1sjtAOnB/XOOdVeB5s5qEQH+jbr2laVw7PoQesLK059LoLipQDL21a9YVw==
-----END CERTIFICATE-----