Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LXLn1v2r0wPEmdspBAcKQuOayIc.cer
File: LXLn1v2r0wPEmdspBAcKQuOayIc.cer (raw, json)
Hash identifier: gDRWtKAfyOMRhiIWFfsR8r07cqkUq9bsny5ZJD1aaK0=
Subject key identifier: 2D:72:E7:D6:FD:AB:D3:03:C4:99:DB:29:04:07:0A:42:E3:9A:C8:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01985A8867BB5644F958205E52A6EA54CFB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.signalx.ro/repo/signalx-rpki/1/2D72E7D6FDABD303C499DB2904070A42E39AC887.mft
caRepository: rsync://rpki.signalx.ro/repo/signalx-rpki/1/
Notify URL: https://rpki.signalx.ro/rrdp/notification.xml
Certificate not before: Wed 30 Jul 2025 08:52:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214402
AS: 214714
Validation: Failed, certificate revoked on Sat 02 Aug 2025 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:88:67:bb:56:44:f9:58:20:5e:52:a6:ea:54:cf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 30 08:52:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d72e7d6fdabd303c499db2904070a42e39ac887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:e6:05:27:92:94:58:fa:2e:48:07:59:bf:
8b:02:9b:3f:31:8e:3b:2d:51:a6:7e:0a:25:f8:2b:
d7:8d:48:cd:d1:46:33:e2:65:23:bb:02:38:89:e1:
b9:4d:f3:44:85:a4:2d:66:9c:93:d3:66:d7:3f:e3:
a4:ff:93:8d:d4:d5:2d:9d:75:ea:71:65:1c:37:67:
76:4d:21:76:07:13:e3:aa:1a:ef:ad:7d:76:62:f1:
89:0f:0d:f1:54:88:d1:43:49:19:0c:e1:f3:d7:3e:
56:c5:04:08:ee:d1:63:74:a7:f4:0d:b3:90:13:ad:
cd:eb:88:35:47:86:95:21:49:9f:57:a1:9e:1f:67:
6d:2a:5a:33:aa:99:d1:54:91:17:c7:d9:fa:2e:a0:
f9:26:f2:4d:62:7b:50:ca:4b:9e:47:43:c9:8c:92:
36:a5:86:c3:f8:be:6e:e5:de:ff:2e:9f:97:1f:64:
70:f3:d3:28:16:22:42:f2:df:74:e0:06:fa:8e:d8:
b6:2d:2a:f7:aa:df:49:df:1b:98:3d:22:a6:f4:04:
d4:22:41:e9:64:39:94:99:ba:51:8b:26:8a:21:b5:
d9:15:66:48:97:f3:c1:bd:d8:03:b1:f1:ac:e2:4a:
50:17:21:3a:b0:b0:1c:e1:30:ce:97:cb:b9:9f:d4:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:72:E7:D6:FD:AB:D3:03:C4:99:DB:29:04:07:0A:42:E3:9A:C8:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/1/
RPKI Manifest - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/1/2D72E7D6FDABD303C499DB2904070A42E39AC887.mft
RPKI Notify - URI:https://rpki.signalx.ro/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214402
214714
Signature Algorithm: sha256WithRSAEncryption
6b:4a:36:68:5a:c5:69:d6:26:aa:a8:1e:df:58:a4:64:22:22:
