Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.cer
File:                     GeaZ4lbsO-lHJnGbYPj_QU7-_-k.cer (raw, json)
Hash identifier:          VIkVyTmVzvru7fEuhW/xkq7RY9yfnT1DVAMW8CkI7nY=
Subject key identifier:   19:E6:99:E2:56:EC:3B:E9:47:26:71:9B:60:F8:FF:41:4E:FE:FF:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0184ECEF38D5E745A5DACBEF8870DCDC0691
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 07 Dec 2022 14:13:31 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 203950
                          AS: 209945
                          AS: 210027
                          IP: 91.236.195.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ec:ef:38:d5:e7:45:a5:da:cb:ef:88:70:dc:dc:06:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  7 14:13:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19e699e256ec3be94726719b60f8ff414efeffe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:57:bc:a4:35:af:a1:11:d1:28:bd:ea:dd:
                    9d:0f:26:06:a7:4d:aa:4d:32:96:52:36:39:28:76:
                    76:d7:28:e0:26:23:71:ab:b1:23:d5:92:0b:f7:06:
                    c3:a3:6a:04:a5:a0:2c:f0:3f:b3:b0:a6:c8:86:51:
                    9d:1d:d1:3f:57:d1:91:8f:39:ba:54:94:61:63:2b:
                    99:a4:ba:0c:64:89:36:eb:4a:b0:ee:11:c3:fd:1b:
                    7c:33:58:12:cc:e7:19:b7:4b:fb:36:ea:1b:d9:e3:
                    16:ac:72:1b:ce:3d:17:d8:a1:f8:c3:e6:b4:98:84:
                    00:ae:67:94:8a:b6:21:86:51:31:13:c0:4d:a2:f3:
                    1e:58:b1:f3:5d:ea:0e:8f:64:c9:e0:42:20:d0:54:
                    9c:3c:94:e5:0e:8b:de:2a:86:b4:30:c9:af:63:69:
                    5b:d5:f6:ac:e7:9c:27:13:2f:e2:fe:83:b4:9e:b1:
                    c7:72:a9:50:de:a0:d4:f9:2a:10:4e:c5:19:70:d2:
                    bc:fb:f7:1a:2d:b3:31:de:96:11:34:49:a6:c6:8b:
                    cd:c4:52:97:e0:c8:c5:17:28:3c:90:d4:9b:61:cb:
                    14:bf:ba:87:c4:45:56:c0:a4:e9:4b:55:e5:9b:52:
                    dc:d9:3d:5a:28:82:43:0b:e2:bb:22:74:c0:b5:38:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E6:99:E2:56:EC:3B:E9:47:26:71:9B:60:F8:FF:41:4E:FE:FF:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.236.195.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203950
                  209945
                  210027

    Signature Algorithm: sha256WithRSAEncryption
         11:d2:5e:b4:7f:8b:45:77:a7:07:1e:ca:43:16:be:6a:83:1e:
         a6:4d:5e:38:ff:7e:1f:91:d7:ca:d0:b6:8c:a4:ed:ec:ac:7e:
         30:bc:7f:75:b2:4e:02:e2:3f:fc:06:98:4f:b7:8b:78:7c:c7:
         da:0a:5e:b7:61:b4:74:06:74:7b:ac:a6:88:43:db:eb:bc:eb:
         6b:c8:2e:a5:82:85:5b:55:22:ed:44:0f:18:b3:87:ef:16:62:
         ae:9b:c7:a2:82:6a:ab:3c:44:46:6f:96:ba:08:de:cf:a6:f6:
         51:75:5e:fb:e2:06:13:e8:3b:dc:49:5b:57:69:ef:b5:2b:f1:
         04:f1:ff:64:2b:1a:ac:63:94:15:15:7e:56:1f:ee:5f:2e:dd:
         4e:7c:71:f7:24:4f:d4:98:ed:37:81:93:71:ea:df:5c:bc:2d:
         e1:0e:33:19:d0:93:fb:4c:19:5d:c3:45:b7:31:91:e0:b5:9b:
         a4:ef:e2:18:d6:b0:de:c7:c3:7a:e4:ed:07:c3:ff:94:32:94:
         a7:d3:2f:6b:1a:b7:56:a4:c2:56:1a:de:d7:92:6d:26:e9:fb:
         24:cc:e3:53:a8:fb:d8:4b:68:0c:c0:0d:59:a5:c0:9f:39:c7:
         81:73:9b:a0:2d:c4:8d:1e:2e:21:3a:f1:fd:15:11:29:98:ff:
         4f:c5:46:5a
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAYTs7zjV50Wl2svviHDc3AaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMjA3MTQxMzMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWU2OTllMjU2ZWMzYmU5NDcyNjcxOWI2MGY4ZmY0MTRlZmVmZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnplXvKQ1r6ER0Si96t2dDyYGp02q
TTKWUjY5KHZ21yjgJiNxq7Ej1ZIL9wbDo2oEpaAs8D+zsKbIhlGdHdE/V9GRjzm6
VJRhYyuZpLoMZIk260qw7hHD/Rt8M1gSzOcZt0v7Nuob2eMWrHIbzj0X2KH4w+a0
mIQArmeUirYhhlExE8BNovMeWLHzXeoOj2TJ4EIg0FScPJTlDoveKoa0MMmvY2lb
1fas55wnEy/i/oO0nrHHcqlQ3qDU+SoQTsUZcNK8+/caLbMx3pYRNEmmxovNxFKX
4MjFFyg8kNSbYcsUv7qHxEVWwKTpS1Xlm1Lc2T1aKIJDC+K7InTAtThw9wIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFBnmmeJW7DvpRyZxm2D4/0FO/v/pMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyL2ZjOWJl
Ni02MzUzLTQxZWEtODAzMi02OWFlNjA1YWE1YTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvZmM5YmU2
LTYzNTMtNDFlYS04MDMyLTY5YWU2MDVhYTVhNy8xL0dlYVo0bGJzTy1sSEpuR2JZ
UGpfUVU3LV8tay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+zDMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8C
AwMcrgIDAzQZAgMDNGswDQYJKoZIhvcNAQELBQADggEBABHSXrR/i0V3pwceykMW
vmqDHqZNXjj/fh+R18rQtoyk7eysfjC8f3WyTgLiP/wGmE+3i3h8x9oKXrdhtHQG
dHuspohD2+u862vILqWChVtVIu1EDxizh+8WYq6bx6KCaqs8REZvlroI3s+m9lF1
XvviBhPoO9xJW1dp77Ur8QTx/2QrGqxjlBUVflYf7l8u3U58cfckT9SY7TeBk3Hq
31y8LeEOMxnQk/tMGV3DRbcxkeC1m6Tv4hjWsN7Hw3rk7QfD/5QylKfTL2sat1ak
wlYa3teSbSbp+yTM41Oo+9hLaAzADVmlwJ85x4Fzm6AtxI0eLiE68f0VESmY/0/F
Rlo=
-----END CERTIFICATE-----