Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
File:                     gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer (raw, json)
Hash identifier:          DL8obyVksVb7g6aNuOgTCyotDSxxlAv+bx1uaT0jz0Q=
Subject key identifier:   82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AED0A3B6FB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 18 Mar 2022 10:46:24 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2.57.176.0/22
                          IP: 45.135.248.0/22
                          IP: 45.140.236.0/22
                          IP: 45.142.236.0/22
                          IP: 45.146.80.0/22
                          IP: 45.148.36.0/22
                          IP: 45.149.100.0/22
                          IP: 45.149.184.0/22
                          IP: 45.151.44.0/22
                          IP: 45.152.240.0/22
                          IP: 45.153.4.0/22
                          IP: 45.154.104.0/22
                          IP: 45.155.16.0/22
                          IP: 45.157.16.0/22
                          IP: 45.158.8.0/22
                          IP: 45.158.168.0/22
                          IP: 91.198.66.0/24
                          IP: 91.198.77.0/24
                          IP: 91.198.115.0/24
                          IP: 91.198.123.0/24
                          IP: 91.199.163.0/24
                          IP: 91.199.166.0/24
                          IP: 91.199.168.0/24
                          IP: 91.199.172.0/24
                          IP: 91.206.2.0/24
                          IP: 141.98.156.0/22
                          IP: 147.78.120.0/22
                          IP: 152.89.248.0/22
                          IP: 176.105.224.0/22
                          IP: 185.155.220.0/22
                          IP: 192.166.82.0/23
                          IP: 192.166.114.0/23
                          IP: 193.0.234.0/23
                          IP: 193.5.10.0/23
                          IP: 193.25.207.0/24
                          IP: 193.29.96.0/22
                          IP: 193.111.116.0/23
                          IP: 193.111.124.0/23
                          IP: 193.142.4.0/24
                          IP: 193.142.6.0/24
                          IP: 193.142.18.0/24
                          IP: 193.142.22.0/24
                          IP: 193.151.180.0/22
                          IP: 193.161.206.0/24
                          IP: 193.161.245.0/24
                          IP: 193.164.1.0/24
                          IP: 193.164.10.0/24
                          IP: 193.176.54.0/23
                          IP: 193.176.128.0/23
                          IP: 194.5.146.0 -- 194.5.149.255
                          IP: 194.104.156.0/24
                          IP: 194.104.158.0/24
                          IP: 194.105.5.0/24
                          IP: 194.105.21.0/24
                          IP: 194.113.222.0/23
                          IP: 194.113.226.0/23
                          IP: 194.147.4.0/22
                          IP: 195.20.98.0/23
                          IP: 195.20.104.0/23
                          IP: 195.206.230.0/23
                          IP: 195.206.234.0/23
                          IP: 212.80.192.0/22
                          IP: 2a03:8b80::/29
                          IP: 2a03:f100::/29
                          IP: 2a04:7a80::/29
                          IP: 2a04:f3c0::/29
                          IP: 2a04:f700::/29
                          IP: 2a05:5040::/29
                          IP: 2a05:b600::/29
                          IP: 2a05:c580::/29
                          IP: 2a06:7680::/29
                          IP: 2a06:99c0::/29
                          IP: 2a07:6a40::/29
                          IP: 2a07:fc40::/29
                          IP: 2a09:40::/29
                          IP: 2a09:c0::/29
                          IP: 2a09:1c0::/29
                          IP: 2a09:240::/29
                          IP: 2a09:2240::/29
                          IP: 2a09:22c0::/29
                          IP: 2a09:fe80::/29
                          IP: 2a0a:5700::/29
                          IP: 2a0b:2e40::/29
                          IP: 2a0b:ca00::/29
                          IP: 2a0c:1c00::/29
                          IP: 2a0c:2cc0::/29
                          IP: 2a0c:43c0::/29
                          IP: 2a0c:4e00::/29
                          IP: 2a10:8740::/29
                          IP: 2a10:e180::/29
                          IP: 2a10:e280::/29
                          IP: 2a10:ec80::/29
                          IP: 2a10:ed80::/29
                          IP: 2a10:ee80::/29
                          IP: 2a10:ef80::/29
                          IP: 2a10:f080::/29
                          IP: 2a10:f100::/29
                          IP: 2a10:f180::/29
                          IP: 2a10:f280::/29
                          IP: 2a10:fd80::/29
                          IP: 2a10:fe80::/29
                          IP: 2a10:ff80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750824699643 (0xaed0a3b6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 18 10:46:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:4e:bb:ed:7e:a0:99:6f:c2:81:38:a5:6f:
                    76:02:8f:12:f5:ed:3c:cc:5f:7b:78:07:8f:5e:2c:
                    7c:5e:ec:2a:3d:38:bc:58:a6:90:5b:2d:15:ce:d3:
