Module rpki::crl

Certificate Revocation Lists for RPKI.

Much like for certificates, RPKI reuses X.509 for its certifcate revocation lists (CRLs), limiting the values that are allowed in the various fields.

This module implements the CRLs themselves via the type Crl as well as a CrlStore that can keep several CRLs which may be helpful during validation.

The RPKI CRL profile is defined in RFC 6487 based on the Internet RPIX profile defined in RFC 5280.

Structs

Crl	An RPKI certificate revocation list.
CrlEntry	An entry in the revoked certificates list.
CrlStore	A place to cache CRLs for reuse.
Extensions	Extensions of a RPKI certificate revocation list.
RevokedCertificates	The list of revoked certificates.
RevokedCertificatesIter	An iterator over the entries in the list of revoked certificates.