Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.cer
File: D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.cer (raw, json)
Hash identifier: L3pNH/tYGaiDbiFp7vm2I6fUKSSb5lw0gASl2aWiJsI=
Subject key identifier: D7:8A:AE:DB:C4:FB:E1:7F:22:BC:8A:A8:B7:E7:78:67:47:BC:D0:C5
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 03ED2E0E3B9C9D9DFDDB15CBEBDB0C94B038C729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Manifest: rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.mft
caRepository: rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/
Notify URL: https://pub.krill.ausra.cloud/rrdp/notification.xml
Certificate not before: Sun 20 Aug 2023 21:01:50 +0000
Certificate not after: Sun 18 Aug 2024 21:06:50 +0000
Subordinate resources: IP: 2a13:df80:1::/48
IP: 2a13:df80:f400:: -- 2a13:df80:fbff:ffff:ffff:ffff:ffff:ffff
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ed:2e:0e:3b:9c:9d:9d:fd:db:15:cb:eb:db:0c:94:b0:38:c7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Aug 20 21:01:50 2023 GMT
Not After : Aug 18 21:06:50 2024 GMT
Subject: CN=D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:90:e4:d7:90:a8:7b:aa:2b:c9:3c:d2:0d:
c0:2e:03:b1:62:0c:39:f4:41:78:87:16:c1:e2:43:
87:2f:ba:18:b1:d0:d6:3a:9f:d6:6c:68:2c:c9:5e:
ac:04:91:3a:e2:f3:61:cc:74:27:30:82:0d:f1:90:
1b:4b:ee:71:d4:5e:78:4c:47:46:f4:04:fc:61:17:
78:d8:53:12:77:36:73:fe:68:db:e1:f4:90:67:c9:
86:bb:a8:51:85:8c:70:0b:91:03:dc:89:90:86:b5:
94:22:51:8a:26:fe:fb:96:ae:e4:28:bb:47:3a:00:
6a:6a:59:6f:ed:09:66:61:89:15:f7:69:6e:b7:16:
78:01:aa:d0:89:6c:3a:f6:48:38:a6:86:27:57:cb:
fd:39:a3:29:6d:8b:c9:ba:cd:8d:ba:13:ae:53:4e:
a8:77:ad:4e:57:a5:5c:68:97:db:c5:46:95:55:2b:
1f:d8:f8:7d:f0:25:b3:54:6a:55:c8:e9:87:86:ad:
71:6a:84:a9:bb:34:bf:be:2c:84:5f:be:f8:b8:2c:
b3:8b:06:c3:35:0a:2c:6e:bd:cb:af:69:7e:e1:3c:
41:16:89:24:d6:39:b1:96:72:49:99:48:d4:70:d2:
f8:82:68:73:63:cc:3b:a2:0e:eb:ba:f6:d8:be:e7:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D7:8A:AE:DB:C4:FB:E1:7F:22:BC:8A:A8:B7:E7:78:67:47:BC:D0:C5
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
CA Repository - URI:rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/
RPKI Manifest - URI:rsync://pub.krill.ausra.cloud/repo/Ausra-Systems-Internal-CA/1/D78AAEDBC4FBE17F22BC8AA8B7E7786747BCD0C5.mft
RPKI Notify - URI:https://pub.krill.ausra.cloud/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:1::/48
2a13:df80:f400::-2a13:df80:fbff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
21:bd:aa:38:3e:0e:63:19:8e:05:9f:d8:42:e9:04:d8:97:73:
56:15:8d:a8:c8:ee:a7:35:12:f6:c9:85:62:a2:83:62:13:a6:
