Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LWQjAltXu5yu7J5WWk9wctEwdAQ.cer
File:                     LWQjAltXu5yu7J5WWk9wctEwdAQ.cer (raw, json)
Hash identifier:          rPBqV4eZOsvbFW/34G0La/AAujlns7xK98q2r29NvbY=
Subject key identifier:   2D:64:23:02:5B:57:BB:9C:AE:EC:9E:56:5A:4F:70:72:D1:30:74:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A27FF1FCF1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/7c64cd-def0-48ac-ab9e-e8347372ba6c/1/LWQjAltXu5yu7J5WWk9wctEwdAQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/7c64cd-def0-48ac-ab9e-e8347372ba6c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 08:55:21 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 194.11.230.0/23
                          IP: 194.11.234.0/23
                          IP: 2a0f:940::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697931267313 (0xa27ff1fcf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:55:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d6423025b57bb9caeec9e565a4f7072d1307404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:18:c0:7b:58:c3:d4:77:7f:60:6d:19:89:
                    26:16:13:14:8c:43:91:22:0e:ee:16:2b:f7:16:69:
                    49:f7:24:b1:d9:be:8d:a7:81:cc:3d:e4:cf:b3:59:
                    0a:c4:b5:8d:15:ed:d4:17:f4:9f:f6:dc:09:0b:42:
                    c3:4a:07:18:55:92:e0:20:83:65:fc:ef:5d:99:5d:
                    fa:05:eb:40:6c:33:98:87:b1:d6:76:ed:2e:1c:16:
                    a7:c3:41:62:d5:7e:87:d4:44:74:c0:01:68:23:9a:
                    3c:71:a6:68:3e:7a:87:ba:5d:cf:b1:7b:ee:96:f4:
                    96:3d:01:46:68:de:e4:e4:d7:f6:61:94:1a:0e:9d:
                    37:21:11:49:f2:45:b4:83:86:ce:ce:45:1a:61:52:
                    31:3d:b7:2f:e0:88:ea:08:6e:ab:bf:80:eb:25:8f:
                    22:a0:78:9e:79:61:a9:a7:1e:57:a3:be:37:94:c5:
                    ea:73:c2:20:67:68:bf:36:cf:44:ff:86:36:cd:2c:
                    4a:c5:03:65:41:d0:f1:f7:f2:a9:07:dc:ab:e4:5e:
                    ab:c4:31:1a:a5:9d:45:53:49:22:2a:88:be:84:8a:
                    52:88:95:aa:8a:64:2d:ea:ab:f7:36:d8:4e:cf:f2:
                    1d:75:65:18:20:97:e9:59:da:c0:b2:fb:45:53:cf:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:64:23:02:5B:57:BB:9C:AE:EC:9E:56:5A:4F:70:72:D1:30:74:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7c64cd-def0-48ac-ab9e-e8347372ba6c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7c64cd-def0-48ac-ab9e-e8347372ba6c/1/LWQjAltXu5yu7J5WWk9wctEwdAQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.11.230.0/23
                  194.11.234.0/23
                IPv6:
                  2a0f:940::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:a6:d7:e4:69:8a:ad:c1:20:dc:21:19:82:c4:6a:51:96:
         68:04:a2:bd:ed:f6:aa:39:50:70:cc:50:8b:64:b1:3a:24:5c:
         f9:32:18:a4:e3:35:e7:74:59:f6:b6:b8:6c:99:00:a9:07:7d:
         53:b8:85:af:fc:b3:10:47:07:39:18:0c:45:42:de:6e:ca:0d:
         2e:d4:1c:1d:06:22:4e:74:4c:16:d6:9d:67:8e:49:fe:d5:ea:
         14:29:49:4e:09:7c:d9:36:90:30:91:5d:f4:63:43:70:fb:08:
         8e:3a:e6:93:e2:b0:50:95:d4:d9:e4:7a:fa:9b:1b:d6:0c:2d:
         6b:29:bf:a9:68:61:05:77:e2:70:63:f3:85:6e:e0:68:c0:f2:
         26:07:a5:6c:24:55:55:3f:1d:01:d6:76:e5:1c:b2:26:38:a9:
         c8:7b:03:c6:11:2f:e9:3b:94:66:fe:5b:63:00:ab:59:62:01:
         3e:51:b6:c3:55:56:b4:d0:6a:4f:40:c2:7c:5c:ba:61:1c:52:
         b4:22:04:50:e6:81:22:64:27:35:e8:5a:3b:3e:e9:22:f0:92:
         55:89:a4:2f:0c:de:cf:8c:49:5f:6d:ea:0a:08:2a:5a:ce:d4:
         df:75:e0:64:1c:82:97:c3:8d:c5:3a:96:8b:c3:c5:fc:e9:fc:
         56:55:b5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:15:19 2025 by rpki-client