Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WS9YOvU6OhkqFL25q0FViF5cLWo.cer
File:                     WS9YOvU6OhkqFL25q0FViF5cLWo.cer (raw, json)
Hash identifier:          EJw0PRodhISUwo3B2zQA9bI3YPkT4LyO1xIfS2xMjTE=
Subject key identifier:   59:2F:58:3A:F5:3A:3A:19:2A:14:BD:B9:AB:41:55:88:5E:5C:2D:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185D6362B6294F96789116DF83234BED6DC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fe/a4d0de-9bd8-4f27-b93f-52f811af1636/1/WS9YOvU6OhkqFL25q0FViF5cLWo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fe/a4d0de-9bd8-4f27-b93f-52f811af1636/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 21 Jan 2023 21:22:32 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 200210
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:d6:36:2b:62:94:f9:67:89:11:6d:f8:32:34:be:d6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 21 21:22:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=592f583af53a3a192a14bdb9ab4155885e5c2d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:b0:d6:4f:f8:af:dc:3c:0b:83:7e:f4:b1:
                    a8:d7:5d:c3:2c:7a:1a:23:1b:d9:21:01:ab:63:3a:
                    79:f8:08:52:9b:8d:a6:04:4a:74:ed:a3:1b:2d:d0:
                    cf:63:9f:53:4c:ec:22:e0:61:3c:89:81:25:7a:60:
                    2e:be:d3:46:7d:81:73:ea:4a:8d:bd:37:73:71:d7:
                    49:d8:f4:c8:18:72:04:68:7a:7a:eb:30:f7:57:db:
                    84:45:21:54:64:7b:c0:af:0f:9d:38:15:f1:cd:1b:
                    46:11:e3:a8:04:3d:81:15:b0:50:86:71:b9:6b:3e:
                    21:24:e5:89:57:e2:4c:d2:71:15:e5:24:f2:d3:c6:
                    47:e2:2b:48:e1:15:26:05:ae:dd:fb:0f:b4:e4:a9:
                    75:fc:38:15:51:36:ca:4d:bd:ed:a5:39:67:90:33:
                    c6:b1:b3:53:fe:8b:d3:7d:80:5f:02:c6:0d:33:9a:
                    92:22:f7:fd:eb:69:22:ca:91:16:f6:88:37:b1:a5:
                    6b:56:58:fa:85:16:4a:ed:e2:2e:0d:83:8c:40:a0:
                    20:cb:be:5f:7e:c9:bb:d8:7f:e7:8e:af:08:01:2b:
                    93:f1:e9:7e:f2:ca:a0:22:ae:f6:b9:fb:78:53:7e:
                    20:0a:a9:81:08:e2:b9:af:32:51:cb:ce:a6:33:63:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2F:58:3A:F5:3A:3A:19:2A:14:BD:B9:AB:41:55:88:5E:5C:2D:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a4d0de-9bd8-4f27-b93f-52f811af1636/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a4d0de-9bd8-4f27-b93f-52f811af1636/1/WS9YOvU6OhkqFL25q0FViF5cLWo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200210

    Signature Algorithm: sha256WithRSAEncryption
         06:40:a9:86:eb:be:45:2a:bc:c5:14:1c:04:93:d5:a0:99:28:
         8b:65:f6:26:aa:97:e0:78:57:5e:a5:72:56:20:2b:a6:ad:6c:
         b6:09:2a:74:61:47:05:d0:77:32:eb:c4:99:6b:01:2b:f4:be:
         6d:c5:86:c5:02:8e:79:60:e2:27:08:fa:d6:bb:2f:25:32:c5:
         69:d9:5a:a2:e3:7c:e1:63:48:18:39:c2:75:15:44:13:ed:69:
         a9:73:08:b4:2c:27:39:b7:c4:36:13:73:4a:d3:c1:25:ca:d8:
         e0:6c:db:6d:c1:c2:00:26:e8:1d:5a:b5:a5:3b:28:c6:fa:0a:
         24:fc:4b:24:83:5e:07:e6:71:df:0f:1d:0d:bc:f7:78:38:52:
         d4:04:4d:5a:ce:ec:ae:05:2b:04:18:19:b8:74:97:44:a6:85:
         9d:06:22:20:5a:92:86:15:ec:4a:9f:9b:02:8b:b3:6e:85:8e:
         fb:dc:01:2e:73:cc:43:dc:fc:2a:f8:19:8f:6d:c7:e2:1b:bc:
         8c:c7:8a:bd:9d:fb:bb:14:cf:80:9e:5a:cf:a9:8d:97:47:6b:
         62:32:da:72:be:10:a4:7e:1b:97:0a:f6:1e:71:f9:fd:19:6d:
         17:10:0f:4c:2c:fa:45:94:af:b8:db:a8:7f:27:ad:eb:5f:7e:
         e1:14:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:32:47 2025 by rpki-client