Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zlouW-zog41Px2Yr7fL8DnbLs2s.cer
File:                     zlouW-zog41Px2Yr7fL8DnbLs2s.cer (raw, json)
Hash identifier:          MI/yfDOvDae95JEiXsT+tN3d7u9lwSlr1hg/19/vMO8=
Subject key identifier:   CE:5A:2E:5B:EC:E8:83:8D:4F:C7:66:2B:ED:F2:FC:0E:76:CB:B3:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01852F987682F5385AAD0852A2FA304B3806
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a1/94a0d5-6244-44cc-99fe-56ced10fb25c/1/zlouW-zog41Px2Yr7fL8DnbLs2s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a1/94a0d5-6244-44cc-99fe-56ced10fb25c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 20 Dec 2022 12:53:19 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 212400
                          IP: 185.179.247.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2f:98:76:82:f5:38:5a:ad:08:52:a2:fa:30:4b:38:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 20 12:53:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ce5a2e5bece8838d4fc7662bedf2fc0e76cbb36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:f3:06:8c:79:a3:fe:cf:79:e4:cf:1c:60:
                    86:f0:19:a9:07:a8:70:37:8d:a1:ec:8d:a7:63:5f:
                    ef:c3:97:9e:b8:b3:74:b1:70:36:17:90:4a:bc:b5:
                    d5:0d:d8:69:3c:b6:85:a7:84:9a:34:a4:68:05:65:
                    eb:49:e6:88:39:dd:67:50:b3:bf:e5:d8:cf:c1:b9:
                    b4:cc:e4:51:18:c9:20:60:e0:2f:0f:47:dd:a2:fc:
                    4c:fd:ec:ab:84:1c:6d:ad:cf:39:da:a9:57:59:86:
                    9a:6c:cd:97:3e:3f:d6:7d:da:68:02:fa:5f:cf:85:
                    2d:0b:bd:88:0c:82:6d:89:4e:7c:3c:9e:24:3e:27:
                    cf:c4:da:70:3c:ec:53:ab:e8:32:9c:ab:fa:cf:16:
                    2a:ab:5d:81:6a:f4:ae:3b:4f:2b:f1:2d:9d:19:1e:
                    6e:4d:cc:6d:4e:8a:1a:48:01:1e:56:9e:24:66:9c:
                    7d:e8:b6:36:cf:09:15:d6:e5:bb:13:58:9f:81:2e:
                    74:f4:99:38:f5:ec:ca:86:81:f5:6a:e9:3b:b4:1f:
                    e0:7b:e9:55:47:48:1e:2d:f5:b2:2a:73:cb:11:86:
                    8d:70:73:b9:cb:51:a1:2a:de:98:e4:34:1c:24:87:
                    b8:0d:f5:c7:9b:a2:ae:a2:03:2b:41:16:f5:b3:d5:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5A:2E:5B:EC:E8:83:8D:4F:C7:66:2B:ED:F2:FC:0E:76:CB:B3:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/94a0d5-6244-44cc-99fe-56ced10fb25c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/94a0d5-6244-44cc-99fe-56ced10fb25c/1/zlouW-zog41Px2Yr7fL8DnbLs2s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.247.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212400

    Signature Algorithm: sha256WithRSAEncryption
         17:c1:67:2e:9d:21:08:0c:d0:3f:03:12:6f:db:9f:56:16:a6:
         87:e4:76:48:71:7c:cb:2c:d2:75:24:6a:de:38:77:a9:13:5d:
         59:a0:bd:aa:28:17:e0:d5:23:04:05:91:dd:8b:6d:9e:b9:87:
         3d:d8:42:3e:42:82:81:26:df:fd:0f:d4:93:87:6e:3a:37:b0:
         34:79:84:80:f9:da:84:5b:71:7d:a6:8b:9a:d3:7e:09:bd:a1:
         c6:e7:4a:f6:e2:68:a5:f4:21:60:b0:6e:37:cb:2c:f1:35:a1:
         d0:be:99:37:7c:7b:d4:9d:f8:84:d0:ab:47:d9:4a:be:78:23:
         0e:d0:f1:9c:36:7d:02:50:dc:18:d7:46:7f:09:fa:cf:ae:cd:
         ad:8e:1d:c5:17:43:97:e1:b5:93:5e:db:9e:b4:3e:60:45:63:
         cf:90:dc:3f:92:f4:18:a7:c3:ad:98:cd:eb:2e:4f:ec:c2:1b:
         84:81:1c:92:e7:86:da:e4:aa:c4:52:93:25:80:d4:70:9d:7d:
         bf:5e:df:ae:2a:f1:45:40:c1:37:91:49:1e:aa:2b:79:5e:aa:
         eb:04:5d:84:42:81:26:a4:95:90:60:45:91:55:db:a0:4d:34:
         f4:83:33:48:33:dd:17:d4:b6:95:a9:40:44:1f:85:3f:51:45:
         ae:d6:05:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:21 2024 by rpki-client on console-fra.rpki-client.org