Certificate
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1C36AAFD62454C67A3AE94C60A9AAE465A9CAFE2.cer
File: 1C36AAFD62454C67A3AE94C60A9AAE465A9CAFE2.cer (raw, json)
Hash identifier: UA3UvZQerXJp51NUO3KlmDsHvpFdTlwP5yH8F9gYHZU=
Subject key identifier: 1C:36:AA:FD:62:45:4C:67:A3:AE:94:C6:0A:9A:AE:46:5A:9C:AF:E2
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 136D4CD870F97ADE46E702E7657CC9DD716D7D68
Authority info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest: rsync://rpki.ezdomain.ru/repo/localname/1/1C36AAFD62454C67A3AE94C60A9AAE465A9CAFE2.mft
caRepository: rsync://rpki.ezdomain.ru/repo/localname/1
Notify URL: https://rpki.ezdomain.ru/rrdp/notification.xml
Certificate not before: Sun 11 Dec 2022 05:29:01 +0000
Certificate not after: Sun 10 Dec 2023 05:34:01 +0000
Subordinate resources: IP: 2a0a:6040:200::/40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6d:4c:d8:70:f9:7a:de:46:e7:02:e7:65:7c:c9:dd:71:6d:7d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Dec 11 05:29:01 2022 GMT
Not After : Dec 10 05:34:01 2023 GMT
Subject: CN=1C36AAFD62454C67A3AE94C60A9AAE465A9CAFE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:35:fc:cd:ae:7e:f6:e3:74:1d:26:5f:e6:
3f:40:8d:fe:eb:e4:88:fb:50:3f:55:e0:d0:0b:59:
03:46:ed:de:a2:15:7d:d7:7f:ec:c0:a8:5d:74:c8:
66:12:47:c5:08:20:dc:c0:c8:4f:c9:6d:22:e2:54:
44:ac:98:31:27:0e:08:43:6e:ba:e5:b0:b6:52:6d:
2a:ef:e1:ac:9c:a8:b5:b0:b8:c1:0a:98:d3:c9:2c:
f9:eb:13:59:26:72:26:22:ff:67:c4:e7:3b:ae:cb:
e9:ba:c7:30:d1:30:aa:b2:18:dd:6e:93:cc:ad:cc:
a6:fe:d9:75:2d:c1:8e:72:4a:4a:87:a2:18:07:fb:
78:24:11:e2:04:c3:9d:71:73:86:c0:19:e3:dd:53:
3e:27:ea:d3:cb:59:21:a1:b8:dd:ab:3a:63:63:af:
e3:3d:6b:ff:05:98:91:a4:f6:53:c9:21:f3:d0:5f:
be:76:98:22:b2:85:68:90:2c:fd:af:1d:45:98:06:
45:3c:16:7b:92:83:d7:ae:51:2e:8c:ad:ad:2e:e2:
b4:a8:cd:86:51:96:b0:93:b6:15:17:a0:df:b9:14:
7a:fd:81:9c:ec:49:bd:fd:1e:e3:d5:72:a0:12:cb:
92:af:d7:a0:4d:6f:ad:56:92:14:35:15:35:48:93:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1C:36:AA:FD:62:45:4C:67:A3:AE:94:C6:0A:9A:AE:46:5A:9C:AF:E2
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ezdomain.ru/repo/localname/1
RPKI Manifest - URI:rsync://rpki.ezdomain.ru/repo/localname/1/1C36AAFD62454C67A3AE94C60A9AAE465A9CAFE2.mft
RPKI Notify - URI:https://rpki.ezdomain.ru/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:200::/40
Signature Algorithm: sha256WithRSAEncryption
44:e4:ba:fa:ed:02:64:e8:ba:cf:43:ce:6e:f9:a7:c5:56:65:
c5:5a:64:c9:0c:52:67:7e:5f:1a:76:4d:1d:e3:cb:fc:51:82:
ac:4a:18:8f:0e:d9:f1:44:a9:46:d8:3d:10:dc:82:5e:b3:33:
6e:45:d5:55:43:5f:9b:3f:fb:66:62:cd:0f:e0:a9:2e:57:ee:
