Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TROA6IxkowA0eN31QULSrFYWPpM.cer
File:                     TROA6IxkowA0eN31QULSrFYWPpM.cer (raw, json)
Hash identifier:          WfW5o1IG2ykLXmchOVlywS7p4f6/+s7L1vIK3IuhPg0=
Subject key identifier:   4D:13:80:E8:8C:64:A3:00:34:78:DD:F5:41:42:D2:AC:56:16:3E:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AE1BF2BA45
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/TROA6IxkowA0eN31QULSrFYWPpM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 03 Mar 2022 12:34:33 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 62332
                          IP: 185.39.68.0/22
                          IP: 185.42.240.0/22
                          IP: 185.86.212.0/22
                          IP: 185.120.84.0/22
                          IP: 2a04:7cc0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747793201733 (0xae1bf2ba45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  3 12:34:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d1380e88c64a3003478ddf54142d2ac56163e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:87:c5:31:4f:ad:ed:f9:ef:ac:57:74:4b:
                    74:b2:89:62:f5:e2:d9:4f:66:87:71:b8:52:30:f5:
                    25:16:ff:b7:29:a6:1b:f6:eb:5e:8d:48:a4:c2:41:
                    19:1f:df:b0:59:9f:43:ca:72:d1:69:61:aa:23:24:
                    99:c2:a4:79:0d:a2:f0:48:7b:78:54:32:20:05:31:
                    3a:2d:60:b2:63:f4:fd:b8:59:53:e5:df:d7:9b:c7:
                    b5:0f:9d:e9:93:64:6d:52:87:85:73:9a:4b:e6:82:
                    2e:8d:df:62:9f:88:6f:ab:d2:4f:02:8e:64:87:01:
                    e0:31:64:84:92:60:60:0d:96:97:91:ff:37:53:ef:
                    88:22:71:f9:71:92:7c:18:f3:58:cb:e4:c4:4d:ee:
                    53:64:ea:c3:47:dd:ba:51:ef:06:ea:aa:f7:b9:93:
                    b3:99:b5:da:ec:f9:84:1a:b7:df:42:c2:43:76:c6:
                    b9:ca:f7:ad:61:af:9f:23:a0:77:74:37:7e:4d:e4:
                    b0:dd:06:4e:99:d7:93:25:3a:1f:f6:d1:9e:1a:ad:
                    d2:74:05:d4:4c:0a:de:c5:39:85:76:ab:b4:8d:97:
                    88:91:00:a8:40:76:f8:8f:05:95:ea:1e:1e:cf:52:
                    db:f3:a7:6e:24:4d:81:ad:d5:f7:7d:03:e2:0e:90:
                    33:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:13:80:E8:8C:64:A3:00:34:78:DD:F5:41:42:D2:AC:56:16:3E:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/TROA6IxkowA0eN31QULSrFYWPpM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.39.68.0/22
                  185.42.240.0/22
                  185.86.212.0/22
                  185.120.84.0/22
                IPv6:
                  2a04:7cc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62332

    Signature Algorithm: sha256WithRSAEncryption
         ae:0f:4b:46:49:b1:3b:20:fc:0b:57:a9:e6:46:e1:4c:3b:6b:
         60:02:7f:7c:f1:d6:0f:04:d0:b5:72:1a:41:ce:7d:8a:31:ec:
         1f:4a:0a:24:3c:bb:a8:b8:3b:1d:85:9d:09:69:ab:f6:3a:25:
         c3:97:0f:28:07:b1:a3:0c:06:53:48:91:c2:ea:79:2d:60:d4:
         d0:3c:4a:e5:85:96:ae:c2:45:5d:7c:23:cc:c6:76:1d:b1:71:
         72:db:2d:12:bc:84:48:bc:04:bf:07:08:08:e7:3f:b5:9d:61:
         90:29:ac:8a:98:56:c3:cc:41:86:71:b4:53:10:9d:13:03:5f:
         77:38:11:a2:cf:f0:c8:34:81:43:8b:f1:bf:52:cf:b4:c6:6a:
         4b:60:14:0b:72:a1:a8:1b:03:ba:f3:fe:65:12:29:78:27:67:
         4c:4d:1b:81:e0:cc:c8:c2:9c:bf:88:06:ec:9b:7a:12:10:c9:
         e0:cb:87:ac:55:1c:e1:53:e3:e3:a9:25:ab:30:c3:72:8a:57:
         ad:79:a0:ba:c9:d7:da:f1:70:82:52:50:90:82:37:7c:76:83:
         25:7e:a8:50:82:d2:97:78:eb:74:f1:c0:90:52:56:f6:ff:5e:
         d2:c0:0e:e2:99:f9:81:a8:8e:df:9b:a2:5b:c2:b3:04:39:88:
         1d:c1:c9:89
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIGAK4b8rpFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MzAzMTIzNDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0ZDEzODBlODhj
NjRhMzAwMzQ3OGRkZjU0MTQyZDJhYzU2MTYzZTkzMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAxuSHxTFPre3576xXdEt0soli9eLZT2aHcbhSMPUlFv+3
KaYb9utejUikwkEZH9+wWZ9DynLRaWGqIySZwqR5DaLwSHt4VDIgBTE6LWCyY/T9
uFlT5d/Xm8e1D53pk2RtUoeFc5pL5oIujd9in4hvq9JPAo5khwHgMWSEkmBgDZaX
kf83U++IInH5cZJ8GPNYy+TETe5TZOrDR926Ue8G6qr3uZOzmbXa7PmEGrffQsJD
dsa5yvetYa+fI6B3dDd+TeSw3QZOmdeTJTof9tGeGq3SdAXUTArexTmFdqu0jZeI
kQCoQHb4jwWV6h4ez1Lb86duJE2BrdX3fQPiDpAzqwIDAQABo4ICwTCCAr0wHQYD
VR0OBBYEFE0TgOiMZKMANHjd9UFC0qxWFj6TMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzQwYWU1ZS05ZjllLTQwNTYt
OWY1Zi02NzhkMjM2YWJiNzUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvNDBhZTVlLTlmOWUtNDA1Ni05
ZjVmLTY3OGQyMzZhYmI3NS8xL1RST0E2SXhrb3dBMGVOMzFRVUxTckZZV1BwTS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAe
BAIAATAYAwQCuSdEAwQCuSrwAwQCuVbUAwQCuXhUMA0EAgACMAcDBQMqBHzAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDzfDANBgkqhkiG9w0BAQsFAAOCAQEArg9L
RkmxOyD8C1ep5kbhTDtrYAJ/fPHWDwTQtXIaQc59ijHsH0oKJDy7qLg7HYWdCWmr
9jolw5cPKAexowwGU0iRwup5LWDU0DxK5YWWrsJFXXwjzMZ2HbFxctstEryESLwE
vwcICOc/tZ1hkCmsiphWw8xBhnG0UxCdEwNfdzgRos/wyDSBQ4vxv1LPtMZqS2AU
C3KhqBsDuvP+ZRIpeCdnTE0bgeDMyMKcv4gG7Jt6EhDJ4MuHrFUc4VPj46klqzDD
copXrXmgusnX2vFwglJQkII3fHaDJX6oUILSl3jrdPHAkFJW9v9e0sAO4pn5gaiO
35uiW8KzBDmIHcHJiQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:13 2024 by rpki-client on console-ams.rpki-client.org