Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer
File:                     swv12Qhf5a_l4gHXwjbO-b6SNa8.cer (raw, json)
Hash identifier:          uZLlsidHD3Hw5O8Wc1Q1eF1H8AthwehVrQDAaSi5g8k=
Subject key identifier:   B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       994D7F3AF3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/swv12Qhf5a_l4gHXwjbO-b6SNa8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 00:55:31 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 42237
                          AS: 47508
                          IP: 45.154.204.0/22
                          IP: 91.236.116.0/24
                          IP: 185.217.0.0/22
                          IP: 185.246.128.0/22
                          IP: 193.105.134.0/24
                          IP: 2a0b:c040::/29
                          IP: 2a0d:8980::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658430180083 (0x994d7f3af3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:55:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:5d:d2:e1:ac:d8:ab:eb:d2:3f:bc:03:2b:
                    66:ef:ce:88:20:e7:43:97:63:e1:dd:56:f0:7a:e4:
                    36:a8:ff:25:e0:38:5d:3d:22:7a:71:40:95:c3:2c:
                    88:a3:47:78:58:61:96:41:1c:f1:99:20:9e:64:a5:
                    3a:c9:08:ee:68:ff:63:41:2b:98:bd:32:fe:80:ab:
                    2a:77:ae:c3:42:10:df:0d:66:d4:90:69:74:b7:06:
                    89:8b:a6:f9:84:4c:3c:f7:61:6f:f8:9f:bc:d0:2c:
                    68:a2:b9:69:76:9b:01:48:4a:4c:3a:a2:62:99:11:
                    57:35:d3:f5:df:3e:c3:7c:91:55:4c:93:85:73:49:
                    96:71:a4:9a:37:ce:92:f4:68:ba:0a:87:f3:17:3e:
                    3c:0f:35:54:40:c1:35:dc:3b:64:16:8d:18:a5:f8:
                    83:85:a3:b1:17:f8:26:a9:96:51:22:05:33:0b:f5:
                    af:14:06:c1:d1:bb:74:3e:92:0c:bb:3a:39:f0:51:
                    d8:61:69:c0:f0:94:f6:21:33:36:2d:2c:47:95:02:
                    de:29:bb:a9:17:1c:9b:d9:8b:54:c3:2c:34:49:ab:
                    aa:a9:ff:2b:38:1a:09:b2:4d:6b:3f:a0:48:d2:d0:
                    8c:57:c9:3c:25:c7:79:65:22:e3:6d:33:81:fb:a4:
                    d8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/swv12Qhf5a_l4gHXwjbO-b6SNa8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.204.0/22
                  91.236.116.0/24
                  185.217.0.0/22
                  185.246.128.0/22
                  193.105.134.0/24
                IPv6:
                  2a0b:c040::/29
                  2a0d:8980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42237
                  47508

    Signature Algorithm: sha256WithRSAEncryption
         54:87:bb:3b:e2:99:f3:26:75:d4:0c:40:a1:bd:d8:c5:a7:97:
         0e:47:7e:a5:3c:dd:76:ca:09:d3:19:f7:f3:1c:40:4d:13:fe:
         92:6f:38:81:1e:c7:9a:00:ea:a7:c0:7b:4a:ac:b2:f7:44:4a:
         40:c0:9d:f5:46:1e:12:04:dd:0e:72:27:17:b7:26:22:b1:5b:
         6c:a2:68:40:ce:65:c1:3a:b5:c9:a3:a6:1b:76:d0:7c:c2:3e:
         d9:05:12:76:95:e7:e1:6e:1e:aa:9e:96:ab:70:76:d6:7b:79:
         a1:8c:3c:d6:5f:e0:f2:61:ed:e2:8d:c2:aa:33:b6:9e:6b:35:
         aa:d8:e6:4a:a1:74:3d:48:76:dd:7d:8e:98:cd:38:2c:06:9d:
         5b:4f:cc:21:3f:e3:64:59:ed:17:d0:2f:7c:64:f7:97:13:2a:
         fa:db:a9:1d:f3:6e:3c:c3:94:4c:63:f6:ad:24:5a:04:32:1c:
         6b:77:bc:8c:77:45:8d:cf:d8:1b:36:a0:e9:22:1e:50:4d:f9:
         83:4b:14:61:30:b8:14:03:66:ec:cb:a4:dc:94:e1:1a:8c:a4:
         5b:e1:7c:cf:ae:dc:af:08:9c:d8:c5:5c:2d:33:7e:70:90:3a:
         78:5b:a9:f9:61:07:86:e5:da:43:14:fc:94:fc:f4:1b:36:71:
         c2:3d:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:58 2024 by rpki-client on console-ams.rpki-client.org