Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BeIG_xhfUZnu6MaSKlOYDr49Kug.cer
File:                     BeIG_xhfUZnu6MaSKlOYDr49Kug.cer (raw, json)
Hash identifier:          uToeXKHqg6YCT/35nTGOdsN2eCh965x95LxlD4h9ilw=
Subject key identifier:   05:E2:06:FF:18:5F:51:99:EE:E8:C6:92:2A:53:98:0E:BE:3D:2A:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01835B6F553CF7AB920B7C2C43BC4BCBA6D5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/72/8fdc05-1296-45b5-876c-eb44803ffd15/1/BeIG_xhfUZnu6MaSKlOYDr49Kug.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/72/8fdc05-1296-45b5-876c-eb44803ffd15/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 20 Sep 2022 15:06:06 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 205958
                          IP: 2a0a:ba40::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5b:6f:55:3c:f7:ab:92:0b:7c:2c:43:bc:4b:cb:a6:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 20 15:06:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05e206ff185f5199eee8c6922a53980ebe3d2ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:83:87:1c:77:f4:c1:b1:79:d6:43:e1:19:
                    50:5c:67:58:5a:b6:fa:5d:30:91:89:41:d0:e8:be:
                    d4:6c:4a:f0:68:ba:ad:1d:07:f2:aa:d0:84:90:4a:
                    35:92:d1:78:00:46:3a:81:dd:71:d9:aa:f6:be:e2:
                    f4:9f:ea:ed:4a:f0:fd:e9:35:ca:1d:83:1c:6f:64:
                    89:3c:88:8d:03:d6:ec:ef:4a:c6:43:c8:7b:9c:b3:
                    f7:78:b5:1f:a8:fb:ac:72:cd:f1:4a:38:9c:2f:ff:
                    8c:3f:9e:c2:e7:8d:7f:96:b4:54:75:a2:7e:7a:f0:
                    18:c5:1e:31:77:25:fd:8b:e0:72:31:5f:44:a5:32:
                    4b:ab:a2:f1:ca:eb:dd:3f:02:48:4c:7f:4a:8e:40:
                    44:2a:9d:3d:15:f6:1e:72:46:42:66:3c:25:c5:b3:
                    4d:dc:fe:31:85:37:9c:69:b6:ec:91:fb:1c:14:f8:
                    6f:76:dd:a5:4b:c3:e8:21:84:73:10:42:5a:c7:1c:
                    16:c2:d2:13:56:31:3d:d3:21:e4:ad:c4:33:8a:70:
                    8f:1c:9c:38:b3:bb:72:1b:ea:35:d0:56:e8:8f:3a:
                    db:11:b2:b0:2b:e6:03:a6:dd:51:78:db:84:b5:6d:
                    3e:2c:ab:ad:7b:00:38:05:2d:a4:86:b1:48:78:5c:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E2:06:FF:18:5F:51:99:EE:E8:C6:92:2A:53:98:0E:BE:3D:2A:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8fdc05-1296-45b5-876c-eb44803ffd15/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8fdc05-1296-45b5-876c-eb44803ffd15/1/BeIG_xhfUZnu6MaSKlOYDr49Kug.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:ba40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205958

    Signature Algorithm: sha256WithRSAEncryption
         3d:65:68:3d:b9:ae:3d:47:60:3e:fc:49:d6:e5:ed:49:a7:a8:
         7c:15:5c:10:90:11:8a:b1:73:89:da:84:8c:79:2e:b8:ed:17:
         ee:c5:33:71:9d:fe:50:ca:a6:a5:e2:7e:8a:f4:9c:a9:41:11:
         05:24:b0:99:00:de:76:91:bd:47:4a:2c:f1:f6:86:fa:d1:83:
         75:1f:89:2c:48:f1:cc:17:bc:60:52:83:c3:ca:4a:51:18:49:
         29:1b:b6:4f:43:1d:39:d5:90:67:2d:bb:5e:5e:ef:ea:98:ab:
         50:08:19:93:af:03:d7:fd:6a:55:68:0a:3a:1a:3e:8a:8b:d9:
         48:dd:a9:9f:6c:dc:d4:9e:9b:25:1d:7a:fa:c8:ac:6e:4d:86:
         21:68:94:fb:d3:b0:b6:65:93:c6:3f:b1:31:04:f6:1b:45:40:
         b1:b2:1c:b2:c5:c4:e4:e1:63:00:a1:d9:2d:7b:bd:31:74:fa:
         57:07:fe:c1:05:24:a4:66:aa:44:99:f2:0d:db:5d:77:85:a8:
         8b:2c:d8:12:3f:01:c3:4e:7d:31:1e:9d:43:f9:eb:d7:9d:1e:
         64:ce:da:cd:e9:f9:7e:12:98:b5:8a:fe:f1:92:4d:98:3f:0c:
         09:79:cf:40:63:9b:4b:41:13:ec:1d:e6:59:dc:ea:93:22:a1:
         be:ed:08:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----