Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/atvUqFey-UUjwLFIXMSAixqncUM.cer
File:                     atvUqFey-UUjwLFIXMSAixqncUM.cer (raw, json)
Hash identifier:          x4e9cPn7bs4OOvAOSzbnRyCO/dsafKv4RGs8JSaOhcU=
Subject key identifier:   6A:DB:D4:A8:57:B2:F9:45:23:C0:B1:48:5C:C4:80:8B:1A:A7:71:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A7CA432589
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/atvUqFey-UUjwLFIXMSAixqncUM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 13:05:21 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 5.133.120.0/22
                          IP: 45.90.196.0/22
                          IP: 85.202.192.0/22
                          IP: 91.188.220.0/22
                          IP: 91.245.224.0/22
                          IP: 92.119.160.0/22
                          IP: 109.236.52.0/22
                          IP: 193.32.188.0/22
                          IP: 193.47.44.0/22
                          IP: 193.160.216.0/22
                          IP: 193.168.136.0/22
                          IP: 193.201.114.0/23
                          IP: 193.201.126.0/23
                          IP: 195.216.152.0/22
                          IP: 213.232.68.0/22
                          IP: 217.197.172.0/22
                          IP: 2a09:1080::/29
                          IP: 2a09:4d80::/29
                          IP: 2a09:6780::/29
                          IP: 2a09:6800::/29
                          IP: 2a09:7e00::/29
                          IP: 2a09:9300::/29
                          IP: 2a09:ba40::/29
                          IP: 2a0b:9480::/29
                          IP: 2a0d:3040::/29
                          IP: 2a0d:48c0::/29
                          IP: 2a0d:7340::/29
                          IP: 2a0d:be40::/29
                          IP: 2a0d:e440::/29
                          IP: 2a0e:9c0::/29
                          IP: 2a0f:e180::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720652936585 (0xa7ca432589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:05:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6adbd4a857b2f94523c0b1485cc4808b1aa77143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:d3:2d:e1:3f:5e:1f:fb:63:32:90:bc:d7:da:
                    5a:8f:97:8d:cd:86:d5:ae:6d:c4:72:a2:fc:bb:3e:
                    5b:7d:2e:35:5d:d4:a8:f6:d2:53:fc:91:78:67:1b:
                    c7:e9:ca:70:1f:7d:ce:82:64:0b:52:6c:21:c5:d1:
                    7b:45:25:19:c6:af:a2:7a:b1:ca:5a:e4:5c:a4:2f:
                    c8:84:e0:9e:e5:6c:6b:02:8e:8c:8a:a3:9c:32:03:
                    62:2c:ee:fa:db:a8:68:51:ad:64:7e:08:a7:b8:c7:
                    4e:1b:20:63:84:88:95:af:54:03:17:d9:04:26:e8:
                    01:2e:2e:5b:09:da:35:ec:6a:97:7f:69:d1:d4:7e:
                    4c:0f:7d:b7:43:b5:33:85:a7:e1:3b:81:31:4d:b1:
                    d7:35:17:0c:e3:f1:31:3a:b9:cd:3f:4f:ed:c6:22:
                    d8:b8:08:a8:2b:9c:d0:c0:f7:19:8c:a8:4e:0e:4b:
                    4c:9d:d9:4d:df:b0:08:78:bb:d5:2f:6c:e1:d9:45:
                    cf:db:32:f8:7a:8a:ac:3f:5d:1d:11:18:be:f3:3e:
                    78:d5:22:04:ba:44:a3:d2:9a:f7:3b:ba:e4:77:e2:
                    e3:e6:f4:6d:57:cd:1a:6c:ec:1e:1e:0a:97:d3:c9:
                    b9:f0:0d:fb:74:5c:b2:cf:c3:59:f7:52:e7:c7:3b:
                    f8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DB:D4:A8:57:B2:F9:45:23:C0:B1:48:5C:C4:80:8B:1A:A7:71:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/atvUqFey-UUjwLFIXMSAixqncUM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.133.120.0/22
                  45.90.196.0/22
                  85.202.192.0/22
                  91.188.220.0/22
                  91.245.224.0/22
                  92.119.160.0/22
                  109.236.52.0/22
                  193.32.188.0/22
                  193.47.44.0/22
                  193.160.216.0/22
                  193.168.136.0/22
                  193.201.114.0/23
                  193.201.126.0/23
                  195.216.152.0/22
                  213.232.68.0/22
                  217.197.172.0/22
                IPv6:
                  2a09:1080::/29
                  2a09:4d80::/29
                  2a09:6780::/29
                  2a09:6800::/29
                  2a09:7e00::/29
                  2a09:9300::/29
                  2a09:ba40::/29
                  2a0b:9480::/29
                  2a0d:3040::/29
                  2a0d:48c0::/29
                  2a0d:7340::/29
                  2a0d:be40::/29
                  2a0d:e440::/29
                  2a0e:9c0::/29
                  2a0f:e180::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:99:c7:02:6a:a7:2d:f3:15:8e:e0:fa:8e:4c:bb:ad:86:06:
         58:9a:7f:5d:4e:71:0a:8a:83:3a:a5:b2:5b:f6:79:ee:a9:29:
         c9:47:82:eb:c8:30:20:a5:19:d3:58:c5:74:d6:9f:c8:95:51:
         6b:d6:d2:fe:9e:ee:29:c1:41:93:74:d1:ad:7b:ea:45:15:14:
         ff:eb:d3:20:ea:dc:9b:cd:99:7c:17:04:3c:b8:c9:d7:9d:95:
         c3:f9:b9:29:e1:76:26:17:b0:28:f3:c0:d8:a2:2d:62:18:39:
         37:3d:aa:86:8d:c6:6e:7a:2c:0f:66:c4:b1:80:bd:49:04:a8:
         74:31:e1:9c:d3:0d:43:be:62:e3:fb:a9:b1:0c:d1:ad:6a:ee:
         fa:fc:ae:9c:7e:5c:de:a3:c2:cc:36:8a:d6:ee:da:39:2a:66:
         58:77:91:3a:5c:78:57:dc:40:86:87:c8:f3:46:68:a3:af:9c:
         2e:28:03:38:f5:a6:7f:35:23:55:3b:7e:36:db:9d:d6:bf:b6:
         84:09:f2:98:6b:c8:f0:19:b5:e2:28:89:72:dd:7f:29:be:04:
         7b:98:cc:bc:7c:d7:fd:77:46:62:8d:76:dc:01:8a:af:71:40:
         24:d5:9c:a0:e0:71:37:19:67:19:c2:bb:87:0b:dc:2f:e7:65:
         b9:93:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:40 2024 by rpki-client on console-ams.rpki-client.org