Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x38CeA5EDAaeBl1Laakfdhdv-VQ.cer
File:                     x38CeA5EDAaeBl1Laakfdhdv-VQ.cer (raw, json)
Hash identifier:          nj7CcKEyWbuUh3j8ir6iaKUUNYzEOFDCDou5WpJ+Gu4=
Subject key identifier:   C7:7F:02:78:0E:44:0C:06:9E:06:5D:4B:69:A9:1F:76:17:6F:F9:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B3D59C8909
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/5ce320-f75c-4f06-9a58-f84e8e499e62/1/x38CeA5EDAaeBl1Laakfdhdv-VQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/5ce320-f75c-4f06-9a58-f84e8e499e62/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jul 2022 11:58:12 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 42073
                          IP: 194.102.202.0/24
                          IP: 194.169.233.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772382951689 (0xb3d59c8909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul  1 11:58:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c77f02780e440c069e065d4b69a91f76176ff954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:de:a4:9b:55:0c:d8:da:2d:61:66:e8:8a:
                    c6:f1:48:6d:8c:93:f8:55:1b:1c:3c:97:10:5a:42:
                    5c:76:ce:ec:81:be:f5:21:6b:95:3b:f3:9a:32:a4:
                    ce:4b:b5:c3:c9:f3:c1:d4:5d:3b:ac:40:c4:30:b3:
                    49:8a:70:cc:c0:ea:18:b5:c7:d9:49:0a:68:56:00:
                    11:ab:89:23:7c:c1:4c:3b:d0:23:eb:5f:f8:78:2d:
                    8d:79:b2:96:6a:79:42:e5:e4:3c:d8:33:5a:cb:f9:
                    5b:c1:37:07:08:71:aa:6a:4c:c6:d7:d6:3f:c6:6a:
                    fb:5b:fa:27:54:3c:55:7d:2f:24:9c:de:af:61:04:
                    87:db:0e:5a:d5:10:77:ee:ef:f5:58:97:1c:30:a7:
                    c9:fe:6f:e5:2f:d6:71:5e:d4:4b:f8:ec:c4:58:58:
                    89:b2:ff:10:1d:cb:be:e2:86:62:a1:e9:35:c2:f0:
                    8f:c8:77:9d:d5:73:04:44:02:7b:e6:b8:7f:35:f0:
                    ae:0b:e8:40:54:57:a1:e2:bd:51:1a:e3:c6:8e:82:
                    5f:1c:d5:a7:1d:a6:34:35:3d:b8:72:54:4a:90:1f:
                    1a:e6:89:2b:59:ed:c5:ea:45:c2:f9:2f:73:63:ca:
                    c2:8b:7c:85:68:3f:d3:3a:e8:23:71:76:b9:9c:6e:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7F:02:78:0E:44:0C:06:9E:06:5D:4B:69:A9:1F:76:17:6F:F9:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5ce320-f75c-4f06-9a58-f84e8e499e62/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5ce320-f75c-4f06-9a58-f84e8e499e62/1/x38CeA5EDAaeBl1Laakfdhdv-VQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.102.202.0/24
                  194.169.233.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42073

    Signature Algorithm: sha256WithRSAEncryption
         87:02:3b:b8:98:c9:9f:42:e6:b7:45:86:76:a6:f8:49:83:71:
         b5:90:42:8e:20:b8:cd:83:9a:7a:f0:8f:f7:6e:81:94:0a:b8:
         d6:50:c2:3f:57:ed:40:47:d0:78:b1:93:4f:e4:44:5e:f1:ff:
         a6:65:cd:4f:b9:61:c7:58:56:a4:f2:b1:5d:ec:5b:7a:10:65:
         2e:c4:93:40:99:d2:70:e5:c5:76:6a:cd:88:25:e9:17:09:28:
         a5:ea:be:f5:6a:c1:ca:84:28:2c:e4:e2:6e:86:e7:f1:70:af:
         2b:61:e3:9f:5a:5d:98:55:f4:ce:cd:60:4b:14:5d:ef:8c:2c:
         4b:34:25:6e:3c:b6:d1:e4:78:be:d5:3e:c8:f9:7e:e6:a1:a3:
         28:70:e8:f6:f0:63:0b:91:5f:8b:7b:80:ba:a6:d6:e8:59:1d:
         35:b7:c2:0a:19:a4:5e:34:95:37:32:38:2d:15:b8:cd:28:d9:
         2c:b7:47:88:74:ec:18:d9:37:1c:3b:92:58:3c:54:fc:34:16:
         da:d5:1f:a7:d3:f3:50:5b:81:ac:77:e5:aa:c5:76:fa:92:13:
         e9:c2:cc:88:54:7d:73:d4:16:63:58:29:97:f5:a4:71:e2:0d:
         e6:21:56:83:5c:eb:5d:2c:0b:bb:82:ad:4a:38:e8:82:c7:e5:
         bf:2b:54:c7
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIGALPVnIkJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NzAxMTE1ODEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNzdmMDI3ODBl
NDQwYzA2OWUwNjVkNGI2OWE5MWY3NjE3NmZmOTU0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwDPepJtVDNjaLWFm6IrG8UhtjJP4VRscPJcQWkJcds7s
gb71IWuVO/OaMqTOS7XDyfPB1F07rEDEMLNJinDMwOoYtcfZSQpoVgARq4kjfMFM
O9Aj61/4eC2NebKWanlC5eQ82DNay/lbwTcHCHGqakzG19Y/xmr7W/onVDxVfS8k
nN6vYQSH2w5a1RB37u/1WJccMKfJ/m/lL9ZxXtRL+OzEWFiJsv8QHcu+4oZioek1
wvCPyHed1XMERAJ75rh/NfCuC+hAVFeh4r1RGuPGjoJfHNWnHaY0NT24clRKkB8a
5okrWe3F6kXC+S9zY8rCi3yFaD/TOugjcXa5nG6OEQIDAQABo4ICpjCCAqIwHQYD
VR0OBBYEFMd/AngORAwGngZdS2mpH3YXb/lUMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzVjZTMyMC1mNzVjLTRmMDYt
OWE1OC1mODRlOGU0OTllNjIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvNWNlMzIwLWY3NWMtNGYwNi05
YTU4LWY4NGU4ZTQ5OWU2Mi8xL3gzOENlQTVFREFhZUJsMUxhYWtmZGhkdi1WUS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAwmbKAwQAwqnpMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCkWTAN
BgkqhkiG9w0BAQsFAAOCAQEAhwI7uJjJn0Lmt0WGdqb4SYNxtZBCjiC4zYOaevCP
926BlAq41lDCP1ftQEfQeLGTT+REXvH/pmXNT7lhx1hWpPKxXexbehBlLsSTQJnS
cOXFdmrNiCXpFwkopeq+9WrByoQoLOTibobn8XCvK2Hjn1pdmFX0zs1gSxRd74ws
SzQlbjy20eR4vtU+yPl+5qGjKHDo9vBjC5Ffi3uAuqbW6FkdNbfCChmkXjSVNzI4
LRW4zSjZLLdHiHTsGNk3HDuSWDxU/DQW2tUfp9PzUFuBrHflqsV2+pIT6cLMiFR9
c9QWY1gpl/WkceIN5iFWg1zrXSwLu4KtSjjogsflvytUxw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:56 2024 by rpki-client on console-fra.rpki-client.org