Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OOqIC-SJbm6sF1SWdGPLy7Z1074.cer
File:                     OOqIC-SJbm6sF1SWdGPLy7Z1074.cer (raw, json)
Hash identifier:          o+eGESi0NcbLghSmOp8625a3BzBUI7frilHIefC2tnE=
Subject key identifier:   38:EA:88:0B:E4:89:6E:6E:AC:17:54:96:74:63:CB:CB:B6:75:D3:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       99F5B69E54
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/8f8274-a593-43e0-8e27-ea936516c7b5/1/OOqIC-SJbm6sF1SWdGPLy7Z1074.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/8f8274-a593-43e0-8e27-ea936516c7b5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 01:50:39 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 185.155.144.0/22
                          IP: 2a0b:2480::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661252382292 (0x99f5b69e54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:50:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=38ea880be4896e6eac1754967463cbcbb675d3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:55:fc:1d:4d:86:ad:cc:d4:80:52:0d:6a:
                    29:6f:b5:ff:9c:35:6f:39:8e:c4:20:21:df:a3:77:
                    b6:76:68:4d:77:a9:a5:a3:81:2b:9e:e8:48:a3:b1:
                    a8:65:0b:74:e5:d4:37:8d:70:b0:29:64:c0:4b:b5:
                    25:4e:56:e4:a6:12:8d:9d:ea:6a:c3:e4:7a:83:5d:
                    61:f0:41:a7:e1:02:19:52:84:04:1a:c9:35:fb:7d:
                    91:ed:b6:af:12:fa:6b:21:2c:dd:2d:41:3f:36:be:
                    77:41:a6:7c:83:16:77:3d:6c:01:de:ae:5d:4b:89:
                    a8:b1:da:44:2c:91:f6:3b:ef:ea:a5:b5:9c:6d:14:
                    6a:37:7b:a9:cc:9a:ab:e4:24:39:5d:17:90:a5:4c:
                    4e:66:04:9e:47:97:f4:13:1c:d6:05:cd:de:13:e8:
                    d5:e6:70:7b:9f:5e:21:23:fc:0e:b2:e1:a1:77:e1:
                    36:7b:f8:2f:99:84:be:71:1c:13:7d:74:33:eb:ea:
                    71:a1:cd:24:8a:a1:f0:52:f9:64:06:8d:75:fc:e2:
                    93:72:fa:9b:25:1e:5c:b5:34:38:d5:f8:26:f5:3b:
                    63:31:11:bc:b1:12:8a:15:67:cc:2f:ba:61:07:a0:
                    a4:a8:3c:fd:bd:e0:19:6b:ee:5a:02:11:ad:25:d3:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EA:88:0B:E4:89:6E:6E:AC:17:54:96:74:63:CB:CB:B6:75:D3:BE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f8274-a593-43e0-8e27-ea936516c7b5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f8274-a593-43e0-8e27-ea936516c7b5/1/OOqIC-SJbm6sF1SWdGPLy7Z1074.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.144.0/22
                IPv6:
                  2a0b:2480::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:be:fd:44:7d:b3:9f:ce:1c:bc:f9:8e:ac:cf:78:d7:c8:57:
         7b:96:cf:29:1f:cf:6f:4b:09:c2:0e:ed:1c:8c:58:56:2d:73:
         e5:a8:4c:57:3f:e1:88:84:2a:51:be:0a:3d:da:e3:e4:f1:1b:
         42:e9:42:5e:9a:2f:81:4e:ed:08:1c:fa:29:ee:40:15:38:38:
         b1:3c:ab:ca:2b:01:45:b2:3f:0d:fd:1d:35:92:3a:b1:a5:96:
         20:89:82:f3:b9:ae:97:6a:e4:37:4a:af:df:d5:53:1d:4c:a7:
         6d:fd:7b:ad:62:dd:a7:4f:91:bf:cf:98:2e:6b:22:8c:1f:31:
         4b:b2:c9:7a:9d:97:00:0a:2c:31:73:d9:62:88:5e:b0:b3:ba:
         5c:c7:a7:61:e8:b1:d4:40:6d:e3:e7:95:72:88:c5:be:94:0f:
         4e:7e:61:cc:2f:76:c5:43:c0:56:e5:ec:68:ff:2a:43:79:a1:
         47:7e:a3:4f:2a:e4:6f:e2:d9:d4:21:19:2f:72:ec:cf:4d:e9:
         04:df:23:ac:18:46:46:ad:32:02:c4:c7:40:1e:3d:6b:18:a6:
         41:53:eb:52:b7:4b:33:2d:60:93:6f:8e:52:c4:e4:98:89:92:
         b0:50:f2:9b:d5:0f:3a:a9:5f:e2:74:65:3e:da:56:f7:28:a9:
         ff:94:30:cf
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAJn1tp5UMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDE1MDM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzOGVhODgwYmU0
ODk2ZTZlYWMxNzU0OTY3NDYzY2JjYmI2NzVkM2JlMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAuFZV/B1Nhq3M1IBSDWopb7X/nDVvOY7EICHfo3e2dmhN
d6mlo4ErnuhIo7GoZQt05dQ3jXCwKWTAS7UlTlbkphKNnepqw+R6g11h8EGn4QIZ
UoQEGsk1+32R7bavEvprISzdLUE/Nr53QaZ8gxZ3PWwB3q5dS4mosdpELJH2O+/q
pbWcbRRqN3upzJqr5CQ5XReQpUxOZgSeR5f0ExzWBc3eE+jV5nB7n14hI/wOsuGh
d+E2e/gvmYS+cRwTfXQz6+pxoc0kiqHwUvlkBo11/OKTcvqbJR5ctTQ41fgm9Ttj
MRG8sRKKFWfML7phB6CkqDz9veAZa+5aAhGtJdPdxwIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFDjqiAvkiW5urBdUlnRjy8u2ddO+MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzhmODI3NC1hNTkzLTQzZTAt
OGUyNy1lYTkzNjUxNmM3YjUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvOGY4Mjc0LWE1OTMtNDNlMC04
ZTI3LWVhOTM2NTE2YzdiNS8xL09PcUlDLVNKYm02c0YxU1dkR1BMeTdaMTA3NC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCuZuQMA0EAgACMAcDBQAqCySAMA0GCSqGSIb3DQEBCwUAA4IBAQAb
vv1EfbOfzhy8+Y6sz3jXyFd7ls8pH89vSwnCDu0cjFhWLXPlqExXP+GIhCpRvgo9
2uPk8RtC6UJemi+BTu0IHPop7kAVODixPKvKKwFFsj8N/R01kjqxpZYgiYLzua6X
auQ3Sq/f1VMdTKdt/XutYt2nT5G/z5guayKMHzFLssl6nZcACiwxc9liiF6ws7pc
x6dh6LHUQG3j55VyiMW+lA9OfmHML3bFQ8BW5exo/ypDeaFHfqNPKuRv4tnUIRkv
cuzPTekE3yOsGEZGrTICxMdAHj1rGKZBU+tSt0szLWCTb45SxOSYiZKwUPKb1Q86
qV/idGU+2lb3KKn/lDDP
-----END CERTIFICATE-----