Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/my-QDJQ_WFat0KDsadnobwBdpvM.cer
File:                     my-QDJQ_WFat0KDsadnobwBdpvM.cer (raw, json)
Hash identifier:          6UUFTx1Tzn9IxCuBqEa2ft6JwPImKwDKQeu2P5TmzKw=
Subject key identifier:   9B:2F:90:0C:94:3F:58:56:AD:D0:A0:EC:69:D9:E8:6F:00:5D:A6:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01821FDF6EE08E046C5B2AE6A2393A87A25C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/my-QDJQ_WFat0KDsadnobwBdpvM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 21 Jul 2022 08:28:32 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 51961

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1f:df:6e:e0:8e:04:6c:5b:2a:e6:a2:39:3a:87:a2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 21 08:28:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b2f900c943f5856add0a0ec69d9e86f005da6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:00:a1:8f:db:65:f5:10:b3:15:47:cb:8d:
                    3a:74:c0:e5:8e:1f:10:87:29:d1:4b:22:9e:dd:b5:
                    10:c1:a7:a9:49:3d:c1:2a:d9:25:24:dd:8a:5e:3a:
                    a5:49:bc:84:6a:73:8a:06:70:8c:de:8c:22:7e:6b:
                    18:5b:87:b3:e2:bf:23:45:44:34:5c:de:80:51:c4:
                    0f:5e:b8:9d:48:d3:79:e4:ef:62:66:e9:c7:78:f9:
                    b4:30:5d:74:02:c8:9c:ca:14:6b:85:0b:aa:8e:d7:
                    5c:94:87:42:24:25:c9:df:34:5e:cd:63:fa:8d:34:
                    c2:d2:68:e9:87:3f:8e:64:0d:9d:be:19:20:09:d1:
                    b9:2d:31:c9:f3:5f:b3:a7:22:17:da:47:9d:16:06:
                    c4:64:ff:c2:19:d5:43:bd:ab:f3:cc:38:a9:63:7e:
                    f5:50:55:c7:5e:e5:d8:99:93:9f:78:bd:b7:f8:83:
                    8e:9d:c5:5d:96:0a:90:30:18:36:1f:dc:9c:86:58:
                    45:9c:a6:cd:e4:7f:fd:4b:6d:d2:f3:9d:47:2c:8e:
                    5c:26:5f:dc:96:b3:67:a1:a1:14:6b:f6:13:b7:85:
                    28:79:ad:61:2e:a5:6c:84:33:79:75:b2:d8:bd:1e:
                    7a:67:63:9f:32:85:0d:92:cf:ad:62:c6:c2:12:04:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2F:90:0C:94:3F:58:56:AD:D0:A0:EC:69:D9:E8:6F:00:5D:A6:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/my-QDJQ_WFat0KDsadnobwBdpvM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51961

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:d7:64:6a:74:3a:13:30:0e:b3:15:8a:62:69:fa:29:fd:
         c3:16:3b:9a:86:55:57:70:70:61:fe:8a:c8:a7:3e:7c:fc:6a:
         e8:1a:38:03:5c:39:b3:a2:82:bf:b9:cb:22:60:80:2c:87:12:
         e0:39:c3:c9:19:14:4f:58:e6:72:bc:b1:f5:f7:90:75:a2:cd:
         c3:9d:1c:1c:32:46:e6:ce:c3:70:df:a3:58:9d:0d:83:00:82:
         3e:6c:21:6c:63:5f:3a:4e:5a:65:5f:13:d7:46:ed:1e:e2:65:
         97:12:ce:0f:da:a9:88:a5:9b:8f:0e:61:1a:81:99:3b:9a:5a:
         db:62:cb:a2:62:91:57:45:43:45:86:34:0f:e8:93:e9:9b:5f:
         42:5f:68:f1:af:74:f8:f7:df:21:ce:6e:8c:1e:c3:2a:a9:0f:
         18:15:73:3a:77:17:66:bc:f3:59:be:43:ab:65:65:cd:0a:89:
         32:aa:14:a3:cd:cf:93:8f:08:28:9f:9a:b0:42:8e:32:4b:bd:
         1f:5d:38:14:5c:03:55:5b:e5:04:3f:0d:f5:f6:dd:17:03:48:
         6d:70:7b:e1:3a:fa:dd:d0:0d:5e:da:90:db:25:06:cc:c7:f3:
         60:b4:9d:33:13:00:be:ce:0c:a0:b1:36:e7:5b:68:39:6c:96:
         d3:c2:60:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:26 2024 by rpki-client on console-ams.rpki-client.org