Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mu516kmdolzdtxfNi46m8DDpQ8g.cer
File:                     Mu516kmdolzdtxfNi46m8DDpQ8g.cer (raw, json)
Hash identifier:          D5Ptfe2SBlX5qmggU1OondP7ODXsQDYzqq15bkP3OXg=
Subject key identifier:   32:EE:75:EA:49:9D:A2:5C:DD:B7:17:CD:8B:8E:A6:F0:30:E9:43:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A988D32FAE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/e1548a-01fb-44d9-a4c3-010eaa33318c/1/Mu516kmdolzdtxfNi46m8DDpQ8g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/e1548a-01fb-44d9-a4c3-010eaa33318c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 14:58:20 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 200363
                          IP: 91.197.232.0/22
                          IP: 185.209.164.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728145014702 (0xa988d32fae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:58:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=32ee75ea499da25cddb717cd8b8ea6f030e943c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:80:fe:5a:61:50:b9:13:c3:66:04:5f:bf:40:
                    86:f7:6e:05:07:25:ae:7b:5e:39:59:fd:6e:d9:0f:
                    18:d3:36:14:74:42:a8:72:50:3b:57:6c:70:08:6b:
                    73:05:5c:60:95:bf:03:f1:e3:f8:40:57:f4:5c:93:
                    80:ba:5d:79:d4:7d:ac:6a:0b:9c:e4:c7:73:26:4b:
                    9c:90:bd:72:cc:18:48:6d:24:f3:ff:6d:7a:8e:d3:
                    56:92:13:25:da:77:85:ab:2a:91:d2:4b:39:86:3b:
                    6f:b0:63:60:a5:ee:aa:a1:67:9b:eb:5a:b5:ee:9f:
                    72:b4:44:83:c8:6c:e2:83:28:ff:e3:ad:10:86:51:
                    7c:e8:1a:48:02:a0:20:8a:bc:8a:b9:39:58:44:91:
                    b6:21:57:e4:f1:06:50:e7:3a:e2:6a:79:e9:11:65:
                    1b:57:f7:e0:81:d0:ea:82:d9:2b:2d:df:ff:8f:10:
                    44:db:18:c9:7a:c1:f3:1c:39:de:46:3a:75:a3:a0:
                    11:f7:dc:37:66:c3:b9:c3:f6:07:2b:ca:ef:dd:c0:
                    22:ca:6c:78:0d:e5:38:80:4a:87:20:68:39:2b:d9:
                    cc:f9:bf:36:b1:53:47:51:a6:eb:89:10:4b:a1:ec:
                    18:7e:01:b8:76:b4:00:d8:bd:4c:5b:c8:7e:57:e2:
                    cf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EE:75:EA:49:9D:A2:5C:DD:B7:17:CD:8B:8E:A6:F0:30:E9:43:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1548a-01fb-44d9-a4c3-010eaa33318c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1548a-01fb-44d9-a4c3-010eaa33318c/1/Mu516kmdolzdtxfNi46m8DDpQ8g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.197.232.0/22
                  185.209.164.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200363

    Signature Algorithm: sha256WithRSAEncryption
         4d:05:d1:83:97:68:bb:bd:26:79:9b:c5:09:89:2b:35:c8:ed:
         17:9f:c0:3c:0f:ba:41:af:08:ea:e4:21:31:42:c2:90:57:78:
         a6:34:b2:5c:30:5d:cf:16:c5:02:3d:29:b0:a4:be:79:ae:54:
         dd:64:df:d7:a1:b9:39:6e:06:ce:47:31:8d:db:19:fa:52:c5:
         cd:2e:94:89:73:b1:bc:73:b5:cd:78:f3:c8:1a:1f:3a:46:df:
         7b:87:26:f1:c2:89:ec:76:38:94:3c:57:92:a8:1d:8d:07:75:
         db:45:7d:e4:43:b8:36:7e:8a:3f:c6:1a:a6:57:f3:92:45:4d:
         d4:84:68:17:0e:c7:c4:a2:7f:56:5c:a2:d2:9a:15:c6:8e:c1:
         5e:a3:93:00:ff:80:16:21:ad:93:55:06:ec:5c:ad:5d:b9:6e:
         7f:bc:03:3f:bf:4f:e4:e5:0c:a6:de:79:88:fd:8c:b0:f8:fb:
         ef:96:5a:b0:e0:27:85:00:7a:60:11:17:7e:62:dd:68:17:f8:
         88:78:ab:a6:99:ee:3d:52:49:e9:91:86:5a:26:0e:94:e3:7a:
         54:d7:af:eb:2c:7c:1f:bb:ab:4d:53:8f:4c:c7:0d:59:df:cb:
         76:22:43:79:d1:30:55:25:74:47:bd:2a:c6:7f:7c:f2:34:ef:
         65:65:77:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:01 2023 by rpki-client on console.sobornost.net