Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eLx8zBUWV2lPXSeu4TFwS_H7ibI.cer
File:                     eLx8zBUWV2lPXSeu4TFwS_H7ibI.cer (raw, json)
Hash identifier:          ce3uIR5hwf6/z58P9xW2r2av+fY3CM+BNuhVRUw4s44=
Subject key identifier:   78:BC:7C:CC:15:16:57:69:4F:5D:27:AE:E1:31:70:4B:F1:FB:89:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AF0D560F7F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/0830e8-6601-4718-9a1d-5e533905175f/1/eLx8zBUWV2lPXSeu4TFwS_H7ibI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/0830e8-6601-4718-9a1d-5e533905175f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 24 Mar 2022 11:33:56 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 205888
                          IP: 185.202.188.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751843020671 (0xaf0d560f7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 24 11:33:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78bc7ccc151657694f5d27aee131704bf1fb89b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:76:fd:11:b6:ac:d8:ad:51:de:88:f1:99:
                    52:7e:af:13:1c:9e:dc:c2:af:d1:a0:09:d8:fc:d4:
                    ef:6a:79:31:39:a5:dc:65:9a:e5:69:7d:6b:0e:57:
                    0f:dc:28:92:c7:e3:21:4e:78:3e:1a:c2:81:5e:a0:
                    03:2d:7b:dd:a8:d2:5a:1a:2a:4e:60:59:15:00:e2:
                    12:d5:e1:b8:ff:85:12:71:d0:76:bc:05:2a:1e:a8:
                    a7:3e:e0:1e:73:4d:6b:50:94:15:d8:c3:1b:9e:e2:
                    bf:b4:3a:af:da:05:63:d3:eb:1d:5e:33:41:d6:f7:
                    41:e7:98:1b:55:b3:52:80:5c:ad:7e:26:03:de:b8:
                    d5:ee:bf:d5:09:1c:e9:d3:c1:b6:7c:6c:a7:66:4b:
                    91:33:3f:18:3e:12:49:33:d4:82:cb:5b:f7:3f:e1:
                    c0:43:d0:eb:86:ba:e6:f4:05:94:c5:2b:d1:c2:1d:
                    0a:b1:f1:09:b8:7e:b6:de:44:78:20:79:c4:77:13:
                    62:8f:b7:c5:59:fd:e0:7b:00:6c:3c:cf:5a:12:96:
                    e1:4d:b5:2c:ad:9c:c2:ea:06:40:e7:11:c2:dd:8c:
                    16:0a:09:b3:e4:d0:d5:9c:e2:54:e4:64:5c:2c:de:
                    af:11:d0:45:8e:28:c3:a8:28:d5:15:e6:cc:da:0e:
                    7d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BC:7C:CC:15:16:57:69:4F:5D:27:AE:E1:31:70:4B:F1:FB:89:B2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0830e8-6601-4718-9a1d-5e533905175f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0830e8-6601-4718-9a1d-5e533905175f/1/eLx8zBUWV2lPXSeu4TFwS_H7ibI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.188.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205888

    Signature Algorithm: sha256WithRSAEncryption
         99:6e:96:70:29:5f:91:c0:03:60:96:1c:bf:32:ab:6a:a3:87:
         88:3d:6c:3c:d8:b1:b4:55:9e:06:29:67:92:a2:c1:8f:71:6b:
         2f:a0:64:bf:6e:43:ec:da:3f:3c:d6:8f:65:13:d3:12:4d:de:
         34:8e:b1:54:02:8c:36:e1:4a:09:f8:1c:1d:53:7d:37:f6:1a:
         46:d7:2d:1e:73:0b:2d:d1:86:54:76:34:ae:53:8d:7a:bf:1c:
         d4:9b:72:5b:e0:a5:ef:e7:20:6e:e4:a3:cb:68:37:1c:e2:79:
         0f:36:90:3c:a3:4d:c9:df:65:f3:d5:1d:ab:6d:00:c9:19:e2:
         59:12:8c:b8:ac:9f:85:a8:c9:ef:54:d2:31:60:e7:eb:37:0f:
         b8:88:f2:8b:23:5f:e3:d3:0a:4b:c1:ed:69:b8:e4:00:19:62:
         a3:33:c9:fa:a2:6e:d6:9e:49:d6:e7:ad:1e:a3:75:6d:1b:12:
         5e:dd:e9:8a:22:0f:b1:8b:4d:76:71:96:05:e6:55:94:4e:a5:
         63:f2:59:16:25:c7:25:ea:ad:90:56:2f:4d:b2:0a:9a:93:9a:
         f4:b1:82:34:e6:a0:2e:99:f1:f7:e3:3b:17:5d:be:7e:72:7d:
         c9:ab:dd:6f:4b:2d:b0:bd:59:49:93:49:a0:7d:19:25:90:95:
         f1:d5:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:14 2024 by rpki-client on console-fra.rpki-client.org