Certificate
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6.cer
File: C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6.cer (raw, json)
Hash identifier: b7aglfk+z2E3Zyv0pThhYOdsJdVt09wcKizCLJtWkd4=
Subject key identifier: C5:FD:B3:24:9C:FD:C7:86:3C:2B:AA:8B:CE:97:CE:4C:3C:F6:37:C6
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 10C270DC47C9FBE098D3FB9CD58E4C49C712D928
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/0/C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/0
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 21 Feb 2023 13:45:45 +0000
Certificate not after: Tue 20 Feb 2024 13:50:45 +0000
Subordinate resources: IP: 2a0a:6040:3e00::/40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c2:70:dc:47:c9:fb:e0:98:d3:fb:9c:d5:8e:4c:49:c7:12:d9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Feb 21 13:45:45 2023 GMT
Not After : Feb 20 13:50:45 2024 GMT
Subject: CN=C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:c2:d9:2e:fe:ab:98:ff:ba:04:5a:49:9b:
d6:74:da:13:b2:38:8c:d0:c5:a5:79:17:13:0c:f8:
a4:05:8c:eb:6d:f2:1c:5b:77:66:25:8c:10:79:7f:
7f:92:37:1b:86:2e:0b:9a:6a:56:c2:44:49:bb:9c:
cb:13:25:df:19:c8:7c:3d:3d:7c:1b:e5:81:0c:1c:
59:6e:ea:f7:10:81:31:3c:41:b7:45:50:a7:f4:6d:
87:45:0c:9a:92:21:78:b4:83:62:02:af:83:d0:b1:
04:5d:50:ae:a0:1d:e0:88:41:cc:b5:52:fd:95:f5:
a9:1c:8b:d6:b9:f8:8d:75:d5:05:6e:18:ee:69:50:
1e:4d:3b:ac:2c:5a:ca:49:66:a5:e9:85:0c:63:ae:
b7:59:e4:c7:bf:ab:fb:03:ff:42:86:0b:35:55:f1:
a4:84:81:a4:f6:ec:0b:71:49:34:51:46:0e:a4:28:
76:cb:29:61:d8:21:73:00:06:eb:ed:b3:8f:89:1e:
a7:b3:0d:33:52:7f:f9:5a:70:a0:66:fe:72:c1:2c:
cc:3f:7e:e7:40:71:4e:47:23:e1:75:ea:0c:1d:9a:
0c:8c:60:96:64:d6:93:91:53:11:86:2d:ae:02:aa:
f7:af:77:1f:d4:20:24:9b:7c:14:a3:b2:c8:a4:2b:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C5:FD:B3:24:9C:FD:C7:86:3C:2B:AA:8B:CE:97:CE:4C:3C:F6:37:C6
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/0
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/0/C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:3e00::/40
Signature Algorithm: sha256WithRSAEncryption
98:66:29:9d:f7:66:b5:b2:24:a4:98:03:04:10:cb:81:9f:bd:
2c:05:24:66:07:c2:08:1b:18:3f:f8:75:b9:28:38:60:0e:d8:
1e:36:2f:ae:d8:15:e0:af:45:a3:81:2d:27:3a:b0:eb:3b:2f:
6d:a6:07:80:a7:a0:71:0a:ac:63:62:90:c5:e9:e3:2f:e0:46:
c7:f8:50:4e:33:76:68:74:88:1d:39:c6:25:0d:43:c1:b4:b5:
36:ec:6f:99:d2:90:79:2d:09:af:da:62:00:5f:18:c5:b5:97:
23:8b:58:75:2a:83:92:25:20:75:7b:27:cd:89:30:a7:da:75:
b2:67:0d:e6:9e:0e:15:8b:14:51:7f:ba:05:de:85:c6:ab:21:
13:db:4d:46:9b:d1:40:b3:2c:8d:86:98:ab:9d:61:41:a3:7c:
7f:78:11:04:83:e3:f0:d8:72:7a:13:92:3e:6a:26:6c:fc:80:
fd:43:55:e1:07:23:1e:15:2d:5e:79:8c:df:c6:58:73:3f:98:
64:e0:50:b6:6b:dd:d2:34:9d:1f:68:24:d0:22:8a:8d:9a:d5:
c8:6f:33:7c:ed:d8:3e:3d:0f:56:3a:c2:06:de:7c:37:7f:b8:
31:1b:00:37:3b:8b:b0:87:4b:63:9c:d7:ac:b6:18:57:3e:ba:
b8:0d:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 5 03:55:45 2023 by rpki-client on console-fra.rpki-client.org