Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30GhtbbNV9yepXAggH_pGzuk_U0.cer
File: 30GhtbbNV9yepXAggH_pGzuk_U0.cer (raw, json)
Hash identifier: aNlB+L9ODleEhplasbro6o+m/NPaBDbWhf+uOX4dT8Q=
Subject key identifier: DF:41:A1:B5:B6:CD:57:DC:9E:A5:70:20:80:7F:E9:1B:3B:A4:FD:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198684D29B374C20F2B36CA2D6B9FC7525F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://krill.signalx.cloud/repo/signalx-rpki/5/DF41A1B5B6CD57DC9EA57020807FE91B3BA4FD4D.mft
caRepository: rsync://krill.signalx.cloud/repo/signalx-rpki/5/
Notify URL: https://krill.signalx.cloud/rrdp/notification.xml
Certificate not before: Sat 02 Aug 2025 01:02:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214402
AS: 214714
Validation: Failed, certificate revoked on Mon 04 Aug 2025 08:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:4d:29:b3:74:c2:0f:2b:36:ca:2d:6b:9f:c7:52:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 2 01:02:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df41a1b5b6cd57dc9ea57020807fe91b3ba4fd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:24:ea:ee:0e:a3:33:fc:36:c7:ae:d6:8b:
41:65:5b:d9:a8:47:1b:15:ce:ce:f0:31:53:0d:61:
fe:1e:eb:a5:9e:6e:1a:b1:80:98:61:27:0b:c8:b8:
00:74:2a:4c:ae:bd:75:39:4c:4a:ba:ad:f9:c6:76:
84:ac:75:06:84:68:5a:43:97:db:a7:8b:7b:69:ae:
56:2b:d1:07:22:c8:09:e5:2e:51:b9:fd:d6:7a:8e:
b1:1b:8f:d9:c5:9c:67:8c:2e:6f:4b:29:1c:c2:28:
b3:3d:ff:db:69:cd:d0:85:12:a7:14:72:0b:be:83:
6a:b9:1b:cf:ee:46:c4:d5:18:bb:5f:aa:ba:30:92:
74:14:d2:1b:58:26:21:ef:d6:2c:42:73:7e:b3:cf:
49:35:61:0e:5e:3c:19:a6:a6:1b:d3:ad:93:ea:88:
0f:a9:0c:8d:79:05:89:5b:74:76:7c:32:ec:f7:78:
3f:5c:28:e0:bc:2f:e3:3f:e7:36:52:94:f1:54:fc:
97:1b:2d:46:d8:6e:87:d0:56:22:3f:e0:3a:c2:f7:
e6:1e:77:47:1a:c5:78:2b:8e:f7:e8:fd:86:9f:ff:
f7:fe:3c:2a:92:98:65:02:d2:a5:fc:62:50:81:f1:
8c:d9:dd:6b:e2:eb:a8:bf:71:45:6a:e2:66:ee:50:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:A1:B5:B6:CD:57:DC:9E:A5:70:20:80:7F:E9:1B:3B:A4:FD:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/5/
RPKI Manifest - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/5/DF41A1B5B6CD57DC9EA57020807FE91B3BA4FD4D.mft
RPKI Notify - URI:https://krill.signalx.cloud/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214402
214714
Signature Algorithm: sha256WithRSAEncryption
75:2c:78:67:3f:45:a8:88:bd:ec:61:51:ff:62:58:53:b5:cf:
5e:d6:df:bb:b0:60:f8:d7:9d:0d:37:5e:80:b5:d7:fe:b1:7b:
6b:7a:93:e3:d5:25:48:ce:61:bd:ca:b8:2e:68:a5:08:5b:f4:
fa:b2:e0:f4:bf:39:08:6a:44:0b:c9:b2:6b:1b:be:37:0a:d5:
ba:fe:60:19:22:27:c1:a8:8d:4c:f2:eb:72:a3:d2:78:97:34:
86:97:15:2f:f1:24:d3:ed:f9:fb:b7:04:d8:49:b0:7a:13:0a:
19:22:70:81:13:af:34:2a:e8:4e:c5:a2:0d:1e:6d:fc:76:0e:
d3:2e:08:8d:81:b1:ba:5e:ee:ce:ef:a1:4d:38:b3:cd:b5:b6:
73:f2:bc:e3:44:81:6f:33:7d:5c:cd:b1:4c:2c:6c:b4:39:a3:
67:2c:2c:0c:ea:b8:99:91:6a:c8:a9:fd:3c:b1:c0:82:12:b8:
8b:10:41:1d:f7:f0:84:39:a3:29:e1:dd:f8:dc:0e:46:27:00:
d9:ec:77:e6:ba:c5:96:50:57:63:41:ad:ca:36:02:ee:20:e4:
7f:b2:23:be:d1:41:88:e0:a2:85:e9:8d:5c:39:c5:f5:ac:aa:
bb:11:7c:38:cd:d4:77:0f:8d:15:4e:89:70:df:0f:7f:3d:e0:
88:43:f7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:45:28 2025 by rpki-client