8f:7e:6b:ee:db:f0:5e:97:9d:3a:de:31:45:54:29:e7:17:2a:
57:9f:f7:06:67:9a:76:df:d8:f8:38:9d:31:f1:1d:db:f9:1c:
0e:1a:7e:a2:76:ad:01:1e:8d:14:c7:f4:9a:48:59:46:a1:c2:
01:26:e7:a1:fa:c2:c0:77:0b:11:4a:4a:8f:2c:23:8d:35:39:
43:ab:24:17:d9:2b:39:00:a4:cb:39:c9:e7:a6:f2:28:17:2a:
92:b5:9f:d3:b0:7b:8c:91:a0:73:ea:bc:63:b0:2f:7a:3b:58:
5b:2a:d1:ea:1f:d0:06:02:a5:35:b1:c9:0f:89:8a:fd:17:78:
bc:49:77:6e:f1:1e:de:9c:8b:3a:f5:ed:f4:49:53:1c:d0:79:
12:10:d6:fe:03:b1:2e:f8:2c:b2:1b:87:90:7c:ee:95:63:9c:
d4:ec:ac:a2:85:d9:13:c4:d3:d7:a4:8a:85:c5:da:1f:a0:eb:
ae:70:32:37:a5:ec:b8:d4:a6:cb:0a:e8:7a:8d:f4:92:2c:13:
0d:09:66:19:e8:f0:45:5b:cd:4b:58:ee:f2:81:e3:a3:f6:7a:
40:88:71:7e:2f:e8:2e:73:d8:69:62:21:28:d1:e6:8c:9e:61:
36:71:34:eb
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZhaiGe7VkT5WCBeUqbqVM+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzMwMDg1MjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDcyZTdkNmZkYWJkMzAzYzQ5OWRiMjkwNDA3MGE0MmUzOWFjODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT/mBSeSlFj6LkgHWb+LAps/MY47
LVGmfgol+CvXjUjN0UYz4mUjuwI4ieG5TfNEhaQtZpyT02bXP+Ok/5ON1NUtnXXq
cWUcN2d2TSF2BxPjqhrvrX12YvGJDw3xVIjRQ0kZDOHz1z5WxQQI7tFjdKf0DbOQ
E63N64g1R4aVIUmfV6GeH2dtKlozqpnRVJEXx9n6LqD5JvJNYntQykueR0PJjJI2
pYbD+L5u5d7/Lp+XH2Rw89MoFiJC8t904Ab6jti2LSr3qt9J3xuYPSKm9ATUIkHp
ZDmUmbpRiyaKIbXZFWZIl/PBvdgDsfGs4kpQFyE6sLAc4TDOl8u5n9TRVwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFC1y59b9q9MDxJnbKQQHCkLjmsiHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgesGCCsGAQUFBwELBIHeMIHbMDgGCCsGAQUFBzAFhixyc3lu
YzovL3Jwa2kuc2lnbmFseC5yby9yZXBvL3NpZ25hbHgtcnBraS8xLzBkBggrBgEF
BQcwCoZYcnN5bmM6Ly9ycGtpLnNpZ25hbHgucm8vcmVwby9zaWduYWx4LXJwa2kv
MS8yRDcyRTdENkZEQUJEMzAzQzQ5OURCMjkwNDA3MEE0MkUzOUFDODg3Lm1mdDA5
BggrBgEFBQcwDYYtaHR0cHM6Ly9ycGtpLnNpZ25hbHgucm8vcnJkcC9ub3RpZmlj
YXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1r
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEIAQH/BBAw
DqAMMAoCAwNFggIDA0a6MA0GCSqGSIb3DQEBCwUAA4IBAQBrSjZoWsVp1iaqqB7f
WKRkIiKPfmvu2/Bel5063jFFVCnnFypXn/cGZ5p239j4OJ0x8R3b+RwOGn6idq0B
Ho0Ux/SaSFlGocIBJueh+sLAdwsRSkqPLCONNTlDqyQX2Ss5AKTLOcnnpvIoFyqS
tZ/TsHuMkaBz6rxjsC96O1hbKtHqH9AGAqU1sckPiYr9F3i8SXdu8R7enIs69e30
SVMc0HkSENb+A7Eu+CyyG4eQfO6VY5zU7KyihdkTxNPXpIqFxdofoOuucDI3pey4
1KbLCuh6jfSSLBMNCWYZ6PBFW81LWO7ygeOj9npAiHF+L+guc9hpYiEo0eaMnmE2
cTTr
-----END CERTIFICATE-----
Generated at Sun Aug 31 10:32:09 2025 by rpki-client