Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/EF426F94C58940B7071B544A524D3C9EA3456B00.cer
File:                     EF426F94C58940B7071B544A524D3C9EA3456B00.cer (raw, json)
Hash identifier:          jgyl1ra4iRurEbJx2W1Fvpr/PlD5q75/iUECfMaNxXU=
Subject key identifier:   EF:42:6F:94:C5:89:40:B7:07:1B:54:4A:52:4D:3C:9E:A3:45:6B:00
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       653B73DF3725C1B837AAAD47FA2D6394DE844721
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/5/EF426F94C58940B7071B544A524D3C9EA3456B00.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/5
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 09 Apr 2023 01:22:43 +0000
Certificate not after:    Sun 07 Apr 2024 01:27:43 +0000
Subordinate resources:    IP: 216.146.24.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3b:73:df:37:25:c1:b8:37:aa:ad:47:fa:2d:63:94:de:84:47:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Apr  9 01:22:43 2023 GMT
            Not After : Apr  7 01:27:43 2024 GMT
        Subject: CN=EF426F94C58940B7071B544A524D3C9EA3456B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:22:9f:3c:c9:f7:de:c8:52:85:df:54:d0:
                    98:99:8f:fc:12:89:74:91:11:e5:56:68:8a:8f:07:
                    77:ba:71:d2:93:ce:cc:03:c5:f4:0c:f6:51:d7:99:
                    fe:5a:f2:16:23:3b:b4:62:47:2f:72:ac:0f:92:90:
                    a8:b8:ce:48:42:8e:83:bf:8c:48:cf:4c:a4:dc:ca:
                    ae:e8:d0:87:8b:66:22:c1:a8:2b:61:01:58:c7:39:
                    1f:54:a8:4e:02:b4:3a:2a:70:d1:18:68:31:c9:5b:
                    f5:8b:f9:4b:07:31:32:41:a7:1c:62:f2:5e:05:b5:
                    e1:ae:76:07:cf:46:a7:95:0d:55:d8:a0:44:f9:a9:
                    7e:5f:28:9b:c7:32:7d:48:1d:52:a5:0f:c1:13:24:
                    5e:77:90:df:e1:97:68:3e:1f:c1:bc:5d:ec:4f:44:
                    df:33:09:82:6c:81:f0:48:51:b7:ed:fb:26:07:1c:
                    d7:3e:41:20:7e:0c:68:d8:57:0d:89:2f:4a:8a:68:
                    0a:4f:6c:fa:9a:5b:62:02:c8:f4:c2:23:de:71:27:
                    be:9f:5c:42:55:da:83:b0:bd:00:35:52:b4:ce:e6:
                    5c:25:88:97:1b:0c:74:61:a6:6c:3d:9a:59:97:99:
                    69:3b:19:78:00:40:15:af:8b:a9:a0:9f:ac:4e:2f:
                    e8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:42:6F:94:C5:89:40:B7:07:1B:54:4A:52:4D:3C:9E:A3:45:6B:00
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/5
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/5/EF426F94C58940B7071B544A524D3C9EA3456B00.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:0e:a9:8a:1d:f9:90:86:2c:30:2c:0c:d8:26:bf:8c:bc:01:
         cc:f2:ac:b3:3a:53:c8:d2:7d:5c:f4:4b:43:fe:0c:0e:0b:f0:
         63:f8:47:93:1b:b7:c1:2c:ca:0f:b0:e5:57:49:13:d6:3e:39:
         97:77:c4:6a:3e:11:03:bc:61:90:34:10:2d:05:c1:dc:eb:12:
         a5:4e:3c:76:37:62:b5:4e:38:4a:59:f3:8b:12:9f:04:12:09:
