Certificate
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer
File: 498074B32285FE33C7B5A4A2FBB588257F5871A7.cer (raw, json)
Hash identifier: zXVdCpmw732ymqOO14T2tpm/vLsfX+KKL0jCcEdWipw=
Subject key identifier: 49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 1F32EA6D4DFC4C485BE23450C8E932232476EF17
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 16 Oct 2023 12:59:04 +0000
Certificate not after: Mon 14 Oct 2024 13:04:04 +0000
Subordinate resources: IP: 2a0a:6040:a100::/40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:32:ea:6d:4d:fc:4c:48:5b:e2:34:50:c8:e9:32:23:24:76:ef:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Oct 16 12:59:04 2023 GMT
Not After : Oct 14 13:04:04 2024 GMT
Subject: CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:44:d4:b6:e6:a0:4a:2b:9e:ea:3f:a4:39:
45:3d:ac:54:5c:3c:ea:ae:c1:c1:b4:32:c7:8c:c9:
d1:85:08:f2:d7:89:78:ce:c1:66:a2:98:da:68:3b:
4e:82:ed:3f:4b:d0:f4:1f:94:68:a4:74:9d:36:8f:
93:c3:4f:7b:0d:0d:00:3d:63:f0:99:03:c2:fb:5f:
68:35:4c:66:84:27:ac:e4:be:b1:d0:ca:5c:d4:2c:
13:a4:02:bd:84:6c:2c:d4:f1:b4:aa:1d:ff:25:e2:
14:ae:8d:10:a6:94:dd:e7:ac:87:e8:4e:6d:16:ca:
3c:e0:a0:10:b9:45:bb:2b:e0:34:6b:d8:1a:7c:fc:
74:bb:ea:30:2c:fc:ac:4c:dd:db:e7:6b:d5:45:ac:
49:cb:eb:4d:6f:de:ed:cc:45:f7:2c:90:8c:6c:1c:
94:df:22:e2:53:a1:ef:dd:9f:73:fa:df:c4:20:6e:
e3:5c:c0:47:78:22:4e:6c:70:c9:44:23:e2:60:21:
53:19:86:b5:c0:28:23:62:f6:e8:b5:43:b2:0c:d6:
17:ca:28:cc:02:1d:ea:fc:19:34:6f:54:e5:5a:7d:
cd:b6:05:76:ba:7f:10:14:24:48:61:36:a8:de:df:
97:e4:b7:90:5a:17:0a:d1:31:3a:3e:ce:df:bd:99:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a100::/40
Signature Algorithm: sha256WithRSAEncryption
3e:6f:0c:d8:a6:57:12:2b:3d:45:21:11:b4:27:61:1b:05:6f:
91:ee:1b:08:3c:a1:81:bd:ac:b3:af:5a:ad:8f:a3:84:12:2a:
39:ca:0a:64:9f:bc:98:f0:f8:f4:c0:79:00:4f:d0:ca:24:e7:
ce:25:d9:be:7f:27:7d:83:97:0e:22:16:a2:17:3b:68:9a:89:
ab:1a:bb:5f:c3:b7:17:67:89:7e:a3:f4:2b:b3:00:99:ea:f0:
22:b6:ae:e4:03:fb:f7:02:97:26:ee:d2:cb:ac:83:21:4a:be:
83:a6:f7:75:88:d0:ab:be:10:f2:2e:36:cb:c4:24:55:32:96:
b7:6c:b1:4d:cc:5a:98:5a:00:ee:d4:eb:ca:3a:3e:8e:b9:2a:
ef:f3:62:94:06:fb:bc:ee:e3:ac:13:c7:56:14:5f:d1:7b:a6:
a2:92:fc:3f:81:32:bc:16:3f:9c:b8:23:97:3b:a9:de:33:fd:
7f:ca:49:34:36:52:2f:a4:02:ca:9f:4b:84:c2:1d:44:86:22:
ba:f1:0a:f7:7c:f3:33:fa:65:ec:42:56:43:02:36:5d:95:28:
18:10:5c:7d:fb:1f:11:ae:1d:c1:f7:b5:34:2e:0e:04:90:3d:
12:f7:88:a2:10:af:f3:81:30:ca:b3:7f:6f:36:d2:41:f1:fd:
1f:65:fb:7d
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIUHzLqbU38TEhb4jRQyOkyIyR27xcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzEwMTYxMjU5MDRaFw0yNDEwMTQxMzA0MDRaMDMxMTAvBgNV
BAMTKDQ5ODA3NEIzMjI4NUZFMzNDN0I1QTRBMkZCQjU4ODI1N0Y1ODcxQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrETUtuagSiue6j+kOUU9rFRc
POquwcG0MseMydGFCPLXiXjOwWaimNpoO06C7T9L0PQflGikdJ02j5PDT3sNDQA9
Y/CZA8L7X2g1TGaEJ6zkvrHQylzULBOkAr2EbCzU8bSqHf8l4hSujRCmlN3nrIfo
Tm0WyjzgoBC5Rbsr4DRr2Bp8/HS76jAs/KxM3dvna9VFrEnL601v3u3MRfcskIxs
HJTfIuJToe/dn3P638QgbuNcwEd4Ik5scMlEI+JgIVMZhrXAKCNi9ui1Q7IM1hfK
KMwCHer8GTRvVOVafc22BXa6fxAUJEhhNqje35fkt5BaFwrRMTo+zt+9mdchAgMB
AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJgHSzIoX+M8e1
pKL7tYglf1hxpzAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV
HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl
cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2
MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw
gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0
QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL
BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFh
ZmM4ZWI4LzAvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS8xM2Y2ODU2MS0wYTc0LTRjY2EtYmY4Zi0xMmZh
YWFmYzhlYjgvMC80OTgwNzRCMzIyODVGRTMzQzdCNUE0QTJGQkI1ODgyNTdGNTg3
MUE3Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl
Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAoTANBgkqhkiG9w0BAQsF
AAOCAQEAPm8M2KZXEis9RSERtCdhGwVvke4bCDyhgb2ss69arY+jhBIqOcoKZJ+8
mPD49MB5AE/QyiTnziXZvn8nfYOXDiIWohc7aJqJqxq7X8O3F2eJfqP0K7MAmerw
Irau5AP79wKXJu7Sy6yDIUq+g6b3dYjQq74Q8i42y8QkVTKWt2yxTcxamFoA7tTr
yjo+jrkq7/NilAb7vO7jrBPHVhRf0XumopL8P4EyvBY/nLgjlzup3jP9f8pJNDZS
L6QCyp9LhMIdRIYiuvEK93zzM/pl7EJWQwI2XZUoGBBcffsfEa4dwfe1NC4OBJA9
EveIohCv84EwyrN/bzbSQfH9H2X7fQ==
-----END CERTIFICATE-----
Generated at Sun Nov 5 03:48:31 2023 by rpki-client on console-ams.rpki-client.org