Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pl5hWRhXBz17h2anNMm1ZqqrPpU.cer
File:                     pl5hWRhXBz17h2anNMm1ZqqrPpU.cer (raw, json)
Hash identifier:          chlEHi0zbRAI4qrcc/n8M46Ji+FyQJmbTIeorgcrZC8=
Subject key identifier:   A6:5E:61:59:18:57:07:3D:7B:87:66:A7:34:C9:B5:66:AA:AB:3E:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A79ACF1D4C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/pl5hWRhXBz17h2anNMm1ZqqrPpU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 13:02:39 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 41070
                          IP: 37.220.80.0/21
                          IP: 46.19.64.0/21
                          IP: 81.200.144.0/20
                          IP: 94.198.216.0/21
                          IP: 185.166.196.0/22
                          IP: 2a00:cfc0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719856803148 (0xa79acf1d4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:02:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a65e61591857073d7b8766a734c9b566aaab3e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fc:c7:a2:69:cd:de:c2:e7:28:e4:81:6a:15:
                    99:6e:5b:32:ca:0d:fc:35:00:15:6e:c8:d3:85:69:
                    0e:6a:37:bc:63:fa:14:3c:49:58:e6:34:f8:89:91:
                    10:4c:3c:1e:88:77:fd:3d:d2:b8:9e:65:3e:03:fd:
                    d8:f8:bb:d9:06:bd:64:c5:da:5a:4d:a5:ff:07:44:
                    0c:6e:c2:ce:5b:3e:da:27:ca:16:6e:1f:9c:78:81:
                    ea:23:54:40:78:04:4a:20:84:01:9d:c8:61:f8:fe:
                    85:78:70:1d:74:97:5c:ce:3e:ce:c3:4a:ef:b5:06:
                    a2:69:68:2e:2f:0a:0a:46:e1:86:b3:ed:52:91:df:
                    7d:f1:ef:b8:68:ea:fe:43:83:2f:95:3e:7f:a2:2e:
                    10:5e:91:be:fa:7f:56:37:a7:5d:7b:f0:03:12:78:
                    ed:7e:8d:0a:79:c7:29:8f:2e:c9:db:6c:c4:fd:59:
                    59:e1:32:6b:e7:d4:1f:3d:0d:9e:56:45:fa:4d:1a:
                    0a:d0:00:2a:0a:51:c6:c1:71:31:13:2a:fd:94:ee:
                    43:ea:03:9e:3d:9a:ea:13:b2:df:db:d7:ee:3d:91:
                    34:18:85:cb:6d:59:3e:3d:74:f1:69:d5:28:04:54:
                    33:51:cb:fc:29:ee:96:7c:22:23:96:6c:85:32:57:
                    4f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5E:61:59:18:57:07:3D:7B:87:66:A7:34:C9:B5:66:AA:AB:3E:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/pl5hWRhXBz17h2anNMm1ZqqrPpU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.220.80.0/21
                  46.19.64.0/21
                  81.200.144.0/20
                  94.198.216.0/21
                  185.166.196.0/22
                IPv6:
                  2a00:cfc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41070

    Signature Algorithm: sha256WithRSAEncryption
         0b:1e:3a:d7:da:66:0b:2e:e4:42:97:b5:90:0e:d1:0a:f0:1b:
         6e:a7:ba:aa:11:ce:4d:f7:f3:22:e4:6d:fd:33:8f:f9:8a:11:
         4b:a0:58:a1:24:1c:1e:a5:e2:d2:4c:b4:74:84:f4:c1:16:ff:
         0d:f2:7f:1c:67:b5:79:c0:ef:5c:29:6e:00:9f:2f:1a:a7:2c:
         ea:09:ca:30:85:b0:3c:9a:9f:83:91:86:47:69:7d:af:93:ca:
         83:db:47:a0:eb:56:3f:ad:88:0f:93:9f:36:6d:92:9f:6d:1e:
         9e:c0:69:95:12:2d:0c:69:f7:6a:1c:31:97:0e:45:41:8c:12:
         f5:43:a2:27:ae:fa:29:15:7c:b9:a5:97:53:75:d2:25:57:81:
         5c:33:b3:5d:95:b4:82:c7:a5:6a:1d:2f:d3:cd:43:20:03:b3:
         91:fd:1b:d9:a7:4b:1e:18:c3:dc:36:d5:4e:61:11:95:24:15:
         ce:6a:62:d5:e6:c6:34:fd:96:d7:1f:35:5c:7e:09:e5:86:33:
         87:57:f5:36:fc:90:2d:f1:0d:20:fc:33:ae:31:7e:22:9b:6e:
         60:d1:7a:a3:f0:d6:ac:5c:f3:5a:27:d6:e4:4a:8d:d9:ff:48:
         0b:7d:d9:8c:e8:11:c5:cb:d8:71:77:d5:36:76:6e:47:bc:35:
         a0:19:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:13 2023 by rpki-client on console-ams.rpki-client.org