Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/prhaBq_eNUU1odgrmFvieDLT35U.cer
File:                     prhaBq_eNUU1odgrmFvieDLT35U.cer (raw, json)
Hash identifier:          j/Rt0rcIY9e2CaXRM3eeIfqkUtQoPB+4TQHftMurEv8=
Subject key identifier:   A6:B8:5A:06:AF:DE:35:45:35:A1:D8:2B:98:5B:E2:78:32:D3:DF:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A05D358406
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/prhaBq_eNUU1odgrmFvieDLT35U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 06:57:15 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 39651
                          IP: 80.216.0.0/15
                          IP: 83.248.0.0/13
                          IP: 85.194.0.0/18
                          IP: 151.177.0.0/16
                          IP: 178.218.152.0/22
                          IP: 193.150.192.0/18
                          IP: 213.89.0.0/16
                          IP: 213.200.128.0/18
                          IP: 2a04:ae00::/26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688758555654 (0xa05d358406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:57:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a6b85a06afde354535a1d82b985be27832d3df95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:38:19:fb:d8:79:03:d8:21:dc:e6:1c:a5:
                    da:be:f6:19:83:f0:11:84:cb:a6:d9:22:f9:3b:d2:
                    8b:75:be:2e:a5:23:81:c7:fe:e4:ad:e3:7e:b7:c4:
                    d1:ae:87:41:cd:71:e2:fb:57:cb:6c:b0:87:5e:59:
                    d0:72:58:ce:1f:fb:0a:c8:13:7b:4e:88:db:4a:83:
                    38:de:b6:65:3e:1a:c9:76:a5:05:bf:83:e5:45:f3:
                    4d:1f:28:a8:9d:1d:66:6a:1f:32:78:c2:18:13:ec:
                    9d:65:92:b0:0c:01:9b:10:90:a1:e5:b2:a3:4e:3e:
                    50:e4:a2:db:60:49:cd:e1:2c:8c:8a:b4:ca:6a:55:
                    cc:5a:1a:90:0f:1a:30:43:03:57:10:2a:ed:bb:89:
                    c7:b2:55:f8:ba:7a:33:d6:53:52:57:e1:36:69:40:
                    06:e7:67:a0:d0:d5:03:f6:19:3c:8f:58:76:d1:62:
                    24:2a:9e:81:01:08:2e:0e:6d:a8:0a:e4:6c:a2:7c:
                    b4:39:fe:b4:c1:3d:47:23:57:6a:44:fe:9c:e7:14:
                    b5:4f:34:59:80:04:39:cc:12:e4:87:b0:96:56:4f:
                    be:e9:ce:83:8e:30:64:23:b8:bb:28:11:18:8f:42:
                    24:a8:cb:4c:d8:7f:1e:e6:31:1c:50:18:a2:19:7b:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B8:5A:06:AF:DE:35:45:35:A1:D8:2B:98:5B:E2:78:32:D3:DF:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/prhaBq_eNUU1odgrmFvieDLT35U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.216.0.0/15
                  83.248.0.0/13
                  85.194.0.0/18
                  151.177.0.0/16
                  178.218.152.0/22
                  193.150.192.0/18
                  213.89.0.0/16
                  213.200.128.0/18
                IPv6:
                  2a04:ae00::/26

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39651

    Signature Algorithm: sha256WithRSAEncryption
         0c:d3:7b:cf:60:e2:5d:d2:ec:d4:21:99:2c:f8:ea:3a:5c:d7:
         44:d1:35:19:8e:aa:f0:04:1d:82:d5:03:14:53:06:12:f0:fc:
         9e:30:31:ae:82:e2:fc:d9:ae:81:b3:8f:31:ac:33:d7:72:0e:
         ac:26:17:e8:fc:96:bb:6e:bb:eb:67:44:24:3e:80:db:01:d4:
         20:35:42:ae:31:64:60:d6:ba:6e:b9:5b:3e:4e:ce:8c:cf:78:
         3e:d8:a2:d3:74:30:80:70:d7:f7:11:2d:a1:54:66:6c:42:7b:
         eb:5a:05:f4:d4:0d:30:5d:2a:d5:13:7a:87:55:07:c3:c3:ac:
         b7:f9:e8:d8:9d:b3:44:98:c2:0e:84:94:ab:75:65:fb:ef:75:
         07:87:9b:f4:c7:a9:88:a6:2e:b2:09:62:a6:7f:6f:d5:b7:ae:
         30:78:2d:e4:31:a9:b0:bc:bc:5f:77:64:a6:87:03:6d:d8:34:
         c5:ff:04:55:4a:44:a7:29:23:f5:2c:71:b8:17:4f:e9:46:04:
         ba:b6:d7:cf:7b:9a:f4:0a:9d:31:20:d3:fc:7a:87:ca:00:6e:
         ec:a5:33:8a:ba:35:d6:ed:7e:1f:f7:a4:49:51:d8:4d:ae:5f:
         70:e2:56:45:8d:80:27:62:8d:11:ca:31:ef:26:70:29:de:d8:
         00:bf:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:06 2024 by rpki-client on console-ams.rpki-client.org