6c:1e:75:ef:38:8e:27:f8:27:64:ae:24:e5:ec:b3:fb:ba:51:
b2:25:6d:17:9d:96:26:0e:2c:cd:6f:63:98:72:9d:c1:18:a1:
f1:22:c6:46:c8:b4:7f:98:ac:e9:fb:54:8e:91:ed:b8:c5:2a:
ab:0b:4f:1b:ed:d3:ab:32:11:94:fa:91:51:48:c4:46:dd:92:
38:0c:35:93:71:3e:94:a5:be:1b:09:4f:c5:52:15:67:aa:de:
ab:f3:e9:39:5e:23:3a:68:e6:a5:d9:63:e5:be:f0:9b:aa:28:
df:b4:0f:7d:ca:b4:cd:bd:02:cc:0a:f6:2f:71:80:75:00:53:
e0:a6:6a:20:4d:ac:50:24:cb:f4:6f:46:f7:71:96:09:b7:1e:
16:1c:74:07:b0:c1:33:ec:d2:f0:5f:c0:c6:9f:0c:bd:94:96:
9b:e5:58:e1:57:77:68:e8:e2:f6:47:a2:09:7c:b9:c1:84:2d:
39:3c:ea:f8:7e:82:be:c5:bf:7d:70:69:d4:36:23:54:9a:8a:
a5:63:61:18:7d:63:07:71:86:df:a3:b2:b5:b4:62:30:cc:7e:
d6:80:68:30
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUA+0uDjucnZ392xXL69sMlLA4xykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA4MjAyMTAxNTBaFw0yNDA4MTgyMTA2NTBaMDMxMTAvBgNV
BAMTKEQ3OEFBRURCQzRGQkUxN0YyMkJDOEFBOEI3RTc3ODY3NDdCQ0QwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFH5Dk15Coe6oryTzSDcAuA7Fi
DDn0QXiHFsHiQ4cvuhix0NY6n9ZsaCzJXqwEkTri82HMdCcwgg3xkBtL7nHUXnhM
R0b0BPxhF3jYUxJ3NnP+aNvh9JBnyYa7qFGFjHALkQPciZCGtZQiUYom/vuWruQo
u0c6AGpqWW/tCWZhiRX3aW63FngBqtCJbDr2SDimhidXy/05oylti8m6zY26E65T
Tqh3rU5XpVxol9vFRpVVKx/Y+H3wJbNUalXI6YeGrXFqhKm7NL++LIRfvvi4LLOL
BsM1CixuvcuvaX7hPEEWiSTWObGWckmZSNRw0viCaHNjzDuiDuu69ti+50aNAgMB
AAGjggLQMIICzDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXiq7bxPvhfyK8
iqi353hnR7zQxTAfBgNVHSMEGDAWgBTVw9XnD8mtELqQ1F3GZFTp46FGqDAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC9ENUMzRDVFNzBGQzlBRDEwQkE5MEQ0NURD
NjY0NTRFOUUzQTE0NkE4LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWNQVjV3
X0pyUkM2a05SZHhtUlU2ZU9oUnFnLmNlcjCCARkGCCsGAQUFBwELBIIBCzCCAQcw
SwYIKwYBBQUHMAWGP3JzeW5jOi8vcHViLmtyaWxsLmF1c3JhLmNsb3VkL3JlcG8v
QXVzcmEtU3lzdGVtcy1JbnRlcm5hbC1DQS8xLzB3BggrBgEFBQcwCoZrcnN5bmM6
Ly9wdWIua3JpbGwuYXVzcmEuY2xvdWQvcmVwby9BdXNyYS1TeXN0ZW1zLUludGVy
bmFsLUNBLzEvRDc4QUFFREJDNEZCRTE3RjIyQkM4QUE4QjdFNzc4Njc0N0JDRDBD
NS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcHViLmtyaWxsLmF1c3JhLmNsb3Vk
L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKhPfgAABMBADBgIqE9+A9AMG
AioT34D4MA0GCSqGSIb3DQEBCwUAA4IBAQAhvao4Pg5jGY4Fn9hC6QTYl3NWFY2o
yO6nNRL2yYViooNiE6ZsHnXvOI4n+CdkriTl7LP7ulGyJW0XnZYmDizNb2OYcp3B
GKHxIsZGyLR/mKzp+1SOke24xSqrC08b7dOrMhGU+pFRSMRG3ZI4DDWTcT6Upb4b
CU/FUhVnqt6r8+k5XiM6aOal2WPlvvCbqijftA99yrTNvQLMCvYvcYB1AFPgpmog
TaxQJMv0b0b3cZYJtx4WHHQHsMEz7NLwX8DGnwy9lJab5VjhV3do6OL2R6IJfLnB
hC05POr4foK+xb99cGnUNiNUmoqlY2EYfWMHcYbfo7K1tGIwzH7WgGgw
-----END CERTIFICATE-----
Generated at Tue May 21 15:21:41 2024 by rpki-client on console-ams.rpki-client.org