                    60:f1:c7:d7:b9:17:a9:7e:3d:a8:4e:7a:05:ff:09:
                    12:0e:e2:d5:ef:c8:48:3a:2e:47:4f:9a:bc:63:f9:
                    3b:7b:3f:a2:93:7a:c3:8e:b6:ac:99:b3:3e:09:7f:
                    9d:b4:58:5e:e4:9a:86:b4:7b:f9:2c:7b:67:59:e2:
                    1f:07:23:b5:3f:d2:28:c6:74:ef:87:d5:2b:d6:bd:
                    fb:b8:81:ff:86:9d:c5:f0:2a:50:3c:33:b0:37:e2:
                    e5:bb:a3:a6:60:62:21:0f:05:bd:2b:3f:03:22:32:
                    5f:74:b2:8e:5d:49:5d:3c:8d:85:37:ba:03:d9:ac:
                    60:38:2d:f0:01:ef:4e:17:c8:ae:ce:e4:34:b8:2d:
                    fc:64:99:c1:c9:ff:7e:2b:e0:e0:29:af:98:01:5b:
                    39:86:8e:e9:31:d7:c7:4f:83:84:6b:6f:2b:69:77:
                    d9:3d:a4:ad:81:23:6e:e5:c7:39:7a:81:6b:17:4e:
                    63:3a:64:e3:f6:8a:8c:51:8d:ca:f6:0e:9a:2b:ef:
                    29:c0:66:40:10:79:ed:57:f3:eb:8b:cb:e2:fa:07:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.176.0/22
                  45.135.248.0/22
                  45.140.236.0/22
                  45.142.236.0/22
                  45.146.80.0/22
                  45.148.36.0/22
                  45.149.100.0/22
                  45.149.184.0/22
                  45.151.44.0/22
                  45.152.240.0/22
                  45.153.4.0/22
                  45.154.104.0/22
                  45.155.16.0/22
                  45.157.16.0/22
                  45.158.8.0/22
                  45.158.168.0/22
                  91.198.66.0/24
                  91.198.77.0/24
                  91.198.115.0/24
                  91.198.123.0/24
                  91.199.163.0/24
                  91.199.166.0/24
                  91.199.168.0/24
                  91.199.172.0/24
                  91.206.2.0/24
                  141.98.156.0/22
                  147.78.120.0/22
                  152.89.248.0/22
                  176.105.224.0/22
                  185.155.220.0/22
                  192.166.82.0/23
                  192.166.114.0/23
                  193.0.234.0/23
                  193.5.10.0/23
                  193.25.207.0/24
                  193.29.96.0/22
                  193.111.116.0/23
                  193.111.124.0/23
                  193.142.4.0/24
                  193.142.6.0/24
                  193.142.18.0/24
                  193.142.22.0/24
                  193.151.180.0/22
                  193.161.206.0/24
                  193.161.245.0/24
                  193.164.1.0/24
                  193.164.10.0/24
                  193.176.54.0/23
                  193.176.128.0/23
                  194.5.146.0-194.5.149.255
                  194.104.156.0/24
                  194.104.158.0/24
                  194.105.5.0/24
                  194.105.21.0/24
                  194.113.222.0/23
                  194.113.226.0/23
                  194.147.4.0/22
                  195.20.98.0/23
                  195.20.104.0/23
                  195.206.230.0/23
                  195.206.234.0/23
                  212.80.192.0/22
                IPv6:
                  2a03:8b80::/29
                  2a03:f100::/29
                  2a04:7a80::/29
                  2a04:f3c0::/29
                  2a04:f700::/29
                  2a05:5040::/29
                  2a05:b600::/29
                  2a05:c580::/29
                  2a06:7680::/29
                  2a06:99c0::/29
                  2a07:6a40::/29
                  2a07:fc40::/29
                  2a09:40::/29
                  2a09:c0::/29
                  2a09:1c0::/29
                  2a09:240::/29
                  2a09:2240::/29
                  2a09:22c0::/29
                  2a09:fe80::/29
                  2a0a:5700::/29
                  2a0b:2e40::/29
                  2a0b:ca00::/29
                  2a0c:1c00::/29
                  2a0c:2cc0::/29
                  2a0c:43c0::/29
                  2a0c:4e00::/29
                  2a10:8740::/29
                  2a10:e180::/29
                  2a10:e280::/29
                  2a10:ec80::/29
                  2a10:ed80::/29
                  2a10:ee80::/29
                  2a10:ef80::/29
                  2a10:f080::/29
                  2a10:f100::/29
                  2a10:f180::/29
                  2a10:f280::/29
                  2a10:fd80::/29
                  2a10:fe80::/29
                  2a10:ff80::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:13:74:98:f1:27:7f:92:4d:22:76:61:f0:71:31:91:18:3d:
         61:4b:83:4d:fa:9e:df:d6:46:2c:6b:82:43:f7:7d:26:c1:de:
         ce:c0:9a:c6:6d:7d:1b:b3:da:fb:8e:64:60:b6:66:4c:7a:05:
         c7:4f:31:bc:77:ff:42:80:fb:17:f2:57:d3:a5:1b:b7:4d:a8:
         4b:90:4d:c4:87:2c:da:86:75:10:f9:b5:01:01:94:52:c6:d8:
         de:af:28:3d:fa:ea:d2:5a:7e:9c:68:9b:29:c3:22:1b:2c:17:
         de:99:16:13:ac:3c:f9:09:0d:f5:bc:89:57:b7:91:c4:3d:56:
         54:20:dd:0e:5f:ee:0d:99:57:a3:74:98:1c:ea:96:3a:e1:ca:
         73:e7:9b:1a:4d:f4:65:13:75:16:b8:bb:44:d9:ae:90:73:81:
         9b:a5:90:ec:df:83:01:73:22:a9:f6:4f:33:4c:e0:16:ab:fe:
         15:f3:ca:b7:bb:c8:e9:1e:b9:d0:69:df:71:48:4c:e8:11:b8:
         0d:5c:a3:41:e3:ac:38:5d:74:0e:c1:74:8f:52:d1:5a:b6:67:
         77:8f:05:e0:98:e8:9d:5f:da:a3:0d:2f:9a:32:da:b0:8d:e8:
         50:cb:33:6a:0e:39:03:85:0f:6c:e1:89:8d:ad:92:e5:d7:36:
         51:87:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:29 2024 by rpki-client on console-fra.rpki-client.org