Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F3LKMVHPQ_py7U5rCosZ29jHW2g.cer
File:                     F3LKMVHPQ_py7U5rCosZ29jHW2g.cer (raw, json)
Hash identifier:          yW8tMeK5YKyk1rO8MyfPvgai9OkD7Ayg3Lrd1T/LNqQ=
Subject key identifier:   17:72:CA:31:51:CF:43:FA:72:ED:4E:6B:0A:8B:19:DB:D8:C7:5B:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A2C649FE29
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/633f93-7ffe-4ce4-b3a0-d7852d6fef93/1/F3LKMVHPQ_py7U5rCosZ29jHW2g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/633f93-7ffe-4ce4-b3a0-d7852d6fef93/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 08:58:50 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 58001
                          IP: 88.218.112.0/22
                          IP: 93.179.88.0/22
                          IP: 178.57.65.0 -- 178.57.68.255
                          IP: 2a0f:52c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699111439913 (0xa2c649fe29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:58:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1772ca3151cf43fa72ed4e6b0a8b19dbd8c75b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:9e:35:fb:cd:7b:f8:10:f6:ea:ee:51:82:
                    b8:1f:07:30:74:2d:3f:9d:63:6b:ef:ea:b6:6d:30:
                    90:99:5f:71:95:40:8f:f1:3b:8b:cc:64:f7:c5:56:
                    71:5c:b0:ee:41:71:27:91:dd:4d:ce:75:20:b3:b3:
                    f5:84:4a:e0:80:e3:5a:4f:79:3c:e4:17:1a:32:9a:
                    09:d1:b9:42:6e:21:75:66:30:dc:7a:b6:83:e6:7f:
                    66:a3:4c:29:38:a3:17:02:ba:2f:0a:d9:85:8c:48:
                    96:7d:aa:ec:c0:0d:a5:74:e6:f9:1e:35:33:98:e8:
                    5a:e2:00:59:1a:2c:84:3e:5c:2b:e8:e8:ee:82:25:
                    5e:2f:d6:3c:ac:b9:5a:c8:81:25:fb:df:19:d9:45:
                    fc:f0:1b:fe:7d:80:ec:2e:ed:27:e6:3e:1f:6d:a4:
                    23:1d:1e:f6:bd:7a:81:e8:43:79:1a:e9:7a:cb:d5:
                    fa:06:e0:1b:4d:e0:39:ec:30:9f:09:25:9d:6a:4c:
                    74:ad:9f:70:3b:37:27:4d:2a:a4:54:ae:6c:e0:5d:
                    92:86:32:64:7c:05:6b:d9:78:38:0e:45:21:4c:4d:
                    28:79:27:ae:3b:46:e7:6e:f6:42:5d:13:72:04:66:
                    fd:bf:62:76:ba:f1:b0:97:a7:aa:b7:6b:c1:a4:4c:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:72:CA:31:51:CF:43:FA:72:ED:4E:6B:0A:8B:19:DB:D8:C7:5B:68
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/633f93-7ffe-4ce4-b3a0-d7852d6fef93/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/633f93-7ffe-4ce4-b3a0-d7852d6fef93/1/F3LKMVHPQ_py7U5rCosZ29jHW2g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.112.0/22
                  93.179.88.0/22
                  178.57.65.0-178.57.68.255
                IPv6:
                  2a0f:52c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58001

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:31:f3:ee:2f:4e:72:a2:03:d9:c9:dc:76:3e:c8:67:92:
         16:f0:c0:ea:ee:50:39:d0:1b:4f:65:cd:09:a5:d0:fc:8a:ce:
         6b:8e:5f:dc:e7:d0:07:56:97:9d:2b:52:e6:c7:3a:a6:44:35:
         5f:32:9e:7e:62:de:0a:96:e0:6c:65:6b:4f:a4:81:8f:61:cd:
         bb:6b:33:fc:3c:f8:1c:3b:60:84:47:dd:8e:de:98:a9:dc:82:
         bf:75:53:47:99:b9:4e:22:0b:01:a1:d1:9f:4f:37:e1:0a:eb:
         e6:4c:1a:2d:96:d0:e7:e4:78:c7:cc:a7:9b:52:c6:08:36:81:
         b1:20:c3:4f:cc:34:70:d9:4b:b2:cf:76:e6:e3:12:33:6d:a3:
         76:d4:8f:a9:0c:b9:4d:b4:ed:04:b5:a5:45:a1:b0:b8:3a:a1:
         3f:66:3a:92:55:33:ca:02:83:59:56:9a:16:cc:df:a5:d0:bf:
         39:54:b7:fc:d1:24:16:1e:90:96:41:c2:b3:c9:16:8f:d3:4e:
         46:16:e5:6c:37:04:3b:dc:6f:58:a4:19:db:68:14:0e:78:76:
         50:19:8c:7a:89:30:ce:87:c2:86:58:ad:aa:09:fc:45:ea:57:
         c0:b4:3b:36:aa:e2:c1:ab:6d:fc:e4:2d:a4:a8:69:a9:ac:77:
         a2:ad:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:32 2024 by rpki-client on console-fra.rpki-client.org