Certificate
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/9AA402FA4661377E63C48D56ADA4708F46388DF8.cer
File: 9AA402FA4661377E63C48D56ADA4708F46388DF8.cer (raw, json)
Hash identifier: B988ONnUTyjYpYlZD/Nt2BtsfRrZUvFFMjPEhuuT52E=
Subject key identifier: 9A:A4:02:FA:46:61:37:7E:63:C4:8D:56:AD:A4:70:8F:46:38:8D:F8
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 42F6BA2636FF59409A74B406BE7F36C558EA65B4
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/9AA402FA4661377E63C48D56ADA4708F46388DF8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 03 Jun 2024 07:24:45 +0000
Certificate not after: Mon 02 Jun 2025 07:29:45 +0000
Subordinate resources: IP: 2a05:dfc1:5f00::/40
IP: 2a05:dfc1:8e00::/40
Validation: Failed, certificate revoked on Tue 04 Jun 2024 08:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f6:ba:26:36:ff:59:40:9a:74:b4:06:be:7f:36:c5:58:ea:65:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Jun 3 07:24:45 2024 GMT
Not After : Jun 2 07:29:45 2025 GMT
Subject: CN=9AA402FA4661377E63C48D56ADA4708F46388DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:fc:e6:f1:d2:99:22:5a:d9:2a:cd:22:3b:
d0:29:a6:d8:f8:e3:74:88:f6:f2:db:91:2a:fa:fa:
37:8f:78:b9:aa:ec:47:fa:96:6b:a1:0f:0b:b5:bd:
12:04:70:71:57:88:e2:ba:39:d3:38:8f:0d:9d:cc:
7b:e1:d0:4c:40:72:dc:69:53:b0:15:2f:72:8c:8a:
f5:01:a3:d2:2c:84:df:d2:4b:48:8e:ce:69:8d:93:
2d:6b:5a:b3:c4:40:13:a9:de:9a:99:60:e1:71:6c:
e5:64:17:94:c3:e8:b3:68:d5:8f:70:7d:10:0f:e9:
46:17:88:8a:c3:37:29:c4:82:ae:fe:eb:e6:8c:88:
8e:06:3d:ce:04:8c:4b:2f:ef:b1:a0:45:4c:0c:b0:
9e:5b:d6:01:60:f9:30:e3:de:81:ad:04:db:a2:21:
53:13:0e:e4:03:fd:43:f2:10:3d:f5:24:29:1a:aa:
d4:eb:a5:1f:b2:96:d1:cd:d8:9f:b1:cf:fd:c5:b8:
9a:2a:bf:9a:1e:e7:46:b5:14:da:4d:a2:c6:78:b5:
f3:9a:01:91:d4:aa:c4:e9:70:af:87:eb:b5:8f:7c:
7b:67:27:c5:a2:c1:08:62:98:50:3d:c6:fe:7f:56:
54:24:aa:09:04:d1:cc:50:42:4e:3a:31:4d:06:5f:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9A:A4:02:FA:46:61:37:7E:63:C4:8D:56:AD:A4:70:8F:46:38:8D:F8
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/9AA402FA4661377E63C48D56ADA4708F46388DF8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:5f00::/40
2a05:dfc1:8e00::/40
Signature Algorithm: sha256WithRSAEncryption
3f:b5:9f:5f:e5:9e:9b:f9:9e:bd:99:a1:5c:8f:95:aa:eb:35:
93:d0:c7:fb:6b:e1:d1:29:d3:ba:06:2b:92:4b:b6:ca:5d:57:
ea:7f:84:cf:b5:bc:60:ee:d0:e3:ae:4c:b5:da:67:2c:48:74:
2d:97:23:b5:3a:e6:e7:53:f0:cc:2d:ca:cc:54:66:ec:c2:d1:
ce:9c:72:8e:f9:ae:a7:f9:af:b2:00:ef:c7:b9:08:1a:14:d0:
b1:03:19:47:88:92:49:c6:39:c3:4e:05:e4:1a:16:86:50:e7:
56:83:7a:f2:c8:d7:b1:41:8e:57:b1:eb:03:4f:45:62:0c:0a:
d6:61:69:c4:69:93:89:78:e1:71:76:77:fa:2c:b3:fc:f3:cb:
84:e3:82:9c:e8:82:8f:71:cd:51:49:a3:fb:b6:7f:56:d9:4a:
ed:25:d2:ec:13:26:44:6f:bf:26:13:3e:7c:f0:07:4c:7a:d7:
fe:61:a2:24:c7:b5:f7:c3:e8:ef:ca:b4:b7:3a:51:1f:98:c1:
d0:bd:e7:78:4f:af:d7:4c:55:5c:5c:00:ac:9a:6f:44:41:89:
a4:11:89:7a:00:f4:39:75:e7:af:eb:bc:b3:c6:9e:ee:3d:a5:
97:3b:50:15:fe:8b:79:d2:a8:68:0d:58:fc:fc:fd:cf:67:cd:
2e:04:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org