Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yEUAv50FTS82mVDi5x6_IPohWgk.cer
File:                     yEUAv50FTS82mVDi5x6_IPohWgk.cer (raw, json)
Hash identifier:          KPmO8JHhmT6asxTW6qPwEoAFH3/vdcUCe3cGMNtyFFM=
Subject key identifier:   C8:45:00:BF:9D:05:4D:2F:36:99:50:E2:E7:1E:BF:20:FA:21:5A:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A0CB02E6B5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/0bcc46-fa82-48ab-910e-f2dbf3bc8b8b/1/yEUAv50FTS82mVDi5x6_IPohWgk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/0bcc46-fa82-48ab-910e-f2dbf3bc8b8b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:01:39 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 34413
                          IP: 195.8.100.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690600732341 (0xa0cb02e6b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:01:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c84500bf9d054d2f369950e2e71ebf20fa215a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:20:1a:a1:12:c2:45:e2:a6:1e:7e:5f:71:
                    8e:e8:ef:64:59:f4:3d:a4:d5:f4:13:39:b0:f9:b6:
                    b7:3d:40:05:44:a8:b5:bf:e0:b3:8c:bc:15:fc:b8:
                    25:3d:ba:53:c9:e5:88:b8:1f:15:5c:07:1d:1b:de:
                    51:46:8a:fd:96:1d:a6:7f:c2:9c:7c:48:82:d4:90:
                    9e:7f:cb:7b:c9:eb:4a:0d:23:92:44:38:de:7b:5e:
                    ea:a2:06:5f:3c:ff:fa:5b:95:22:52:2b:9b:0e:7b:
                    7c:f4:13:22:c0:48:03:52:f3:2c:68:67:eb:97:0c:
                    bb:cd:50:51:3a:c1:a7:d9:73:17:41:1e:58:07:c4:
                    71:9c:d2:01:3d:d3:20:20:19:56:44:8e:a6:99:fd:
                    f1:a4:72:9d:ee:40:72:21:36:85:47:b4:ef:41:10:
                    fa:9e:ec:fa:23:53:84:90:c7:c9:f7:99:e8:b3:ee:
                    37:55:36:c4:e7:29:d6:45:22:50:ab:8c:fe:30:ae:
                    88:69:7f:8c:75:bd:5b:e1:98:1c:db:a3:c7:3f:87:
                    11:8f:71:84:45:da:55:c5:c8:5e:9c:97:6e:b5:41:
                    8b:90:84:f5:67:3b:18:6d:6d:88:75:3b:af:c0:eb:
                    5a:9b:78:a4:3d:04:da:ca:b2:38:af:72:2d:31:a9:
                    98:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:45:00:BF:9D:05:4D:2F:36:99:50:E2:E7:1E:BF:20:FA:21:5A:09
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0bcc46-fa82-48ab-910e-f2dbf3bc8b8b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0bcc46-fa82-48ab-910e-f2dbf3bc8b8b/1/yEUAv50FTS82mVDi5x6_IPohWgk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.8.100.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34413

    Signature Algorithm: sha256WithRSAEncryption
         18:91:5d:eb:78:40:b1:d1:f5:93:99:27:81:2b:1e:48:63:4e:
         3e:c2:b5:49:18:fa:ad:7c:86:10:dd:eb:65:18:b7:4e:55:ef:
         3a:25:4e:a8:d7:84:cd:67:64:04:1d:06:74:0c:2d:fd:09:58:
         f0:09:6c:b1:c1:d7:4b:7c:a9:15:c4:df:73:06:a3:ee:0e:f1:
         fb:b7:41:9f:53:81:4d:ca:c9:fb:9c:a9:b7:cb:57:42:33:7b:
         26:57:ea:83:02:08:32:75:2d:5f:33:e2:b4:6f:08:62:01:ee:
         6f:b0:ae:24:0d:3a:30:25:37:7a:ea:d7:2e:fd:96:ae:45:0a:
         a1:cb:a1:65:b1:89:cd:0c:0a:d3:48:72:99:98:60:61:7c:72:
         f1:c2:a3:2c:47:e9:84:1d:95:57:16:e2:5f:3a:8b:4c:95:45:
         78:b3:5d:56:5c:da:9e:a1:e0:0a:ea:2f:32:3f:92:c8:b6:7d:
         34:ff:0a:ba:de:31:5f:bf:ac:63:af:ef:79:56:a0:df:54:8f:
         0d:44:ea:27:75:24:9a:62:a8:b8:d7:77:f0:56:f1:b0:2e:f8:
         82:96:ba:6b:e7:5d:60:71:aa:8d:d1:a5:86:f0:30:77:11:35:
         d5:eb:10:ee:82:4f:67:c6:26:fb:a0:87:f2:a0:f2:a7:89:e5:
         5b:e3:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----