Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3qpe4dcNYY7NkB2u26jIYjuvyv4.cer
File: 3qpe4dcNYY7NkB2u26jIYjuvyv4.cer (raw, json)
Hash identifier: pwyUicUwulRuukAqgYIEhP8dSUoBs1TDp7aHP2RY8WE=
Subject key identifier: DE:AA:5E:E1:D7:0D:61:8E:CD:90:1D:AE:DB:A8:C8:62:3B:AF:CA:FE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3219
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:50:17 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328957
IP: 102.212.176.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12825 (0x3219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:50:17 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B506BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:f8:ac:9a:da:15:64:d4:40:01:77:17:50:
ba:cf:8c:eb:c5:55:3d:4b:ff:4c:ee:e5:3c:9a:57:
9f:ef:ea:74:a3:7f:f7:7c:8e:4f:35:b8:16:e0:2e:
87:66:43:a8:e6:7c:aa:8c:d8:68:a4:aa:93:4d:71:
34:e2:9e:96:84:e2:08:f7:0d:76:e9:03:79:42:e6:
a9:34:1f:ad:41:6c:ef:dd:61:17:7a:5d:74:d2:02:
de:44:b9:e8:3a:9d:71:88:48:c7:d8:de:fb:63:9e:
c9:c4:24:9d:cb:80:a2:4c:a9:9b:4a:87:80:f9:fa:
4b:9f:2a:7c:17:6b:f0:f4:c8:e3:8d:de:ca:53:93:
ba:7c:97:45:6c:0b:2a:3b:cd:e7:e9:2a:02:65:10:
85:d4:9f:63:be:45:78:83:fd:16:ff:06:ae:88:0c:
18:79:44:54:e1:47:6e:1c:38:a8:61:cc:c3:6f:15:
a9:cc:7b:bf:f8:4b:de:c1:61:5d:eb:5f:aa:49:7a:
84:6a:f1:95:4e:f1:af:3c:52:32:9e:75:22:d1:9a:
c9:8d:81:12:93:05:db:0e:5e:2e:a0:35:d8:a4:11:
da:a4:01:6f:86:88:8b:d3:2f:73:97:5a:c9:67:72:
4f:33:0d:cc:26:be:6a:9b:e1:63:b0:25:14:98:f9:
bf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AA:5E:E1:D7:0D:61:8E:CD:90:1D:AE:DB:A8:C8:62:3B:AF:CA:FE
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328957
sbgp-ipAddrBlock: critical
IPv4:
102.212.176.0/22
Signature Algorithm: sha256WithRSAEncryption
84:f1:10:63:06:48:bd:c4:0e:f1:09:45:8a:2c:d6:c2:d4:5d:
55:2e:3a:61:36:d8:6d:7e:33:0d:ee:21:d7:9e:6e:27:52:ac:
7f:ac:a8:17:3f:e0:cc:c5:87:97:5e:10:82:72:62:ca:33:52:
43:89:72:b8:7b:78:f0:21:6e:55:6f:3d:2a:85:87:6d:22:0d:
65:8b:1e:5e:12:2c:7d:42:34:c6:a8:54:79:37:d3:b1:b5:04:
e2:81:8f:59:f2:dd:6a:7a:ea:6a:97:17:c4:6b:19:f9:88:f2:
b5:a9:d9:00:a4:d4:c2:33:af:35:43:54:a3:66:9e:14:cd:b6:
23:7b:8b:b9:34:9f:15:3b:bf:5e:05:8b:16:57:62:41:57:b4:
1d:5d:63:15:f7:67:b2:ca:a5:7c:79:ab:50:26:c0:7d:7e:a6:
a0:ef:a7:9e:b9:fa:0a:87:97:8a:8a:f9:e7:54:90:fa:49:d8:
da:11:75:18:db:da:7a:b1:83:66:d4:c9:72:b3:f3:e3:f8:53:
d9:c8:da:41:9a:42:8b:8a:59:09:86:d9:48:12:68:9c:4f:17:
08:a2:23:de:72:ad:d3:01:37:c0:ef:2f:47:9d:9a:35:69:3b:
3d:14:5f:7b:45:bf:76:d3:70:44:9b:c8:e2:8c:5d:28:a6:d1:
93:6a:7a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:54:19 2025 by rpki-client