38:8e:f1:9d:5a:a1:39:bc:b4:b9:2b:e3:9f:66:77:5d:03:89:
e0:a1:d0:9b:00:ef:bc:4e:a1:e5:3f:c4:ea:94:b0:cb:59:45:
49:1e:42:7f:bd:f4:5c:5a:62:b1:75:ea:8a:b3:2f:7b:5a:8e:
5d:29:63:82:5a:7e:3a:6d:ee:03:d9:bc:bc:8a:92:19:32:15:
ab:c5:01:df:04:7e:68:67:05:3f:fa:43:87:19:a9:31:a2:9f:
0e:05:48:82:68:fa:6e:52:4e:b1:79:d1:17:9f:09:b8:3f:c3:
37:f7:89:52:1c:2b:fe:27:69:0d:1a:5f:28:de:11:a4:99:77:
91:a8:44:39:bc:2e:da:d5:71:d9:c8:3b:d3:29:6e:ad:8e:40:
7f:74:61:27:ba:fc:62:44:a0:fa:6a:01:ae:e0:b4:53:2a:82:
b8:c1:0d:65:be:60:4e:dc:37:f9:ac:3f:8d:3d:0e:77:79:44:
0e:2c:99:9c
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUE21M2HD5et5G5wLnZXzJ3XFtfWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMTEwNTI5MDFaFw0yMzEyMTAwNTM0MDFaMDMxMTAvBgNV
BAMTKDFDMzZBQUZENjI0NTRDNjdBM0FFOTRDNjBBOUFBRTQ2NUE5Q0FGRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMTX8za5+9uN0HSZf5j9Ajf7r
5Ij7UD9V4NALWQNG7d6iFX3Xf+zAqF10yGYSR8UIINzAyE/JbSLiVESsmDEnDghD
brrlsLZSbSrv4aycqLWwuMEKmNPJLPnrE1kmciYi/2fE5zuuy+m6xzDRMKqyGN1u
k8ytzKb+2XUtwY5ySkqHohgH+3gkEeIEw51xc4bAGePdUz4n6tPLWSGhuN2rOmNj
r+M9a/8FmJGk9lPJIfPQX752mCKyhWiQLP2vHUWYBkU8FnuSg9euUS6Mra0u4rSo
zYZRlrCTthUXoN+5FHr9gZzsSb39HuPVcqASy5Kv16BNb61WkhQ1FTVIk9rXAgMB
AAGjggJ2MIICcjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQcNqr9YkVMZ6Ou
lMYKmq5GWpyv4jAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV
HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl
cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2
MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDB3BggrBgEFBQcBAQRrMGkwZwYI
KwYBBQUHMAKGW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pBUFBJ
RS1SUEtJLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3NkQ4NUFG
OS5jZXIwgecGCCsGAQUFBwELBIHaMIHXMDUGCCsGAQUFBzAFhilyc3luYzovL3Jw
a2kuZXpkb21haW4ucnUvcmVwby9sb2NhbG5hbWUvMTBiBggrBgEFBQcwCoZWcnN5
bmM6Ly9ycGtpLmV6ZG9tYWluLnJ1L3JlcG8vbG9jYWxuYW1lLzEvMUMzNkFBRkQ2
MjQ1NEM2N0EzQUU5NEM2MEE5QUFFNDY1QTlDQUZFMi5tZnQwOgYIKwYBBQUHMA2G
Lmh0dHBzOi8vcnBraS5lemRvbWFpbi5ydS9ycmRwL25vdGlmaWNhdGlvbi54bWww
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQC
AAIwCAMGACoKYEACMA0GCSqGSIb3DQEBCwUAA4IBAQBE5Lr67QJk6LrPQ85u+afF
VmXFWmTJDFJnfl8adk0d48v8UYKsShiPDtnxRKlG2D0Q3IJeszNuRdVVQ1+bP/tm
Ys0P4KkuV+44jvGdWqE5vLS5K+OfZnddA4ngodCbAO+8TqHlP8TqlLDLWUVJHkJ/
vfRcWmKxdeqKsy97Wo5dKWOCWn46be4D2by8ipIZMhWrxQHfBH5oZwU/+kOHGakx
op8OBUiCaPpuUk6xedEXnwm4P8M394lSHCv+J2kNGl8o3hGkmXeRqEQ5vC7a1XHZ
yDvTKW6tjkB/dGEnuvxiRKD6agGu4LRTKoK4wQ1lvmBO3Df5rD+NPQ53eUQOLJmc
-----END CERTIFICATE-----
Generated at Sun Nov 5 03:48:31 2023 by rpki-client on console-ams.rpki-client.org