         65:b0:9f:cf:3d:a0:cc:d3:28:c8:9c:50:db:d5:6e:99:99:a6:
         3a:02:52:2a:4f:20:cc:42:54:b7:63:13:97:aa:f4:12:ba:38:
         e0:9c:f6:a5:5b:10:cd:eb:8f:65:68:52:a4:e3:bb:10:d9:1e:
         7a:f6:2a:9e:49:d3:8c:f2:3b:16:52:d4:5e:8f:9a:c7:5a:29:
         db:86:84:2d:7d:32:72:33:62:0d:a2:23:3d:3a:7c:6b:1c:1b:
         81:2b:a3:c0:a7:ad:64:49:a2:37:45:d6:fd:a1:96:ec:b7:cc:
         98:fe:dc:b5:da:f5:63:56:90:07:1b:7e:fc:d6:91:9e:1e:bc:
         9d:2b:37:8f:2b:c2:65:87:78:7b:a1:9f:39:fc:c1:c7:62:96:
         d4:cc:00:f3:32:50:33:20:86:cb:6c:fd:b1:5d:35:1c:19:ce:
         54:67:bc:9e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUZTtz3zclwbg3qq1H+i1jlN6ERyEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2JlYzYzNGIwN2Y1MGYzZTgwNDIzYTdjMTExYWU5MjEz
YjUwNmI3OGJmOTkyNGFkNDIwHhcNMjMwNDA5MDEyMjQzWhcNMjQwNDA3MDEyNzQz
WjAzMTEwLwYDVQQDEyhFRjQyNkY5NEM1ODk0MEI3MDcxQjU0NEE1MjREM0M5RUEz
NDU2QjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHwinzzJ997I
UoXfVNCYmY/8Eol0kRHlVmiKjwd3unHSk87MA8X0DPZR15n+WvIWIzu0YkcvcqwP
kpCouM5IQo6Dv4xIz0yk3Mqu6NCHi2YiwagrYQFYxzkfVKhOArQ6KnDRGGgxyVv1
i/lLBzEyQaccYvJeBbXhrnYHz0anlQ1V2KBE+al+XyibxzJ9SB1SpQ/BEyRed5Df
4ZdoPh/BvF3sT0TfMwmCbIHwSFG37fsmBxzXPkEgfgxo2FcNiS9KimgKT2z6mlti
Asj0wiPecSe+n1xCVdqDsL0ANVK0zuZcJYiXGwx0YaZsPZpZl5lpOxl4AEAVr4up
oJ+sTi/ouwIDAQABo4IDSTCCA0UwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
70JvlMWJQLcHG1RKUk08nqNFawAwHwYDVR0jBBgwFoAUa+wa7WUIuwdRGwGxd1UX
ktrrLJAwDgYDVR0PAQH/BAQDAgEGMG8GA1UdHwRoMGYwZKBioGCGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzIvNkJFQzFB
RUQ2NTA4QkIwNzUxMUIwMUIxNzc1NTE3OTJEQUVCMkM5MC5jcmwwgfMGCCsGAQUF
BwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9y
ZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0y
MTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1
L2MxMzAzNWNkLWM0NmQtNDIxYy1iOWUwLWU2ZDRkZDMzNmQyMS9jYmVjNjM0YjA3
ZjUwZjNlODA0MjNhN2MxMTFhZTkyMTNiNTA2Yjc4YmY5OTI0YWQ0Mi5jZXIwggE+
BggrBgEFBQcBCwSCATAwggEsMF4GCCsGAQUFBzAFhlJyc3luYzovL3JzeW5jLnBh
YXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzc1NzA0ZDQ4LTVhMTUtNDEyOC1h
ZjhkLWZjNzY5YzVjMjVhMS81MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5w
YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83NTcwNGQ0OC01YTE1LTQxMjgt
YWY4ZC1mYzc2OWM1YzI1YTEvNS9FRjQyNkY5NEM1ODk0MEI3MDcxQjU0NEE1MjRE
M0M5RUEzNDU2QjAwLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMu
cnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYkhgwDQYJKoZI
hvcNAQELBQADggEBAJsOqYod+ZCGLDAsDNgmv4y8AczyrLM6U8jSfVz0S0P+DA4L
8GP4R5Mbt8Esyg+w5VdJE9Y+OZd3xGo+EQO8YZA0EC0FwdzrEqVOPHY3YrVOOEpZ
84sSnwQSCWWwn889oMzTKMicUNvVbpmZpjoCUipPIMxCVLdjE5eq9BK6OOCc9qVb
EM3rj2VoUqTjuxDZHnr2Kp5J04zyOxZS1F6PmsdaKduGhC19MnIzYg2iIz06fGsc
G4Ero8CnrWRJojdF1v2hluy3zJj+3LXa9WNWkAcbfvzWkZ4evJ0rN48rwmWHeHuh
nzn8wcdiltTMAPMyUDMghsts/bFdNRwZzlRnvJ4=
-----END CERTIFICATE-----
Generated at Mon Jun 3 10:56:21 2024 by rpki-client on console-fra.rpki-client.org